Privacy Policy

The controller for operating the platform is Sesang, Inhaber Wonyoung Seo (see Imprint). For a specific order, reservation, waitlist entry, customer message, menu, allergen/additive information, and on-site fulfilment, the respective restaurant is also responsible. Where Gastrium provides technical platform functions for restaurants, Gastrium processes data as platform operator or processor according to the agreed role.

Depending on use, we process account data, restaurant and partner profile data, order, cart, reservation, waitlist and customer profile data, the phone number provided for phone verification, contact and message data, uploaded partner or business-verification documents, menu and media data, and technical access data such as IP address, timestamp, user agent, request path and security events.

We process data to provide the Gastrium platform, authenticate users, manage restaurant profiles and public websites, handle orders, reservations and waitlists, communicate with customers, prevent fraud and abuse, investigate errors, bill partner services, comply with legal obligations, and improve the product with consent-based analytics.

The legal bases are performance of a contract and pre-contractual steps (Art. 6(1)(b) GDPR), legal obligations (lit. c), legitimate interests in secure and stable platform operation, fraud prevention and error analysis (lit. f), and your consent (lit. a) where required for analytics, cookies or comparable access to the end device.

Depending on enabled functionality, we may use Firebase/Auth and Google sign-in for authentication, Cloud Run/backend_api and databases for API and app data processing, Google Cloud Storage or comparable storage for media and documents, Resend for email delivery, Sentry for error monitoring, PostHog for consent-based product analytics, Polar for partner billing, map/geocoding services for location features, and AI/OCR services for optional menu or document processing. Data is shared only to the extent required.

We set necessary cookies for language, secure operation, and storing your cookie choice without consent. Your cookie choice is stored in cc_cookie and gastrium.analyticsConsent (granted or denied). We set optional analytics cookies and comparable access only after your active consent (§ 25 TDDDG).

We store data only for as long as necessary for platform operation, orders, reservations, partner administration, abuse prevention, support, billing, or statutory retention duties. Partner documents and import or menu review records are deleted or anonymised when no longer needed for review, evidence, or contract performance.

You have the right to access, rectification, erasure, restriction, data portability and objection, as well as the right to lodge a complaint with a supervisory authority. Consents can be withdrawn at any time with effect for the future, especially through the cookie settings for optional analytics.

For data protection enquiries you can reach us at hello@sesang.de. For questions about a specific restaurant order or reservation, the respective restaurant may also be responsible.