1. Which personal data we may process

Depending on how you use the platform, we may process the following categories of personal data:

• Technical and security data: IP address, browser and device information, requested pages, timestamps, security events and server logs.
• Country and language information: country-level location derived from an IP or server/CDN country header, browser language and the country/language preference you choose.
• Location data: precise browser location only when you actively allow the nearby-location feature to use it.
• Account data: name or account name, email address, login/session information and password hash for restaurant-owner accounts.
• Restaurant submission and claim data: information you provide when listing, correcting or claiming a restaurant, including contact details and evidence needed to review a claim.
• Contact data: your name, email address and the content of messages sent through contact or correction forms.
• Cookie preferences: your consent choices and functional preferences such as country or language selection.

2. Restaurant information from public sources

HalalRestaurant.eu may also contain restaurant information obtained from restaurant owners or public/open data sources. Business information is not always personal data. If a public listing contains information that relates to an identifiable person, we will handle requests to correct or remove that information in accordance with applicable data-protection law.

3. Why we use personal data

We process personal data only for defined purposes, including:

• operating, securing and improving HalalRestaurant.eu;
• showing the appropriate country and language version of the platform;
• providing nearby restaurant results when you request location-based functionality;
• creating and managing restaurant-owner accounts;
• reviewing restaurant submissions, corrections and ownership claims;
• responding to questions and support requests;
• preventing abuse, fraud, spam and security incidents;
• complying with legal obligations and establishing or defending legal claims;
• using optional analytics or marketing technologies only where the required consent has been given.

4. Legal bases

Depending on the processing activity, we rely on one or more legal bases under the GDPR: performance of a contract or steps requested before entering into a contract, compliance with a legal obligation, our legitimate interests in operating and securing the platform, or your consent where consent is required. Where processing is based on consent, you may withdraw that consent at any time without affecting processing that took place before withdrawal.

5. Geo-IP and location detection

To select an appropriate national version, the platform may use country-level information derived from your IP address or a country header supplied by the hosting/CDN environment. This is intended to identify a country, not your exact address. If you use a “near me” feature, your browser may ask permission to provide more precise coordinates. We only request those coordinates after your action and browser permission.

6. Cookies and similar technologies

Necessary cookies may be used for account sessions, security, country/language preferences and remembering your cookie choices. Optional analytics or marketing cookies are only activated when the required consent has been given. More information and preference options are available in our Cookie policy.

7. Who may receive personal data

Personal data may be processed by service providers that are necessary to run the website, such as hosting, email, security, technical maintenance and—if enabled after consent—analytics or marketing providers. We only share data where there is a valid reason and, where required, appropriate contractual safeguards.

When you deliberately open an external restaurant website, reservation service, map or other third-party service, that third party processes data under its own privacy policy.

8. Transfers outside the European Economic Area

If a service provider processes personal data outside the European Economic Area, we will use an applicable lawful transfer mechanism where required, such as an adequacy decision or appropriate contractual safeguards. The exact providers used by the website can change over time as technical services are updated.

9. How long we keep data

We do not keep personal data longer than necessary for the purpose for which it was collected. Retention is determined by the type of data, the status of an account or request, security needs, applicable limitation periods and statutory retention obligations. Account data is normally retained while the account is active and for any additional period required to resolve claims or meet legal obligations. Contact and support data is retained only for a reasonable follow-up period. Security logs are kept for a limited period unless an incident requires longer investigation.

10. Security

We use appropriate technical and organisational measures intended to protect personal data against unauthorised access, loss, misuse or alteration. No internet service can guarantee absolute security, but access to personal data is limited to what is necessary for operating and protecting the platform.

11. Your privacy rights

Under the GDPR, you may have the right to request access to your personal data, correction of inaccurate data, deletion, restriction of processing, data portability and objection to certain processing. Where processing is based on consent, you may also withdraw consent. These rights can be subject to legal conditions and exceptions.

To exercise a privacy right, email contact@halalrestaurant.eu. We may ask for information needed to verify that the request concerns you. We aim to respond within the period required by applicable data-protection law.

12. Complaints

If you believe your personal data is being handled unlawfully, you may contact us first so we can investigate the issue. You also have the right to lodge a complaint with the competent data-protection authority. For Sanum B.V. in the Netherlands, this is the Autoriteit Persoonsgegevens.

13. Automated decision-making

HalalRestaurant.eu does not intend to make decisions based solely on automated processing that produce legal effects or similarly significant effects for individual visitors. Automated country/language routing only determines which local version of the website is shown and can be changed manually.

14. Changes to this privacy policy

We may update this policy when the platform, legal requirements or service providers change. The current version published on HalalRestaurant.eu is the version that applies.