El Taller De Franko restaurang AB
Last updated: 2026-09-24
We care about your privacy. This privacy policy explains how we collect and use your personal data when you visit eltallerdefranko.com and order food for collection, what rights you have and how to exercise them. We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and supplementary Swedish legislation.
El Taller De Franko restaurang AB, company registration number 5593943235, is the controller responsible for processing your personal data. This means we are responsible for ensuring that your data is processed correctly and in accordance with applicable legislation.
Contact details:
Payment is made through Stripe (card payment) or Swish. We never receive or store your full card details – these are handled directly by Stripe. We receive information such as payment status, payment method, amount, transaction reference and, where applicable, the last four digits of the card number. For Swish payments, we receive the phone number and name linked to the payment, along with a payment reference.
When you visit the website, certain technical information is collected, such as your IP address, browser and device type, and information about how you use the website. Some of this is collected using cookies; see section 5.
If you state in your order that you have an allergy, intolerance or similar condition, this may constitute health information, which is sensitive personal data. We use this information only to prepare your order safely, and only with your explicit consent, provided when you enter the information yourself. Do not provide more information than we need to prepare the food, for example “no nuts”. You may withdraw your consent at any time by contacting us.
We only process personal data when we have a clear purpose and a legal basis. The table below shows what we do, the legal basis we rely on and how long the data is retained.
Purpose | Personal data | Legal basis | Retention period |
Receive, prepare and hand over your order, and send order confirmation and information about the order | Contact and order details | Contract (Art. 6.1(b) GDPR) | [12 months] after collection, then only in accounting records as described below |
Handle payment and any refund | Payment and order details | Contract (Art. 6.1(b) GDPR) | As above |
Prepare your order safely in the case of allergies or special diets | Allergy/special diet information you provide yourself | Explicit consent (Art. 6.1(a) and 9.2(a) GDPR) | Deleted no later than [30 days] after collection |
Meet the requirements of the Swedish Accounting Act | Order details, amount, payment reference and name | Legal obligation (Art. 6.1(c) GDPR) | Until the seventh year following the end of the calendar year in which the financial year ended |
Answer questions and handle complaints | Contact, order and communication information | Legitimate interest (Art. 6.1(f) GDPR) – to help you and handle complaints | For the duration of the matter and then no longer than [12 months] |
Website operation and security, and prevention of fraud and misuse | IP address, technical information and logs | Legitimate interest (Art. 6.1(f) GDPR) – to keep the website secure and functioning | Logs are retained for no longer than [30 days] |
Web analytics to understand and improve website use | Technical information and usage data collected via cookies | Consent (Art. 6.1(a) GDPR) | Up to 14 months in Google Analytics |
If you do not provide the information required for an order (name, phone number and email address), we cannot accept the order. We do not use automated decision-making or profiling that has legal effects on you, and we never sell your personal data.
We only share your data when necessary for the purposes described above.
The following suppliers process data on our behalf and in accordance with our instructions. We have data processing agreements with them:
Some recipients are independently responsible for processing your data. We recommend that you read their privacy policies:
Cookies are small text files stored on your device when you visit a website. Under the Swedish Electronic Communications Act (2022:482), we may use cookies that are necessary for the website to function without consent. For all other cookies, such as analytics cookies, we request your consent through our cookie banner. You can change or withdraw your consent at any time through [LINK/BUTTON “Cookie settings”] at the bottom of the website.
Cookie | Provider | Purpose | Retention period | Type |
woocommerce_cart_hash, woocommerce_items_in_cart | WooCommerce (us) | Remembers the contents of your cart | Session | Necessary |
wp_woocommerce_session_* | WooCommerce (us) | Links your cart to your session | 2 days | Necessary |
__stripe_mid, __stripe_sid | Stripe | Secure payment and fraud prevention | 1 year / 30 minutes | Necessary |
[CONSENT COOKIE NAME] | [COOKIE TOOL] | Stores your cookie preferences | [RETENTION PERIOD] | Necessary |
_ga, _ga_[ID] | Google Analytics | Distinguishes visitors and collects statistics about website use | 2 years | Analytics (requires consent) |
You can also block or delete cookies in your browser settings. If you block necessary cookies, the webshop may not work correctly.
We aim to process your data within the EU/EEA. Some of our suppliers, such as Google and Stripe, may nevertheless transfer data to the USA. These companies participate in the EU–US Data Privacy Framework, which provides an adequate level of protection under the European Commission’s decision. The European Commission’s standard contractual clauses also apply as an additional safeguard. Contact us for more information about the safeguards used.
We take appropriate technical and organisational security measures to protect your personal data against loss, unauthorised access and other unlawful processing. This includes encrypting all website traffic (HTTPS), restricting access to order details to authorised staff, keeping the website and its plugins updated and making regular backups.
Under the General Data Protection Regulation, you have the following rights:
To exercise your rights, contact us at contact@eltallerdefranko.com. We respond to your request without undue delay and within one month at the latest. We may need to ask you to confirm your identity before disclosing data.
If you believe we are processing your personal data incorrectly, please contact us first so we can put it right. You also have the right to complain to the Swedish Authority for Privacy Protection (IMY), the supervisory authority in Sweden:
We may update this privacy policy, for example if the way the webshop works or the legislation changes. The latest version is always available on our website, and the date at the top shows when the policy was last updated. We will clearly announce significant changes on the website.
