Privacy policy

1. Who is responsible

The operator of MyPictureMenu is responsible for the processing described here:

Company / name

MyPictureMenu Anish Madassery

Address

Glanzenbergstrasse 28, 8953 Dietikon, Schweiz

Email

info@mypicturemenu.com

VAT number

Not registered for VAT

2. Scope

This policy covers three areas: this marketing website, the MyPictureMenu application in which venues manage their catalogues, and the guest catalogue pages that venues publish.

Venues are responsible for the content of their catalogues. The roles of the operator and of venues for guest pages under data protection law: [to be completed by the operator]

3. Accounts of venues and their teams

When you register or are invited to a team, we process:

• your name, email address and password (stored only as a hash), interface language and, if enabled, two-factor authentication data;
• your role in a team (owner or editor) and the venues you belong to;
• the content you upload: texts, prices, photos and PDF documents.
• Purpose: providing the service. Retention: while the account exists; after a trial or plan ends, content is kept privately for 30 days for export or activation and deleted on request. Legal basis: [to be completed by the operator]

4. Billing through Stripe

Subscriptions are paid on a checkout page hosted by Stripe. You enter your payment details there; they are not sent to MyPictureMenu. We receive from Stripe the information needed to manage your subscription, such as customer and subscription references, plan, billing interval, status and billing period.

Stripe’s own privacy policy applies to the processing on its pages. Our contracting party is Stripe Payments Europe, Limited (Dublin, Ireland); Stripe may also process data in the USA. We keep accounting records for 10 years as required by Swiss law (Art. 958f CO).

5. Transactional email

We send emails that are necessary for the service: address verification, password reset, team invitations and billing notices. We do not send newsletters from this system.

Email delivery: cyon AG, Basel (CH)

6. Guest catalogue pages

Guest pages set no cookies and contain no tracking or advertising. Guests do not need an account.

To show venues how their catalogue is used, we count page views and QR-code opens as daily totals per venue. Individual visits are not stored, and IP addresses are not stored for these counts.

To protect the service against abuse, the number of requests is limited. For this, a technical key derived from the IP address is held briefly in temporary memory and then discarded. Details: [to be completed by the operator]

7. This marketing website

This website sets no cookies by default. When you click certain buttons, such as “Start your free trial”, we record the name of the button and, if present, the campaign name from the link you came from (utm_campaign). No cookies, IP addresses or other identifiers are stored with it.

No analytics or advertising tools are currently active on this website. If this changes, they will only be loaded after your consent, and this section will be updated.

8. Server logs

When you access any page, the web server may record technical data such as IP address, date and time, requested address, status code and browser information. This serves operation and security.

Retention period of server logs: [to be completed by the operator]

9. Choice of language

To show visitors from Switzerland, Germany, Austria and Liechtenstein the German site, we look up the country of your IP address in a database stored on our own server. The IP address is not stored and not sent to anyone. If the country is unknown, your browser’s language setting is used.

If you switch to English yourself, a cookie named “mpm_lang” stores this choice for one year so that you are not sent back to the German site. It contains only the language code.

IP geolocation by DB-IP (db-ip.com), licensed under Creative Commons Attribution 4.0.

10. Hosting and other service providers

Hosting: cyon AG, Basel (CH)

Complete list of service providers (processors) and any transfers abroad: [to be completed by the operator]

11. Your rights

You can ask for information about your data and for its correction or deletion, and export your catalogue content from the application. Please write to the email address in section 1.

Further rights under applicable law and the competent supervisory authority: [to be completed by the operator]

12. Changes to this policy

We update this policy when our processing changes. Version and date: [to be completed by the operator]