Privacy Policy

Last updated: 3 October 2026

Protecting your personal data matters to us. This privacy policy explains which data we process when you use the Eatzino website, the Eatzino apps and our ordering and delivery services, why and on what legal basis we process it, and what rights you have under the General Data Protection Regulation (GDPR).

1. Controller

Aximatix Private Limited
Connaught Place, New Delhi 110001, India
Represented by: Aniket Verma
Email: info@eatzino.com
Phone: +91 95180 79207

2. Data we process

  • Account data: name, email address, phone number, password (stored encrypted), profile picture if provided.
  • Address and location data: delivery addresses, saved places and – only if you allow it – your device's location.
  • Order data: items ordered, prices, delivery method, notes, order history, reviews.
  • Payment data: chosen payment method, transaction status and reference. Card details are processed only by the payment provider, never by us.
  • Communication data: messages to our support team, chat messages with restaurants or couriers.
  • Technical data: IP address, date and time of access, browser or app version, operating system, device token for push notifications.

3. Purposes and legal bases

  • Providing the website and apps (technical data, server log files): Art. 6(1)(f) GDPR – our legitimate interest in secure and stable operation.
  • Customer account, order handling, delivery and payment: Art. 6(1)(b) GDPR – performance of a contract or pre-contractual steps.
  • Customer service, refunds and complaints: Art. 6(1)(b) and (f) GDPR.
  • Fraud prevention and abuse protection (e.g. in the referral programme): Art. 6(1)(f) GDPR.
  • Statutory retention (invoices, accounting records): Art. 6(1)(c) GDPR in conjunction with § 147 AO and § 257 HGB.
  • Newsletters and marketing messages and device location: Art. 6(1)(a) GDPR – only with your consent, which you can withdraw at any time.

4. Sharing with restaurants and couriers

So that your order can be prepared and delivered, we share your name, your order and your notes with the restaurant, and your delivery address and phone number with the restaurant or the assigned courier (Art. 6(1)(b) GDPR). Restaurants process this data under their own responsibility to fulfil their contract with you.

5. Service providers (processors and other recipients)

  • Hosting: Hostinger International Ltd. Our servers are located in a data centre in Germany.
  • Maps and address search: Google Maps / Google Places by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. When maps are displayed or you search for an address, your IP address and your input are sent to Google; transfer to the USA is possible.
  • Push notifications and sign-in: Firebase (Cloud Messaging, Authentication) by Google Ireland Limited and – if you use them – "Sign in with Google" or "Sign in with Apple".
  • Payment providers: depending on the payment method you choose, e.g. Stripe Payments Europe Ltd. (Ireland), PayPal (Europe) S.à r.l. et Cie, S.C.A. (Luxembourg) or Mollie B.V. (Netherlands). Some of these act as independent controllers under their own privacy policies.
  • Email and SMS delivery: providers we use to send order confirmations, verification codes and service messages.

We have concluded data processing agreements under Art. 28 GDPR with our processors.

6. Transfers to third countries

Aximatix Private Limited is based in India. Our staff may access personal data from India to operate the platform and provide customer service. There is no EU adequacy decision for India; we safeguard these transfers with the European Commission's Standard Contractual Clauses (Art. 46(2)(c) GDPR) and with technical and organisational measures. Transfers to Google in the USA are based on the EU-US Data Privacy Framework (Art. 45 GDPR) or Standard Contractual Clauses. You can request a copy of these safeguards.

7. Cookies and local storage

We only use cookies and similar technologies (e.g. local storage) that are strictly necessary for the service – for example to keep you signed in and to remember your language, cart and delivery address (§ 25(2) no. 2 TDDDG, Art. 6(1)(b) and (f) GDPR). These are set without consent.

Analytics and marketing (only with your consent). When you first visit the website we ask whether we may also use the following. You can accept everything, accept only what is necessary, or choose individually, and you can change or withdraw your choice at any time via “Cookie settings” at the bottom of every page. Withdrawing consent is as easy as giving it and does not affect processing that took place before. Legal basis: § 25(1) TDDDG and Art. 6(1)(a) GDPR.

  • Analytics: our own statistics, run on our own servers. We store a random visitor number in a cookie (ez_vid, 13 months) and a visit number in your browser's session storage, and record which pages, restaurants and dishes are viewed, whether something is added to the cart, whether checkout is reached and whether an order is placed, together with the device type (phone, tablet, computer), the language, the website you came from and any campaign tags in the link you followed. We do not store your IP address in these statistics.
  • Marketing: so that we can measure our advertising, we additionally remember the campaign or advertisement that brought you to us (cookie ez_attr, 90 days), including the click identifier that advertising platforms add to links, and – if you are signed in – link this to your customer account and your orders.

We do not pass this data on to advertising networks or other third parties and do not use third-party tracking tools on the website. The data is deleted after 14 months at the latest. Your choice itself is stored in the cookie ez_consent (6 months), and we count anonymously how often each option is chosen. The ordering widget that restaurants embed in their own websites does not use analytics or marketing cookies.

8. Retention

We keep personal data only as long as necessary for the purposes described. We delete account data when you delete your account. Because of statutory obligations, we keep order and invoice data for up to 10 years and restrict its processing during that time. Server log files are normally deleted after 30 days at the latest.

9. Your rights

You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object (Art. 21 GDPR). You can withdraw any consent at any time with effect for the future. You can delete your account at any time in your profile settings or by contacting info@eatzino.com.

Right to object: Where we process data on the basis of Art. 6(1)(f) GDPR, you may object at any time on grounds relating to your particular situation. You may object to processing for direct marketing at any time without giving reasons.

You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU member state where you live – in Saxony, for example, the Saxon Data Protection and Transparency Commissioner.

10. Obligation to provide data

To place an order we need your name, a phone number and – for delivery – your delivery address. Without this information we cannot carry out your order. We do not use automated decision-making within the meaning of Art. 22 GDPR.

11. Minimum age

You must be at least 16 years old to use Eatzino. Statutory age limits apply to the purchase of alcoholic drinks.

12. Changes

We update this privacy policy when our services or the law change. The version published on this page applies.

In case of any discrepancy, the German version of this privacy policy prevails.