Privacy Policy

LogiMenu – Status: January 2026

1) Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

LogiMenu (provider information see imprint)
Imprint: https://www.logimenu.com/impressum
E-mail: support@logimenu.com

A data protection officer has not been appointed, as there is no legal obligation to do so.

2) Scope

This privacy policy applies to our online services:

• https://www.logimenu.com

• https://app.logimenu.com

LogiMenu is aimed at entrepreneurs (B2B). Regardless, personal data may be processed during use (e.g. email address, IP address). This privacy policy applies to online processing.

3) What data we process

a) Server log files (website & app)

Each time the website or platform is accessed, data is automatically collected:

• IP address

• Date and time of access

• URL accessed

• Referrer URL

• Browser type and version

• Operating system

• Status codes / error messages

This data is technically necessary to provide the systems, ensure stability and detect attacks/misuse.

b) Account data (registration and use)

When registering/using logimenu.com, we process:

• E-mail address

• Password (hashed only, no plain text)

• optional: First name and last name

• Tariff, status and term information

c) Content in the platform (customer input)

Customers can create or upload content, e.g.:

• Restaurant data (name, address, phone number, opening hours)

• Social media links

• WiFi information (if entered)

• Logos, banners, images

• Menu data (categories, food/drinks, prices, descriptions, allergens, kcal, tags)

This content is processed to provide the platform functions and technically output digital menus.

4) Public menus (QR code / menu link)

The menus provided via app.logimenu.com can be accessed via a public link or QR code.
If a customer publishes content in the public menu (e.g. telephone number, address, WiFi information), this information can be viewed by anyone who has the link/QR code.

The customer is solely responsible for deciding which content is displayed in the public menu.

5) Purposes and legal bases

We process personal data for the following purposes:

a) Provision and security of the website/platform

Error analysis, system security, attack detection
Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest)

b) Contract fulfillment and account management

Platform operation, subscription management, provision of functions
Legal basis: Art. 6 para. 1 lit. b GDPR (contract)

c) Communication and support

Processing of inquiries and support cases
Legal basis: Art. 6 para. 1 lit. b GDPR (contract) and/or Art. 6 para. 1 lit. f GDPR (legitimate interest)

d) Fulfillment of legal obligations

e.g. tax law retention
Legal basis: Art. 6 para. 1 lit. c GDPR

6) Order processing (Art. 28 GDPR)

If LogiMenu processes content on behalf of the customer (e.g. menu texts, images, restaurant data), the customer generally acts as the controller and LogiMenu as the processor within the meaning of Art. 28 GDPR.

7) Payment processing (Stripe & PayPal)

We use payment service providers for paid subscriptions, in particular:

• Stripe

• PayPal

Data required for payment processing is transmitted (e.g. transaction data, payment status). We do not store complete credit card data.

Legal basis: Art. 6 para. 1 lit. b DSGVO

8) Automatic translations (DeepL API)

For translating menu content, LogiMenu can provide automated translations via the DeepL API.

In doing so, texts entered on the platform may be transmitted to DeepL in order to generate translation results and display and/or store them on the platform.

Legal basis: Art. 6 para. 1 lit. b GDPR

9) Google Reviews

LogiMenu can provide functions to display or link Google reviews of a restaurant. Depending on the design, either:

• a link/redirect to Google or

• a technical integration/retrieval of rating information via Google services.

The provider is usually Google Ireland Limited.

Legal basis: Art. 6 para. 1 lit. b GDPR (contract/function) and/or Art. 6 para. 1 lit. f GDPR (legitimate interest)

10) Web analysis (Google Analytics 4) – only on logimenu.com

We use Google Analytics 4 (GA4) on www.logimenu.com to analyze and improve the website.
We do not use GA4 on app.logimenu.com.

If necessary, use is only permitted after consent via a consent/cookie banner.

Legal basis: Art. 6 para. 1 lit. GDPR (consent)

Details are governed in a separate cookie policy.

11) Embedded YouTube videos

YouTube videos can be embedded on our website. When loading/playing, YouTube can process personal data (e.g. IP address, usage data).

Legal basis: Art. 6 para. 1 lit. a GDPR (consent), if required
Further details can be found in the cookie/consent settings and the data protection information from Google/YouTube.

12) Hosting and technical service providers

We use technical service providers to provide the website and platform (e.g. hosting, infrastructure, IT operations). These act as processors and process personal data exclusively according to our instructions.

13) Recipients / disclosure of data

Data will only be passed on if necessary, in particular to:

• Payment service providers (Stripe, PayPal)

• external services for function provision (e.g. DeepL, Google/YouTube)

• technical service providers (hosting/IT operations)

We do not pass on data to third parties for advertising purposes.

14) Data transfer to third countries

When using third-party providers (e.g. Google/YouTube/Analytics, Stripe), processing outside the EU/EEA cannot be excluded.

In these cases, transmission only takes place if the legal requirements are met, e.g. through:

• suitable guarantees (e.g. standard contractual clauses – SCC) or

• a required consent (e.g. via consent banner), if applicable.

15) Storage period / deletion

We only store personal data for as long as it is necessary for the respective purposes.

• Server log files: for a limited period, then deletion, provided there are no security/verification requirements

• Account and platform data: generally for the duration of the contractual relationship

• After termination of the subscription, public menu links/QR destinations are usually deactivated

• Account data and content can be deleted within up to 90 days, provided there are no legal obligations to the contrary or an earlier deletion is requested

• Data can remain in technical backups for a limited period, but will not be actively processed there

Legal retention obligations remain unaffected.

16) Rights of data subjects

According to the GDPR, you have the following rights in particular:

• Information (Art. 15 GDPR)

• Correction (Art. 16 GDPR)

• Deletion (Art. 17 GDPR)

• Restriction of processing (Art. 18 GDPR)

• Data portability (Art. 20 GDPR)

• Objection (Art. 21 GDPR)

• Withdrawal of consent (Art. 7 para. 3 GDPR) with effect for the future

• Complaint to a supervisory authority (Art. 77 GDPR)

Note: Automated decision-making or profiling within the meaning of Art. 22 GDPR does not generally take place.

To exercise your rights, simply send a message to: support@logimenu.com

17) Data security

We use appropriate technical and organizational security measures to protect data against loss, manipulation or unauthorized access. However, complete security of data transmission on the Internet cannot be guaranteed.

18) Changes to this privacy policy

We reserve the right to adapt this data protection declaration if this is necessary due to technical changes, new functions or legal requirements. The current version applies.