1. Controller and contact
The controller for this ordering website is New Delhi Restaurant, Kumar Sukhdeep & Manchenda Ravinder GbR, Hirschbergstraße 1, 80634 Munich, Germany. Privacy enquiries: info@newdelhi-restaurant.de, telephone +49 89 85 670 230. Gabler Systemtechnik GmbH provides technical services.
2. Website operation and security
The server processes IP addresses, request times, requested pages, technical browser information and, where supplied, referring pages. These data support delivery of the website, troubleshooting and protection against abuse, based on our legitimate interest in secure operation (Article 6(1)(f) GDPR). Service providers receive data only as necessary for their tasks. Security logs are retained for the necessary operational and security purposes; specific incidents may require longer preservation for investigation.
3. Orders, addresses and accounts
We process the contact and address details you enter, selected products and options, payment information, delivery or pickup choice, dates and order notes to handle your order. The legal bases are pre-contractual steps and contract performance (Article 6(1)(b) GDPR) and applicable legal obligations (point c). Account data support optional account management and secure login. Drivers receive the details needed for delivery. Technical providers and the payment service actually selected at checkout receive the data needed for their respective tasks. We do not sell customer data.
Kitchen requests, individual product notes and driver instructions are optional. Please avoid unnecessary personal data and medical details in these fields. Driver instructions are not attached to pickup orders.
4. Cookies and local storage
For a requested cart and its session, WooCommerce uses cookies including woocommerce_items_in_cart, woocommerce_cart_hash and wp_woocommerce_session_…. Language and login functions may use further necessary cookies, such as wp-wpml_current_language and WordPress login cookies. Local and session storage retain selected delivery times, input drafts and the return position from product dialogs. Storage strictly necessary for a function you request falls under section 25(2) TDDDG; the related processing relies on Article 6(1)(b) or (f) GDPR according to its purpose.
WooCommerce marketing attribution is disabled, and no new sbjs_* cookies are set for this purpose. Browser controls can clear stored cookies and local data; this may clear your cart, login or selection drafts.
Optional Google suggestions and OneAll social login are loaded only after you explicitly enable the respective service for the current browser session. This is based on your consent under Article 6(1)(a) GDPR and, where device storage or access is involved, section 25(1) TDDDG. Subsequent account login requested by you is based on Article 6(1)(b) GDPR. Permissions are stored in session storage under xp:external-services:v1. Use “Reset permission for external services” in the footer to withdraw consent for the future. The page reloads without loading these services again until you re-enable them. This does not automatically delete data already transmitted or cookies set by a provider; use your browser and provider settings for those.
5. Optional Google address search and map links
Address suggestions use Google Maps JavaScript, Places and Geocoding. Using this feature sends entered addresses or search terms, IP addresses and technical connection data to Google. Google Ireland Limited provides these services in the EEA; associated companies may process data in other countries, including the USA. The search is limited to Munich. You can enter an address and select a delivery postcode manually. External Google Maps links open Google’s website only when clicked. See Google’s privacy information.
6. Optional social login through OneAll
The additional social login uses OneAll and the identity provider you choose, such as Google. OneAll receives technical connection data, including your IP address, to display and operate the login interface. If you choose social login, the account details released in the login dialog are used to associate or create your shop account. Your external account password is not sent to the restaurant. Conventional login and ordering without social login remain available. See OneAll’s privacy notice and your chosen provider’s information.
7. Contact
When you contact us by email or telephone, we process the details to handle your enquiry under Article 6(1)(b) GDPR for contractual matters or (f) otherwise. Ordering or leaving a kitchen note does not subscribe you to a newsletter.
8. Retention and recipients
Order and payment records are retained as needed for performance, statutory retention obligations, or legal claims, then deleted or anonymised. Optional details are retained only for their purpose. Deleting an account may not remove records subject to statutory retention. External providers additionally apply the purposes and retention rules in their notices. Contact us for details about specific recipients and safeguards applicable to any transfers outside the EEA.
9. Your rights
Subject to statutory requirements, you may request access, correction, erasure, restriction and data portability. You may object to processing based on legitimate interests on grounds relating to your situation, and to direct marketing at any time. Consent can be withdrawn for the future. You may complain to a supervisory authority, including the Bavarian Data Protection Authority: www.lda.bayern.de.
Data needed to handle an order must be supplied for that order to be fulfilled. We do not make solely automated decisions producing legal or similarly significant effects.
