Privacy Policy

2. Information we process

Depending on how you use our services, we may process:

• Contact and business details, such as name, email address, phone number, restaurant, city and the contents of your enquiry
• Account details, preferences, favourite stores, orders, purchase history and information needed for payment and delivery
• Support messages and relevant case information, including any personal data you choose to include
• Technical and usage information, such as IP address, device and browser information, app version, cookie choices and website interactions

3. Purposes and legal bases

We use information to answer enquiries, administer customer and partner relationships, provide ordering and payment services, provide support, keep our services secure and meet legal obligations. The legal basis is, as relevant, performance of a contract or steps taken before entering one (GDPR Article 6(1)(b)), our legitimate interests in communication, support and secure operation (Article 6(1)(f)), or a legal obligation (Article 6(1)(c)).

Where we rely on consent, including for optional website analytics, the legal basis is Article 6(1)(a). You can withdraw consent at any time; withdrawal does not affect processing already carried out.

4. Partner form and direct contact

When you submit the partner form, we receive your name, restaurant, phone number, email address, city, cuisine type and any message. The enquiry is sent to Lenius by email so that we can contact you and assess a potential partnership. We also process information you provide by email, phone or other contact channels to respond and follow up. Please avoid including sensitive personal data unless it is necessary.

5. AI assistants and automated tools

We use AI tools to assist with support, knowledge searches, sales insights and content work. This may include OpenAI services, such as the OpenAI API and AI assistants like ChatGPT. When a member of staff requests an AI draft for a support case, relevant parts of the correspondence, the customer’s name or email address, case subject and relevant internal knowledge may be sent to OpenAI to generate a suggested reply. Questions entered into our internal knowledge tool may also be sent with relevant reference material. AI-generated support replies are drafts for staff to review before they are sent.

If you choose to use a Lenius plugin in ChatGPT, the information needed for your specific request may be sent from ChatGPT to Lenius, such as the request you make and any restaurant or order information you choose to provide. The answer or requested result may be returned to ChatGPT. You can manage or disconnect a connected plugin in ChatGPT settings. Lenius processes information received through the plugin for the requested function and under the same purposes, retention criteria and rights described in this policy.

Information provided to an AI service is processed by that provider under its applicable terms. We aim to limit the information shared to what is needed for the task. We do not use AI drafts to make decisions about you based solely on automated processing. OpenAI states that data sent through its API is not used to train its models by default unless the customer opts in; the data controls for ChatGPT depend on the account and settings used.

6. Who receives information?

We share information only when it is relevant to the service or processing described below. The exact recipients depend on which features you use. We do not sell personal data.

• Restaurants and delivery partners: order, contact and delivery details needed to prepare and deliver an order.
• Viva.com (Viva Wallet): customer name, email, phone number, amount and order reference when you pay through Viva. Viva processes the payment and provides payment status to Lenius; payment card details are entered in Viva’s payment environment.
• Cloudflare: technical request data such as IP address and browser details for website delivery and security, information stored in Cloudflare infrastructure used for our services, and partner form contents sent through Cloudflare Email Routing.
• Mailgun: recipient and sender addresses and email content when transactional emails are sent through Mailgun in our ordering services.
• Google: with your consent on lenius.dk, Google Analytics receives usage and event information. Where Google Maps or address lookup is used in our ordering solution, the address or search input and technical request data may be sent to Google.
• Meta (Facebook and Instagram): where a restaurant enables Meta marketing features and the required consent has been given, selected website or order events and matching information may be shared through Meta Pixel or Conversions API. Messages, comments and interactions sent through Facebook or Instagram are also processed by Meta.
• OpenAI, including its API and ChatGPT: the selected prompts, support case excerpts, questions and reference material described in section 5 when AI features or assistants are used.

Some providers act as processors on our behalf; others, including payment or social media providers, may also act as independent controllers under their own privacy notices. Some providers may process data outside the EU/EEA. Where this happens, we assess the transfer basis and use the safeguards required by data protection law, such as an adequacy decision or standard contractual clauses. Contact us for information about a particular transfer.

7. Website analytics and cookies

On lenius.dk, we use Google Analytics 4 to understand how the website is used. No analytics data is sent to Google until you allow statistics. After consent, the Google tag and analytics cookies are activated, and selected interactions are sent through our server using Measurement Protocol. You can change or withdraw your choice at any time through Cookie settings in the footer. Necessary storage and technical data may still be used to run and protect the website.

8. Storage and security

We keep personal data for as long as needed for the stated purpose, a customer or partner relationship, documentation of a support case or compliance with legal requirements. Accounting records are normally kept for five years after the end of the financial year to which they relate. Other retention periods depend on the type of data and the applicable obligations; information is deleted or anonymised when it is no longer needed. We use technical and organisational measures to protect data against unauthorised access, loss and misuse.

9. Your rights

Subject to the conditions in data protection law, you can request access, correction, deletion, restriction and portability of your data. You can also object to processing based on legitimate interests and withdraw consent where applicable. Contact us at info@lenius.dk to exercise your rights. You can complain to the Danish Data Protection Agency (Datatilsynet) at datatilsynet.dk.

10. Children

Our services are not directed at children under 13, and we do not knowingly collect personal data from children under 13.

11. Changes

We may update this policy when our services or data processing change. The current version is available on our website.