Privacy policy

1. Controller

The controller of personal data is SIA “Urban Eats”, reg. no. 40203637060, registered address Parādes iela 7-13, Rīga, LV-1016, pizzeria Kurzemes prospekts 132A, Rīga, email manapicalv@gmail.com, phone 26050800. For questions about your data, write to manapicalv@gmail.com.

2. What we process and why

To fulfil your order (performance of a contract, GDPR art. 6(1)(b)), so we can prepare and deliver it and contact you if needed:

• name, phone number, and email address if you give one;
• delivery address, apartment, floor, door code and note for the courier (delivery only);
• order contents and notes for the kitchen, amount, time, payment method and status;
• the language of communication.

If you write an allergy or intolerance in the note for the kitchen, that is health information. We process it on the basis of your explicit consent, which you give by writing it (GDPR art. 9(2)(a)), use it only to prepare your order safely, and keep it with the order.

For payments (performance of a contract): online payments are processed by Montonio Finance UAB, and card payments by Adyen N.V. on Montonio's behalf. We see the amount, method and status of a payment, but not the card number or internet bank login details, and we do not store them. If you paid by bank link and a refund is due, we see the payer's name and account number (IBAN) from the payment and use them only to send the refund.

For accounting (legal obligation, GDPR art. 6(1)(c)): we keep order and payment records for as long as accounting and tax laws require.

For security and to prevent abuse (legitimate interest, GDPR art. 6(1)(f)): our server processes your IP address and technical request data to limit excessive requests, prevent fraud and find errors.

For marketing (consent, GDPR art. 6(1)(a)): only if you tick “I would like to receive Mana Pica offers by email” at checkout may we send offers to your email. You can withdraw consent at any time by writing to manapicalv@gmail.com.

3. Retention

We keep order records for as long as needed to fulfil the order and handle any complaint, and for as long as accounting and tax laws require. After that, the personal data in them is deleted or anonymised. Server logs with IP addresses are kept for a limited time. Marketing consent is kept until you withdraw it.

If you choose “Remember my details on this device”, your name, phone, email and address (without the door code) are stored only in your browser. You can remove them by unticking this box on your next order or by clearing your browser data.

4. Recipients

Data is processed only by our staff and by these service providers:

• Montonio Finance UAB (Lithuania) – online payments; card payments are processed by Adyen N.V. (Netherlands) on Montonio's behalf;
• Vercel Inc. (USA) – website hosting;
• DigitalOcean, LLC – server and database in Frankfurt (Germany, EU);
• Google Ireland Limited (Ireland) – the address search at checkout (only the address text you type is passed on) and the map on the Contacts page, if you open it.
• OpenStreetMap Foundation (United Kingdom) – the background of the delivery-zone map on the Delivery page; only your IP address reaches it, no cookies are set.

Where data leaves the European Economic Area (for example, to the USA), it does so under the European Commission's standard contractual clauses or the EU-US Data Privacy Framework.

We give data to public authorities only when the law requires it. We do not sell data or pass it to others for marketing.

5. Your rights

You have the right to access, rectify and erase your data, to restrict or object to processing, to data portability, and to withdraw consent you have given. Send requests to manapicalv@gmail.com; we reply within one month. You may also lodge a complaint with the Data State Inspectorate of Latvia (www.dvi.gov.lv).

6. Cookies

The cookies and browser storage the site uses are described in the cookie policy.