Privacy statement

Yuko Sushi takes your privacy seriously. This statement explains which personal data we process, why we do so, who we share it with and what rights you have. We process your data in accordance with the General Data Protection Regulation (GDPR) and Belgian privacy law.

1. Who is responsible

Yuko Sushi
Statiestraat 22, 2018 Antwerp, Belgium
Company number / VAT: BE 1031.703.678
Email: info@yukosushi.be · Phone: +32 466 32 63 57

For any question about your data you can reach us at the email address above. We reply within thirty days.

2. Which data we process

Type of data	What that covers
Order data	Your name, phone number, email address, delivery address and the contents of your order.
Payment data	The amount, the time and whether the payment succeeded. Your full card details never reach us; they go straight to our payment partner.
Address data	When you type in your address, we check whether we deliver there and what the distance is.
Contact details	What you fill in when you ask us a question or submit a complaint.
Technical data	Your IP address, browser type and the pages you view on our site.

3. Why we process it

Purpose	Legal basis
Preparing, delivering and charging for your order	Performance of the contract
Contacting you about your order	Performance of the contract
Handling questions and complaints	Legitimate interest: good service
Our bookkeeping and tax obligations	Legal obligation
Securing our website and fixing faults	Legitimate interest: a secure website
Measuring how our website is used	Your consent
Showing adverts and measuring their reach	Your consent

4. Who we share your data with

We never sell your data and do not pass it on for purposes not listed here. To operate, we work with a limited number of specialist providers. We have a data processing agreement with each of them.

Party	What we use them for
Stripe	Handling online payments securely. Your card details go straight to Stripe and do not pass through our own systems. We only see whether the payment succeeded.
Google	Completing and checking your delivery address and calculating the distance. In addition, only with your consent, measuring website use and showing adverts featuring our dishes. We then measure whether an advert led to an order.
Automattic	Protecting our website against intrusion attempts and account abuse. In addition, only with your consent, statistics on website visits and on which dishes are ordered.
Location lookup	When you fill in a form, your approximate region can be determined from your IP address. This is done through a specialist service and does not produce an exact address.
PrintNode	Sending your order ticket to the printer in our kitchen so that your order can be prepared.
Our hosting provider	Running our website and storing orders. The servers are in a data centre within the European Union. Security software runs continuously on those servers, checking files and traffic for malicious activity.
Delivery	If you choose delivery, the courier receives your name, address and phone number in order to deliver your order.

5. Transfers outside the European Union

Our website and your order data are on servers within the European Union. Some of the parties listed above are established outside the EU or process data outside the EU.

For those transfers we rely on the standard contractual clauses adopted by the European Commission and, where applicable, on an adequacy decision. These parties are contractually bound to a level of protection equivalent to European rules. If you would like to know more about the safeguards for a specific party, send us an email.

6. How long we keep your data

Data	Retention period
Orders and invoices	7 years, because of the statutory accounting retention obligation
Customer account	For as long as you use the account; after that we delete it at your request
Questions and complaints	2 years after handling
Website statistics	Maximum 14 months
Security logs	Maximum 12 months

7. Cookies

We use three kinds of cookies:

Type	What for
Necessary	Remembering your basket, storing your language choice and securing the website. These are needed in order to place an order and are always on.
Statistics	Measuring which pages are visited so that we can improve the website. Only with your consent.
Marketing	Tailoring adverts and measuring their reach. Only with your consent.

You make your choice on your first visit via the cookie notice. You can change or withdraw that choice at any time via the same notice at the bottom of the website.

8. Ordering in our restaurant

If you order at the counter or at the table, we only record what is needed to prepare and charge for your order. We do not ask for personal data, unless you request an invoice in your name.

9. Your rights

You have the right to see your data, to have it corrected or deleted. You can also have the processing restricted, object to processing based on legitimate interest, request your data in a portable format, and withdraw consent you gave earlier. Withdrawing consent applies from that moment on and does not affect what happened before.

Send your request to info@yukosushi.be. We reply within thirty days. To avoid giving data to the wrong person, we may ask you to prove your identity.

10. Security

We take appropriate technical and organisational measures to protect your data, including encrypted connections, access limited to only those staff who need the data, and regular updates to our systems.

11. Filing a complaint

If you are not happy with how we handle your data, please tell us first — we would rather solve it together. If we cannot work it out, you can lodge a complaint with the Data Protection Authority, Drukpersstraat 35, 1000 Brussels (gegevensbeschermingsautoriteit.be).

12. Changes

We may amend this privacy statement when our services or the law change. The current version is always on this page, with the date of the last change at the top.