Data processing agreement

Last updated: 2 November 2026

This agreement is part of the terms of service between you (the venue, controller) and Menuseum (processor). It applies as soon as you use Menuseum; no signature is needed. You can download this page as a PDF with your browser's print function.

1. Subject and duration

We process personal data of your guests and your team to provide Menuseum: websites and QR menus, orders, payments, bookings, waitlist, event requests, vouchers, stamp cards, the guest list, e-mails to guests, printing and delivery. The agreement runs as long as your account exists.

2. Data and people concerned

• Guests: name, e-mail address, phone number, delivery address, order and booking details, notes (which may include allergies), payment status, voucher details, stamp card stamps and rewards, news consent.
• Your team: names, roles, PIN hashes, which device did what.

3. Your instructions

We process the data only to provide the service and as you instruct us through your settings and actions in the dashboard (for example switching on review e-mails or exporting the guest list). If we think an instruction breaks data protection law, we tell you.

4. Our duties

• Everyone who works with the data is bound to confidentiality.
• We keep appropriate technical and organisational measures: encrypted connections, hashed passwords, PINs and voucher codes, access only for your team, separated venue data, backups, deletion periods (see the privacy policy).
• We help you answer guests' requests (access, correction, deletion, objection) and with data protection impact assessments where needed. You can delete a guest's data in the guest list yourself.
• We tell you without undue delay about a personal data breach that affects your data.
• When your account ends, we delete the data, unless the law requires us to keep it.
• We give you the information you need to check that we keep this agreement; you can ask for it by e-mail.

5. Sub-processors

You agree that we use these sub-processors. We tell you before we add or replace one, so you can object.

• Hetzner Online GmbH, Germany: hosting and databases (EU).
• Cloudflare, Inc., USA: content delivery, security, DNS, e-mail forwarding (standard contractual clauses / Data Privacy Framework).
• Resend (EU region): sending e-mails.
• Stripe: payments, card guarantees (Stripe acts as a separate controller for payment data under its own terms).
• OpenStreetMap Foundation, UK: finding delivery addresses (address only).
• Openprovider and the domain registries: registering your domain (your own business data, not guest data).

6. Transfers outside the EU

Where a sub-processor is outside the EU or the EEA, the transfer is protected by an adequacy decision, the EU-US Data Privacy Framework or the EU standard contractual clauses.

7. Contact

Questions about this agreement: [email protected]