QRMenu legal
Sub-processors
Version 1.0 · Effective
Controller-facing register for Digital Menu. Contact support@digitalmenu.faridfajrak.com with a reasoned data-protection objection. This table is generated from the suppliers and routes enabled for this deployment; an inactive integration is not listed.
| Supplier | Purpose | Data | Processing region / transfer position |
|---|---|---|---|
| Hetzner | Application and PostgreSQL hosting. | Owner accounts, venue/menu content, authentication and operational service records. | nbg1 |
| Brevo (Sendinblue SAS) | Transactional sign-in, account and service email. | Recipient email and minimum transactional message content. | European Union (France). |
| AI provider: deepseek | Owner-requested menu extraction, text/image generation, editing or upscaling. | Only menu text, menu images and instructions needed for the selected job; no diner tracking data. | China - a third country without an EU adequacy decision; transfers rely on EU Standard Contractual Clauses and supplementary measures. |
| AI provider: fal | Owner-requested menu extraction, text/image generation, editing or upscaling. | Only menu text, menu images and instructions needed for the selected job; no diner tracking data. | United States under EU Standard Contractual Clauses. |
| AI provider: google | Owner-requested menu extraction, text/image generation, editing or upscaling. | Only menu text, menu images and instructions needed for the selected job; no diner tracking data. | European Union and United States under Google Cloud terms and EU Standard Contractual Clauses. |
| AI provider: openai | Owner-requested menu extraction, text/image generation, editing or upscaling. | Only menu text, menu images and instructions needed for the selected job; no diner tracking data. | United States under EU Standard Contractual Clauses. |
| AI provider: zen | Owner-requested menu extraction, text/image generation, editing or upscaling. | Only menu text, menu images and instructions needed for the selected job; no diner tracking data. | United States under EU Standard Contractual Clauses. |
| Paddle | Merchant-of-record checkout, subscriptions, tax and payment support. | Billing contact, plan, transaction and provider references; Paddle handles full card data. | EEA/United Kingdom and other contracted service locations under applicable transfer safeguards. |
AI data boundary
Active AI suppliers receive only the venue menu text, menu images and owner instructions required for the selected job. They do not receive diner scan history or diner profiles.
Change notice
A material supplier/category addition produces a new register version and effective date and is notified through the contractual contact channel before use where reasonably possible. Emergency replacements may occur sooner to preserve security or availability, with notice afterward.