Privacy Policy

The controller of personal data is Andrii Skovron, operating the Menulab service, with correspondence address: ul. Zarzecze 30a/1 Giebultow 32-085, email: hello@menulab.eu.

This Policy applies to services available under menulab.eu, qrinfo.cc, related subdomains, customer menu pages, and the Menulab management dashboard.

We may process, in particular, the following data:

• identification and contact details of a user or customer: name, email address, phone number;
• business and billing details: company name, tax ID, address, invoice details;
• account and authentication data, including user identifiers handled by an external login provider;
• content entered into the system by the customer, such as product names, prices, descriptions, allergens, photos, restaurant information, and custom domains;
• payment and subscription data, noting that full payment card details are processed by the payment provider, not by Menulab;
• technical and operational data such as IP address, device type, browser, system logs, security events, and usage statistics;
• marketing and newsletter data, where the user has given the relevant consent.

We receive data directly from the user, from the customer who owns the restaurant account, and automatically while the service is used.

We process personal data for the following purposes:

• entering into and performing a contract for electronic services, account management, subscription plans, custom domain setup, menu publication, and customer support — Article 6(1)(b) GDPR;
• complying with legal obligations, including tax, accounting, and complaint-handling duties — Article 6(1)(c) GDPR;
• legitimate interests of the controller, including service security, fraud detection, statistics, product development, and establishing, exercising, or defending legal claims — Article 6(1)(f) GDPR;
• direct marketing and newsletters — based on consent under Article 6(1)(a) GDPR, where such consent has been given.

Providing data is voluntary, but where data is required to enter into or perform a contract, failure to provide it may prevent use of Menulab.

In operating Menulab, we use specialised providers that support the service. Data may be entrusted to, among others:

• online payment and billing providers (for example Stripe);
• login, authentication, and account-management providers;
• hosting, cloud infrastructure, database, analytics, and file-storage providers;
• email delivery and support-ticket tools;
• accounting firms, legal counsel, or IT providers — to the extent needed to run the business.

We share data only to the extent necessary for the specific purpose and on the basis of appropriate data-processing agreements or another legal basis.

Some technology providers may process data outside the European Economic Area. Where that happens, transfers are made using GDPR transfer mechanisms, in particular European Commission Standard Contractual Clauses or an adequacy decision.

• account and service-related data — for the duration of the service and until claims become time-barred;
• billing and accounting data — for the periods required by tax and accounting law;
• data processed on the basis of marketing consent — until consent is withdrawn or an objection is effectively lodged;
• technical logs and analytics data — for as long as needed for security, statistics, and service improvement.

Every data subject has the right to:

• access their data and obtain a copy;
• rectify their data;
• erase their data where the conditions in Article 17 GDPR are met;
• restrict processing;
• data portability;
• object to processing based on legitimate interests;
• withdraw consent at any time — without affecting the lawfulness of processing carried out before withdrawal;
• lodge a complaint with a competent supervisory authority, including the Polish Personal Data Protection Office (UODO), given the controller's place of establishment, or another EU supervisory authority where applicable.

Requests to exercise these rights may be sent to hello@menulab.eu.

Menulab uses cookies and similar technologies to ensure the service works correctly, maintain sessions, remember language preferences, analyse traffic, and improve performance.

In particular, we may use:

• essential cookies — required for login, security, and the customer dashboard;
• functional cookies — for example to remember settings such as language choice;
• analytics cookies — to understand how the service is used and improve the product;
• marketing cookies — only if implemented and the user has consented.

Users can manage cookies in their browser settings. Restricting some cookies may affect how the service works.

We apply appropriate technical and organisational measures to protect data against loss, unauthorised access, disclosure, alteration, or destruction. These include access controls, encrypted transmission, least-privilege permissions, and security monitoring.

As a rule, personal data is not used to make decisions about a user based solely on automated processing that produce legal effects concerning them or similarly significantly affect them.

This Privacy Policy may be updated from time to time, especially if the scope of services, technology, law, or processing practices changes. The current version will be published on the service with the last-updated date.

For privacy and data-protection matters, contact us at hello@menulab.eu.