Privacy Policy
Effective Date: 10.04.2025
This Privacy Policy explains how NUTO.ee, operated by Food Filter OÜ (“we”, “us”, or “our”), collects, uses, and protects personal data. It applies to all users of the platform, including:
- Business Users: Registered businesses such as restaurants, caterers, and cafes who input menu and food-related data.
- General Users: Individuals who scan QR codes or browse menus through the platform, with or without an account.
By using NUTO.ee, you agree to this Privacy Policy and our Terms and Conditions.
1. Who Controls Your Data?
Food Filter OÜ
Sõpruse pst 169-57, 13413 Tallinn, Estonia
Email: ernest@food-filter.com
We are the data controller for all personal data processed via NUTO.ee unless otherwise stated.
2. What Data We Collect
We collect different types of data depending on how you interact with the platform:
| Category | Examples | Applies to |
|---|---|---|
| Personal Data | Name, email, phone | Business Users, Registered General Users |
| Business Data | Restaurant name, contact info, menu content | Business Users |
| Account Data | Login credentials, profile preferences | Business Users, Registered General Users |
| Technical Data | IP address, device info, browser type | All users |
| Usage Data | QR code scan activity, page views, navigation | All users |
| Invoice/Billing Data | Name, email, billing address, VAT, payment info | Business Users (paid plans) |
3. How We Collect Data
- When you register an account
- When you input menu data
- When you scan a QR code or access a menu
- When you contact us (support, feedback)
- Through cookies and analytics tools
4. Why We Process Your Data
We collect different types of data depending on how you interact with the platform:
| Legal Basis | Purpose |
|---|---|
| Contract | Creating and managing your account, providing paid features |
| Consent | Sending newsletters, setting cookies |
| Legitimate interest | Improving platform performance, responding to requests |
| Legal obligation | Accounting, compliance with food info regulations |
5. What About Nutritional and Food Data?
- Nutritional values and ingredients are submitted by Business Users.
- We do not collect health data from General Users.
- Displayed data is approximate and follows EU Regulation (EU) No 1169/2011, which allows for standard tolerances.
6. Cookies and Analytics
NUTO.ee uses cookies to improve your browsing experience.
| Cookie Type | Purpose |
|---|---|
| Essential | Required for platform operation |
| Preference | Stores user settings (e.g. language) |
| Analytics | Measures visitor activity (anonymously) |
| Marketing (optional) | Helps show relevant promotions (only with consent) |
You can manage or block cookies in your browser settings. Learn more at allaboutcookies.org.
7. Who We Share Data With
We only share personal data with:
- Our service providers (e.g. hosting, email, analytics, payment processing)
- Authorities, if legally required (e.g. tax office, law enforcement)
- No data is sold or shared for unrelated third-party marketing
All third-party partners are bound by data protection agreements in line with GDPR.
8. International Transfers
All personal data is stored and processed within the European Economic Area (EEA). We do not transfer data outside the EEA without legal safeguards.
9. Data Retention
| Retention | Example |
|---|---|
| Until consent withdrawn | Newsletter, cookies |
| 30 days after account deletion | Registered user data |
| 7 years | Invoice and accounting records (per Estonian law) |
When data is no longer needed, we delete or anonymize it securely.
10. Security
We use physical, technical, and organizational safeguards to protect your data, including:
- Encrypted systems and secure hosting
- Access controls and regular backups
- Staff confidentiality training
11. Your Rights (under GDPR)
You have the right to:
- Access your personal data
- Correct inaccurate data
- Delete data (except where retention is legally required)
- Object to certain processing
- Withdraw consent at any time
- Port your data to another service
- Lodge a complaint with a data protection authority (e.g., Estonian Data Protection Inspectorate)
To exercise any of these rights, email: ernest@food-filter.com
12. Children’s Data
NUTO.ee does not knowingly collect personal data from children under 13. QR scanning is permitted for all ages, but account creation is limited to users aged 13+, or younger with verified parental consent.
If we learn we’ve collected data from a child under 13 without consent, we’ll delete it immediately.
13. Changes to This Policy
We may update this Privacy Policy occasionally. The latest version will always be posted on NUTO.ee with a revised effective date.
14. Contact Us
If you have questions about this Privacy Policy or how your data is handled, contact us at:
Food Filter OÜ
Email: ernest@food-filter.com
Phone: +372 520 9867