1. Responsibility
The restaurant identified in the relevant offering and flow is generally responsible for personal data relating to restaurant operations, reservations and orders. eversecurely GmbH supplies the software and processes data for technical operation to the agreed extent; this does not make it the provider of the hospitality service.
2. Restaurant contact
Cara Mia, Reusssteg 9, 6003 Luzern
Email: info@caramia-luzern.ch
3. Data processed and purposes
- Website operation: IP address, time, requested address, browser data and technical error data where generated during operation; purposes are delivery, security, abuse prevention and fault analysis.
- Reservations: name, contact details, party size, date, time, selected seating option, messages, technical booking reference and processing status; purposes are checking, allocating, confirming and managing the reservation.
- QR and pickup orders: selected items and options, quantities, prices, restaurant or pickup context, status and the contact details requested in the specific flow; purposes are transmission, preparation, pickup, table service and settlement by the restaurant.
- Account and management access: session, login and authorization data; purposes are secure access and protection against unauthorized use.
- Enquiries: submitted contact and content data; purposes are responding to and handling the request.
4. Necessity and source
The data generally comes from you or is generated while you use the application. Required fields are necessary for the stated flow. Without this data, a reservation or order may not be processed.
5. Access and recipients
Access is limited to people and organizations that need it for the relevant purpose. This includes authorized restaurant staff and eversecurely GmbH for software operation, maintenance, security and support.
The website is hosted by Hostpoint AG in Switzerland. The hosting provider may process data technically required to provide and secure the service.
6. Retention
Personal data is retained for as long as needed for reservations, orders, operation, security or handling an enquiry and to the extent legal documentation or retention duties apply. It is then deleted or anonymized unless an overriding reason requires further retention.
Specific periods depend on the type of data and the restaurant process. No single period is claimed here; the restaurant operator must define and review its actual periods.
7. Technically necessary storage
The application uses technically necessary session and language settings and comparable storage mechanisms so that login, permissions, language and active flows work.
8. Rights and contact
Subject to applicable law, you may in particular request access, correction or deletion and object to processing. For guest data, first contact the responsible restaurant operator. For questions about technical data processing by the software, contact eversecurely GmbH at info@eversecurely.ch.
Appropriate proof of identity may be required for secure handling. Legal retention duties and third-party rights remain reserved.
9. Security and updates
Appropriate technical and organizational measures are used to protect personal data against unauthorized access, loss and misuse.
This notice must be updated when the functions, recipients or data processing actually used change.