GDPR compliance
Last updated: March 2025
1. Introduction
OrexiMenu complies with the General Data Protection Regulation (GDPR) and applicable national law. This page summarises how we comply and what rights you have.
2. Data controller
The data controller for data collected through the OrexiMenu platform is the entity operating the OrexiMenu service. For data protection enquiries, use the email indicated on our website or the Help centre.
3. Lawful basis and purpose
We process data on the basis of contract performance (service delivery), your consent (e.g. newsletter), legal obligation and legitimate interest (security, claim assessment). Data is used only for the purposes described in our Privacy Policy.
4. Your rights
You have the right to access, rectification, erasure («right to be forgotten»), restriction of processing, data portability and to object. You also have the right to lodge a complaint with a supervisory authority. To exercise your rights, contact us via our website or Help centre.
5. Retention and security
We retain data only for as long as necessary for the processing purposes or as required by law. We apply appropriate technical and organisational measures to protect the security and confidentiality of your data.