Privacy Policy for FoodyAC.com

Last Updated: [21.12.2025]

1. General Information

This Privacy Policy describes how TC.C PFA, headquartered in Bucharest, Romania, (hereinafter "We", "The Platform", or "FoodyAC") collects, uses, and protects your personal data when you use our website FoodyAC.com.

2. What Data We Collect

We collect data from two types of users: Customers and Restaurant Partners.

• For Customers: Name, email, phone number, delivery address, geolocation (if permitted), and order history.

• For Restaurant Partners: Representative's name, business contact details, CIF/CUI, and bank account details for settlements.

• Technical Data: IP address, browser type, and cookies (see our Cookie Policy).

3. Purpose of Processing

We process your data for the following legal reasons:

• Contract Performance: To facilitate table bookings, process pickup/delivery orders, and manage the relationship between you and the restaurants.

• Legal Obligations: For invoicing, accounting, and fiscal reporting in Romania.

• Legitimate Interest: To improve our platform services, prevent fraud, and provide customer support.

• Consent: For marketing communications (newsletters), which can be withdrawn at any time.

4. How Data is Shared

FoodyAC is a platform. To fulfill your requests, we share data with:

• Restaurant Partners: We share your name, phone, and order/booking details so they can prepare your meal or hold your table.

• Delivery Personnel: Your address and phone number for delivery services.

• Payment Processors: Your payment info is processed securely by third-party providers (e.g., Stripe, Netopia etc.). FoodyAC does not store full credit card details.

• Authorities: If requested by ANAF or other Romanian legal bodies.

5. Data Retention

We keep your personal data only as long as necessary:

• Account Data: For the duration of your active account.

• Fiscal Records: Order history and invoices are kept for 10 years, as required by Romanian accounting law.

6. Your Rights (GDPR)

Under the GDPR, you have the following rights:

• Right of Access: To know what data we hold about you.

• Right to Rectification: To correct inaccurate data.

• Right to Erasure ("Right to be Forgotten"): To request deletion of your data (subject to legal retention limits).

• Right to Data Portability: To receive your data in a structured format.

• Right to Object: To object to marketing or processing based on legitimate interest.

To exercise these rights, contact us at: [info@foodyac.com].

7. Security

We implement technical and organizational measures (SSL encryption, secure servers) to protect your data against unauthorized access or loss.

8. The Supervisory Authority

If you believe your rights have been violated, you have the right to lodge a complaint with the Romanian Authority:

ANSPDCP (Autoritatea Naţională de Supraveghere a Prelucrării Datelor cu Caracter Personal)

B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, București.

www.dataprotection.ro