Privacy Policy
This website
This site is static. It sets no cookies and runs no analytics, trackers, embedded fonts or social plugins.
It is delivered by Cloudflare, which processes standard server log data (IP address, timestamp, requested URL, user agent) to serve the page and protect against attacks. Legal basis: Art. 6(1)(f) GDPR.
If you email us, we use your address and message only to reply.
The ordering service
RootBasket is in closed pilot and is not open to the public. When the service launches, orders placed through a restaurant's WhatsApp number will involve:
- your WhatsApp phone number and profile name
- the messages you send in the chat
- your order details and, for delivery, your address
- payment status — card details are handled by the payment provider, never by us
This data is processed to take and fulfil your order (Art. 6(1)(b) GDPR). The restaurant is the controller of that data; RootBasket acts as a processor on its behalf. Messages pass through the WhatsApp Business Platform operated by Meta Platforms Ireland Ltd. and are subject to its terms.
We do not sell personal data or share it for advertising.
Your rights
Under the GDPR you may request access to your data, correction, erasure, restriction, portability, or object to processing, and you may withdraw consent at any time. You can stop promotional messages by replying STOP in the chat.
To exercise any of these, or to obtain our full controller details, contact admin@shital.de. You also have the right to complain to your local data protection supervisory authority.
Changes
This policy will be expanded before the service opens to real customers. The date above reflects the current version.