FOXI ID Privacy Notice

1. Ábyrgðaraðili

Elite Digital Services, LLC
1111B S Governors Ave #21653
Dover, DE 19904, USA

Netfang: support@foxi.food

Fulltrúi í ESB (27. grein GDPR)

Euro business company Kft.
Rómer Flóris utca 8/B. 3. em., Budapest 1024, Hungary
Skattnúmer: HU28959364

2. Hvaða gögn söfnum við

Þegar þú stofnar og notar FOXI ID reikning safna og vinnum við úr:

• Innskráningarupplýsingar reiknings — email address and password (stored as a cryptographic hash — we cannot read your password);
• Tengiliðaupplýsingar — name, phone number, and delivery address (provided by you to enable pre-filling across restaurants);
• Auðkenningargögn — session tokens, login timestamps, IP address at login (for security and fraud prevention);
• Reikningsstillingar — forstilling milli veitingastaða (kveikt/slökkt), tungumálsstilling.

Við söfnum EKKI né stjórnum:

• your order data (items ordered, order history, dietary preferences) — this is controlled by the restaurant;
• your payment information (card details are handled exclusively by the payment processor and the restaurant);
• neinum gögnum frá veitingastöðum þar sem þú hefur ekki lagt inn pöntun.

3. Lagalegur grundvöllur vinnslu

Við vinnum FOXI ID gögnin þín á grundvelli eftirfarandi lagalegra forsendna:

• Efndir samnings (grein 6(1)(b) GDPR) — maintaining your FOXI ID account, authenticating you at the restaurant where you are placing an order, and storing your contact details for your convenience;
• Lögmætir hagsmunir (grein 6(1)(f) GDPR) — pre-filling your contact data at restaurants where you have not previously ordered, to provide a seamless ordering experience. You may opt out of this at any time (see Section 6). Our legitimate interest has been balanced against your rights: only basic contact data is shared, no order history is disclosed, and pre-filling serves your convenience;
• Lagaleg skylda (6. grein 1. mgr. c-liður GDPR) — where required to comply with applicable laws (e.g., fraud prevention, responding to lawful requests from authorities).

4. Hvernig gögnin þín eru deild

Your FOXI ID contact data (name, email, phone, delivery address) is shared with restaurants on the platform only when:

• þú skráir þig inn með FOXI ID á pöntunarvef veitingastaðarins; og
• you have not opted out of cross-restaurant pre-filling (or you have previously ordered at that restaurant).

Each restaurant receives your contact data solely for the purpose of fulfilling your order. Restaurants do NOT have access to:

• pöntunarsögu þína í öðrum veitingastöðum;
• óskir þínar eða upplýsingar um fæðuval í öðrum veitingastöðum;
• FOXI ID lykilorð þitt eða auðkenningargögn;
• lista yfir aðra veitingastaði þar sem þú ert með reikning.

We do not sell your data. We do not use your data for marketing, profiling, or cross-restaurant analytics.

5. Vinnsluaðilar þriðja aðila

We use the following third-party services to operate the FOXI ID infrastructure:

• DigitalOcean, LLC — cloud hosting (EU and USA data centers, Standard Contractual Clauses in place);
• Brevo (Sendinblue) — transactional emails such as password reset and account notifications (France/EU).

All third-party processors are contractually bound to process data only according to our instructions.

6. Réttindi þín

Það fer eftir búsetu þinni hvort þú hefur einhvern eða öll eftirfarandi réttindi samkvæmt þeim persónuverndarlögum sem gilda um þig (svo sem GDPR á EES/í Bretlandi, persónuverndarlögum einstakra Bandaríkjaríkja á borð við CCPA/CPRA, LGPD í Brasilíu, eða sambærilegum staðbundnum lögum) varðandi FOXI ID-gögn þín:

• Aðgangur — óska eftir afriti af persónuupplýsingunum sem við geymum um þig;
• Leiðrétting — update or correct your contact information at any time through your account settings, or by contacting us;
• Eyðing — delete your FOXI ID account (see FOXI ID Terms of Use, Section 6). This removes your login credentials and shared contact data. Order history at individual restaurants must be requested from the restaurant directly;
• Gagnaflutningur — receive your FOXI ID data in a structured, machine-readable format (JSON);
• Takmörkun á vinnslu — request that we restrict processing of your data in certain circumstances;
• Andmæli — object to processing based on legitimate interest (cross-restaurant pre-filling). If you object, we will cease sharing your contact data with restaurants where you have not previously ordered;
• Afþakka forstillingu milli veitingastaða — you may disable automatic sharing of your contact data with new restaurants at any time through your FOXI ID account settings. This does not affect your ability to log in.

Til að nýta þér einhver þessara réttinda, hafðu samband við okkur á: support@foxi.food. Við svörum innan 30 daga.

Þú getur einnig haft samband við fulltrúa okkar í ESB: Euro business company Kft., Rómer Flóris utca 8/B. 3. em., Budapest 1024, Hungary.

You have the right to lodge a complaint with a supervisory authority in your country of residence. See the GDPR page on the FoxiFood website for a list of relevant authorities.

7. Vefkökur

FOXI ID notar eftirfarandi vafrakökur:

• Setukaka (.foxi.food) — maintains your authenticated session at the restaurant where you are placing an order. Strictly necessary — no consent required;
• Auðkenning milli veitingastaða — keeps you logged in when you visit other restaurants on the platform. Functional cookie — presented through the restaurant's cookie consent mechanism. You may decline it; you will need to log in manually at each restaurant;
• SSO áframsending (sérsniðin lén) — short-lived cookie for restaurants using their own domain. Strictly necessary for the login redirect — no consent required.

FOXI ID does not use any third-party cookies, advertising cookies, or cross-domain tracking.

8. Gagnageymsla

• Active accounts: data is retained for as long as you maintain your FOXI ID account;
• Account deletion: data is deleted within 30 days of your deletion request;
• Inactive accounts: accounts with no login activity for 36 months are automatically scheduled for deletion, with 30 days' prior notice to your registered email address;
• Security logs (IP address, login timestamps): retained for 12 months for fraud prevention, then deleted.

9. Alþjóðleg gagnaflutningur

Elite Digital Services, LLC hefur höfuðstöðvar í Bandaríkjunum og þjónar viðskiptavinum um allan heim. FOXI ID-gögnum þínum kann að vera miðlað til og unnið úr þeim í Bandaríkjunum og öðrum löndum þar sem undirvinnsluaðilar okkar starfa. Þar sem gildandi lög krefjast þess tryggjum við viðeigandi verndarráðstafanir fyrir slíkan flutning gagna — fyrir gögn sem falla undir GDPR, í samræmi við V. kafla GDPR, þar á meðal staðlaða samningsskilmála (Standard Contractual Clauses, SCC). Hýsingarinnviðir okkar (DigitalOcean) reka gagnaver á mörgum svæðum, meðal annars innan ESB fyrir evrópska notendur.

10. Gagnaöryggi

Við verndum FOXI ID gögnin þín með:

• dulkóðun allra gagna í flutningi (TLS/SSL);
• password hashing using industry-standard algorithms (we cannot read your password);
• aðgangsstýringar og eftirlit;
• reglulegum öryggisuppfærslum og veikleikamati.

11. Aldurskröfur

FOXI ID accounts may only be created by individuals who are at least 16 years of age or have reached the age of digital consent in their jurisdiction. If we become aware that an account has been created by an individual below this age, we will delete the account and associated data promptly.

12. Hvar á að finna þessa tilkynningu

Þessi persónuverndartilkynning er alltaf aðgengileg:

• on each restaurant's ordering website — in the footer or during FOXI ID registration;
• á FoxiFood vefsíðunni í lagahlutanum;
• í stillingum FOXI ID reikningsins þíns.

13. Breytingar á þessari tilkynningu

We may update this Privacy Notice from time to time. Material changes will be notified via email to your registered FOXI ID address at least 30 days before they take effect.

14. Samskipti

Fyrir spurningar um persónuvernd varðandi FOXI ID reikninginn þinn, hafðu samband við okkur á: support@foxi.food

Elite Digital Services, LLC
1111B S Governors Ave #21653
Dover, DE 19904, USA