FOXI ID Obavijest o privatnosti

1. Voditelj obrade podataka

Elite Digital Services, LLC
1111B S Governors Ave #21653
Dover, DE 19904, USA

E-pošta: support@foxi.food

Predstavnik u EU (članak 27. GDPR)

Euro business company Kft.
Rómer Flóris utca 8/B. 3. em., Budapest 1024, Hungary
Porezni broj: HU28959364

2. Koje podatke prikupljamo

Kada kreirate i koristite FOXI ID račun, prikupljamo i obrađujemo:

• Vjerodajnice računa — email address and password (stored as a cryptographic hash — we cannot read your password);
• Kontaktni podaci — name, phone number, and delivery address (provided by you to enable pre-filling across restaurants);
• Podaci za autentifikaciju — session tokens, login timestamps, IP address at login (for security and fraud prevention);
• Postavke računa — postavka automatskog popunjavanja između restorana (uklj./isklj.), jezična postavka.

Mi NE prikupljamo niti kontroliramo:

• your order data (items ordered, order history, dietary preferences) — this is controlled by the restaurant;
• your payment information (card details are handled exclusively by the payment processor and the restaurant);
• bilo kakve podatke iz restorana u kojima niste napravili narudžbu.

3. Pravna osnova za obradu

Vaše FOXI ID podatke obrađujemo na temelju sljedećih pravnih osnova:

• Izvršenje ugovora (članak 6. stavak 1. točka (b) GDPR-a) — maintaining your FOXI ID account, authenticating you at the restaurant where you are placing an order, and storing your contact details for your convenience;
• Legitimni interes (članak 6. stavak 1. točka (f) GDPR-a) — pre-filling your contact data at restaurants where you have not previously ordered, to provide a seamless ordering experience. You may opt out of this at any time (see Section 6). Our legitimate interest has been balanced against your rights: only basic contact data is shared, no order history is disclosed, and pre-filling serves your convenience;
• Pravna obveza (članak 6. stavak 1. točka c) GDPR) — where required to comply with applicable laws (e.g., fraud prevention, responding to lawful requests from authorities).

4. Kako se vaši podaci dijele

Your FOXI ID contact data (name, email, phone, delivery address) is shared with restaurants on the platform only when:

• prijavite se s vašim FOXI ID-om na web stranici restorana za naručivanje; i
• you have not opted out of cross-restaurant pre-filling (or you have previously ordered at that restaurant).

Each restaurant receives your contact data solely for the purpose of fulfilling your order. Restaurants do NOT have access to:

• vašu povijest narudžbi u drugim restoranima;
• vaše preferencije ili prehrambene informacije u drugim restoranima;
• vašu FOXI ID lozinku ili podatke za autentifikaciju;
• popis drugih restorana u kojima imate račun.

We do not sell your data. We do not use your data for marketing, profiling, or cross-restaurant analytics.

5. Obrađivači trećih strana

We use the following third-party services to operate the FOXI ID infrastructure:

• DigitalOcean, LLC — cloud hosting (EU and USA data centers, Standard Contractual Clauses in place);
• Brevo (Sendinblue) — transactional emails such as password reset and account notifications (France/EU).

All third-party processors are contractually bound to process data only according to our instructions.

6. Vaša prava

Under GDPR and applicable data protection laws, you have the following rights regarding your FOXI ID data:

• Pristup — zatražiti kopiju osobnih podataka koje čuvamo o vama;
• Ispravak — update or correct your contact information at any time through your account settings, or by contacting us;
• Brisanje — delete your FOXI ID account (see FOXI ID Terms of Use, Section 6). This removes your login credentials and shared contact data. Order history at individual restaurants must be requested from the restaurant directly;
• Prenosivost podataka — receive your FOXI ID data in a structured, machine-readable format (JSON);
• Ograničenje obrade — request that we restrict processing of your data in certain circumstances;
• Prigovor — object to processing based on legitimate interest (cross-restaurant pre-filling). If you object, we will cease sharing your contact data with restaurants where you have not previously ordered;
• Odjava od automatskog popunjavanja između restorana — you may disable automatic sharing of your contact data with new restaurants at any time through your FOXI ID account settings. This does not affect your ability to log in.

Za ostvarivanje bilo kojeg od ovih prava, kontaktirajte nas na: support@foxi.food. Odgovorit ćemo u roku od 30 dana.

Također možete kontaktirati našeg predstavnika u EU: Euro business company Kft., Rómer Flóris utca 8/B. 3. em., Budapest 1024, Hungary.

You have the right to lodge a complaint with a supervisory authority in your country of residence. See the GDPR page on the FoxiFood website for a list of relevant authorities.

7. Kolačići

FOXI ID koristi sljedeće kolačiće:

• Kolačić sesije (.foxi.food) — maintains your authenticated session at the restaurant where you are placing an order. Strictly necessary — no consent required;
• Autentifikacija između restorana — keeps you logged in when you visit other restaurants on the platform. Functional cookie — presented through the restaurant's cookie consent mechanism. You may decline it; you will need to log in manually at each restaurant;
• SSO preusmjeravanje (prilagođene domene) — short-lived cookie for restaurants using their own domain. Strictly necessary for the login redirect — no consent required.

FOXI ID does not use any third-party cookies, advertising cookies, or cross-domain tracking.

8. Zadržavanje podataka

• Active accounts: data is retained for as long as you maintain your FOXI ID account;
• Account deletion: data is deleted within 30 days of your deletion request;
• Inactive accounts: accounts with no login activity for 36 months are automatically scheduled for deletion, with 30 days' prior notice to your registered email address;
• Security logs (IP address, login timestamps): retained for 12 months for fraud prevention, then deleted.

9. Međunarodni prijenosi podataka

Elite Digital Services, LLC is based in the United States. Your FOXI ID data may be transferred to and processed in the USA. We ensure appropriate safeguards in accordance with Chapter V of GDPR, including Standard Contractual Clauses (SCCs). Our hosting infrastructure (DigitalOcean) operates data centers within the EU for European users.

10. Sigurnost podataka

Štitimo vaše FOXI ID podatke s:

• enkripcija svih podataka u prijenosu (TLS/SSL);
• password hashing using industry-standard algorithms (we cannot read your password);
• kontrole pristupa i nadzor;
• redovita sigurnosna ažuriranja i procjene ranjivosti.

11. Dobni uvjet

FOXI ID accounts may only be created by individuals who are at least 16 years of age or have reached the age of digital consent in their jurisdiction. If we become aware that an account has been created by an individual below this age, we will delete the account and associated data promptly.

12. Gdje pronaći ovu obavijest

Ova obavijest o privatnosti uvijek je dostupna:

• on each restaurant's ordering website — in the footer or during FOXI ID registration;
• na web stranici FoxiFood u odjeljku Pravne informacije;
• u postavkama vašeg FOXI ID računa.

13. Izmjene ove obavijesti

We may update this Privacy Notice from time to time. Material changes will be notified via email to your registered FOXI ID address at least 30 days before they take effect.

14. Kontakt

Za pitanja o privatnosti vezana uz vaš FOXI ID račun, kontaktirajte nas na: support@foxi.food

Elite Digital Services, LLC
1111B S Governors Ave #21653
Dover, DE 19904, USA