Terms and conditions of UpMenu website

Thank you for visiting our website, which is available on https://www.upmenu.com (further: „UpMenu”, or „Website”). The purpose of these Terms is to provide general terms and conditions of using the Website. If a service recipient decides to use UpMenu, these conditions govern, in particular, the terms of using the Website, including payments and our liability. The Website is addressed only to business entities and is not available for consumers. Please read the Terms carefully. UpMenu Team

1. ABOUT US
   1. UpMenu is owned by TASTYSOFT SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ with a registered office in Łódź (address of the registered office and address for services: Sienkiewicza 85/87/8 P. XI, 90-057 Łódź); entered in the Register of Entrepreneurs of the National Court Register with the no. KRS 0000411725; registration court where the company’s documentation is kept: District Court for Łódź – Śródmieście in Łódź, Commercial Law Division XX of the National Court Register; share capital: PLN 5,000; NIP: 7252058310; REGON: 101374260 (further: “Service Provider”).
2. DEFINITIONS
   1. The following terms used in these Terms have the following definitions:
      1. CIVIL CODE – the Civil Code Act of 23 April 1964 (Dziennik Ustaw [the Polish Journal of Laws] No. 16, item 93, as amended).
      2. CLIENT PANEL – E-Service, an online panel available after opening a Service Recipient’s account, which enables management of online orders and bookings in the Service Recipient’s restaurant as well as purchase of additional services offered by the Service Provider, including, as selected by the Service Recipient, development of mobile apps, development of a restaurant website, ordering marketing services for a restaurant, and support for a loyalty scheme.
      3. COPYRIGHT LAW – the Act on copyright and related rights of 4 February 1994 (Dziennik Ustaw No. 24, item 83, as amended).
      4. TERMS – the present Terms and Conditions of using the Website.
      5. WEBSITE, UPMENU – the Service Provider’s website available on https://www.upmenu.com/, consisting of the Client Panel and its separate functionalities and a web page where the Service Recipient may gain access to functionalities which do not require the Client Panel.
      6. E-SERVICE – a service provided online by the Service Provider to the Service Recipient via the Website, in accordance with the Terms.
      7. SERVICE RECIPIENT – (1) an individual with a full capacity to perform legal transactions, for whom using the Website, including entering into contracts for provision of services, is related directly to business or professional operations conducted by that person (i.e. who is not a consumer here); (2) a legal person; or (3) an organizational unit with no legal personality who has been granted legal capacity under a relevant act, which uses or intends to use E-Services, including functionalities of the Client Panel available in the Website.
      8. SERVICE PROVIDER – TASTYSOFT SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ with a registered office in Łódź (address of the registered office and address for services: Sienkiewicza 85/87/8 P. XI, 90-057 Łódź); entered in the Register of Entrepreneurs of the National Court Register with the no. KRS 0000411725; registration court where the company’s documentation is kept: District Court for Łódź – Śródmieście in Łódź, Commercial Law Division XX of the National Court Register; share capital: PLN 5,000; NIP: 7252058310; REGON: 101374260.
3. GENERAL CONDITIONS OF USING THE WEBSITE
   1. UpMenu is a website consisting of the Client Panel and its individual functionalities as well as the web page where the Service Recipient may gain access to functionalities which do not require the Client Panel.
   2. UpMenu offers comprehensive support of an online sales system for restaurants, including without being limited to online processing of orders and, among other things, development of mobile apps or restaurant webpages, system of managing table bookings, restaurant marketing, and managing loyalty schemes.
   3. The Service Recipient is obliged to use UpMenu according to its purpose, the Terms, law, and good practices, with due consideration for personal interests, personal data, copyright, and intellectual property of the Service Provider and third parties. The Service Recipient is prohibited from providing unlawful content.
   4. Technical requirements that are necessary for compatibility with the IT system used by the Service Provider: (1) computer, laptop, or any other multimedia device with Internet access; (2) access to electronic mail; (3) web browser: Mozilla Firefox ver. 17.0 or later or Internet Explorer ver. 10.0 or later, Opera ver. 12.0 or later, Google Chrome ver. 23.0. or later, Safari ver. 5.0 or later, Microsoft Edge ver. 25.10586.0.0 or later; (4) recommended minimum screen definition: 1024×768; (5) enabled Cookies saving and Javascript in the web browser.
   5. The Service Provider observes Art. 14(1) of the Act of providing services in the electronic form of 18 July 2002 (Dziennik Ustaw 2002 No. 144, item 1204, as amended), which states that a person who, when providing resources of an IT system for the purpose of data storage by a service recipient, is not aware of the unlawful nature of such data or operations related to such data and promptly prevents access to such data after receiving an official notice of or obtaining a reliable information on the illegal nature of such data, shall not be liable to prosecution.
   6. The Service Provider is the Controller of the personal data processed in the Website in relation to the performance of the provisions hereof. The personal data is processed for the purpose, to the extent, and based on the grounds and rules specified in the Privacy Policy published in the Website. The Privacy Policy contains, most of all, the rules of processing personal data by the Controller in the Website, including the grounds, purposes, and extent of processing personal data and the rights of data subjects as well as information on using cookies and analytical tools in the Website. Using the Website is voluntary. The provision of personal data by a user of the Website is also voluntary, except for cases specified in the Privacy Policy (entering into a contract and statutory obligations of the Service Provider).
4. E-SERVICES IN THE WEBSITE
   1. Each Service Recipient may use the Website on the conditions specified in the Terms.
   2. In the Website, the Service Recipient may use the following E-Services:
      1. Client Panel;
      2. Menu Templates;
      3. Knowledge Base;
      4. Contact Form and Order a Presentation.
   3. Each type of E-Services contains multiple functionalities which, together, form a comprehensive set of payable or free-of-charge services provided by the Service Provider in the Website.
   4. The detailed description of E-Services and rules of their operation are available in the Terms and in the Website.
   5. The Service Provider is obliged to provide services free of defects.
5. CONDITIONS OF USING THE CLIENT PANEL
   1. It is possible to use the Client Panel after having opened a Service Recipient account. In order to open a Service Recipient account, the Service Recipient has to make all of the following three steps: (1) go to “Try it” tab or “Start free trial” tab, (2) fill in the registration form, (3) click the action field. In the registration form, it is necessary that the Service Recipient provides the following data of the Service Recipient: name of the restaurant, contact phone no., e-mail address, and password.
   2. In order to use the Client Panel and its individual functionalities, the Service Provider may be required to provide other data; the information on the scope of required data is each time provided in the relevant tab or the functionality of the Client Panel.
   3. In the Client Panel, the Service Recipient is provided access to its functionalities, including, as selected by the Service Recipient, processing orders online, drawing mobile apps and a restaurant webpage, system of managing table bookings, restaurant marketing, and managing the loyalty scheme.
   4. The Client Panel and individual functionalities being part of it, including subscriptions and additional services, are generally payable. Opening the Service Recipient account in the Client Panel for a trial period is free of charge; however, to use full functionalities of the Client Panel, the Service Recipient has to purchase appropriate service packages in the form of subscriptions as well as optional additional services in the form of a one-off contract for sale of services. It is possible to access some of the functionalities of the Client Panel free of charge, after account registration, over a 7-day’s trial period starting from the date of registering the account in the Client Panel. After the end of the trial period, it is possible to use the Client Panel further only after entering into a payable contract for sale of services and paying for a selected type of subscription as well as, optionally, after purchasing additional services and making a payment pursuant to Sec. 6 hereof. The contract for sale of services referred to above may also be entered into before the end of the trial period.
   5. The detailed description of functionalities, possibilities, rules of operation, and services available as a part of the Client Panel is available in the relevant tabs of the Website and the Client Panel.
   6. In the event of any change of their data provided in their profile, the Service Recipient is obliged to update such data promptly.
   7. The Service Recipient may, at any time and without stating the reason, delete their account by sending a relevant request to the Service Provider by e-mail. After reporting an intention of deleting the account, the Service Recipient is still obliged to pay for the started subscription period in the case of having purchased subscription Products. Resignation does not entitle the Service Recipient to be reimbursed for the payment for the unused period of using the services referred to above and one-off services purchased before the resignation.
   8. The Service Provider reserves the right to suspend the possibility of using the Client Panel by the Service Recipient in the following cases:
      1. when the Service Recipient violates these Terms;
      2. when the Service Recipient delays any payments for the Service Provider;
      3. when the actions of the Service Recipient violate the good name of the Service Provider or the Website.
   9. The Client Panel may be suspended for the time specified by the Service Provider or for unspecified time. During the suspension period, it is impossible to log in the UpMenu Client Panel and use its functionalities.
   10. In the event of suspending the possibility to use the Client Panel for over 30 days and when the reasons of suspension have not ceased, the Service Provider has the right to terminate the contract for provision of services with the Service Recipient with an immediate effect.
   11. Nowithstanding the right to suspend the possibility of using the Client Panel, the Service Provider may terminate the contract for provision of an E-Service with the Service Recipient, without stating a reason, with a 14-days’ notice.
6. PAYMENTS IN THE WEBSITE
   1. To obtain full access to the full version of Client Panel functionalities and to renew the access period to the Client Panel after the expiry of the trial period, the Website enables the Service Recipient to enter into a contract for sale of services through the “Payments” tab in the Client Panel, which makes it possible to use the Client Panel effectively.The types, description, and prices of services, including subscriptions, are available in the “Payments” tab in the Client Panel by going to the “Plans” tab.
   2. The Service Recipient may purchase the services available at the Shop by using an order form available at the Shop; in such an event, the contract for sales of services is made upon filling in the order form and clicking “Pay“.
   3. Use of the order forms starts when the Service Recipient selects the subscription type. The order has been placed when the Service Recipients completes all the following four steps: (1) clicking the “Select” field, (2) optionally: adding an optional additional service to the order (e.g. “loyalty scheme”), (3) filling in the order form, and (4) clicking the field “Pay” after having filled in the order form – until that moment it is possible to modify the entered data. In the order form, the Service Recipient has to provide the following data concerning the Service Recipient: first and last name/company name, address of the Service Recipient’s operations/registered office, tax id. number (NIP), and e-mail address.
   4. The Service Recipient is obliged to make a payment immediately or, in the event of repeated payments (subscription), on the following dates:
      1. in the event of a card payment, where the funds are debited automatically – no later than a day before the start of the settlement period which the payment pertains to;
      2. in the event of payment by transfer, including if a part of the payment is settled by setoff as referred to in subsection 8.9 of the Terms – no later than on the date specified in the invoice sent by the Service Provider after the end of a settlement period.
   5. If no different settlement period has been specified, a settlement period is one month. The first settlement period starts on the first date on which the Service Provider provided the Service Recipient with access to the Client Panel as a part of a payable subscription.
   6. The price of the selected service package is provided, as selected by the Service Recipient, in currency relevant to the geographical location of the  Service Recipient, nett of locally applicable sales or value added taxes.
   7. The Service Provider provides the Service Recipient with access to payable functionalities in the Client Panel immediately, not later, however, than within 3 Working Days of the payment having been recorded on the bank account or settlement account of the Service Provider, unless a different date or manner of providing the service has been specified in the description of a specific functionality or agreed by the Service Provider and the Service Recipient.
   8. Payments under contracts for sale of services may be made as follows:
      1. by transfer to the Service Provider’s bank account;
      2. in the form of an e-payment or by a payment card via PayU.in or Stripe.com services
7. LAUNCHING PAYU ONLINE PAYMENT
   1. The full version of the Client Panel allows the Service Recipient to provide  third party electronic payments to end customers. Enabling  this payment method is possible by selecting the appropriate payment setting in the Client Panel. The complete list of available third party electronic payment methods as well as their respective third party payment terms and conditions are provided in the the pricelist section of the Client Panel.
8. MENU TEMPLATES
   1. Menu Templates E-Service offers a selection of graphic templates for a website of the Service Recipient’s restaurant and enables the Service Recipient to implement it. The Service Recipient can use a selected Menu Template after choosing an appropriate tab in the Website and completing all of the following four steps – (1) selecting an appropriate template, (2) in the case of payable Templates – completing a path of ordering services and paying for them in a third party website, (3) logging in the Client Panel, (4) integrating the website of the Service Recipient’s restaurant with the selected template using the Client Panel functionalities.
   2. This E-Service includes payable as well as free-of-charge Menu Templates. In the case of free Templates, the Service Provider makes a selected Template available to the Service Recipient immediately after the Service Recipient has completed the steps listed above, except for the path of ordering a service in the third party website and paying for it. In the case of payable Templates, the Service Provider makes a selected Template available to the Service Recipient immediately after the Service Recipient has paid for the Template service via the third party website where the Service Recipient will be redirected after selecting a payable Template.
   3. If the Service Recipient chooses a payable Template, they have to complete a path of ordering a service and paying for it in the third party website, which is regulated by the rules of that website. The Service Provider recommends that you should read the rules and the privacy policy of the appropriate website. These Terms and the Privacy Policy pertain to the Website of the Service Provider only.
9. KNOWLEDGE BASE
   1. This section and the following sections of the Terms apply to the E-Services available to Service Recipients independently from the Client Panel, with no need to open an account in that Panel. Such services are free of charge unless it has been stipulated otherwise in the description of a specific service in the Website or during the ordering process of a specific service.
   2. The Knowledge Base is a joint name for functionalities available in the Webiste the purpose of which is to present the Service Recipient with the principles of the website operation,demonstrate the manner of using the main functions of the Client Panel, to educate, and to share knowledge on running a business in the food catering industry, in particular the part of operations conducted online and marketing.
   3. The Knowledge Base includes the following functionalities available directly from the Website, with no need to register:
      1. Blog;
      2. Guidebooks;
      3. Presentations;
      4. Case Studies;
      5. Demo.
   4. Moreover, the Knowledge Base includes the following functionalities available after the e-mail address of the Service Recipient has been provided and verified:
      1. Webinarium;
      2. E-books;
      3. Newsletter.
   5. It is possible to get access to the functionalities referred to in subsection 7.4 after having provided the first name and e-mail address in the form which is available in each tab concerning a specific functionality and after clicking on the action field.
   6. E-Services regulated in this Section of the Terms, except for the Newsletter, are one-off services and end when the Service Recipient stops using them. The Newsletter is a continuous service; however, the Service Recipient may, at each time and without stating a reason, resign from the Newsletter by using an appropriate option in a Newsletter message or by sending a request to the Service Provider, in particular using the Contact Form.
10. CONTACT FORM AND ORDERING A PRESENTATION
    1. E-Services regulated in this section of the Terms provide a possibility of contacting the Service Provider in order to ask a question about the functioning of the Website, to make a complaint, or to place an order for a presentation of functionalities in the Client Panel.
    2. With the Order Presentation E-Service one can order an online presentation which demonstrates the operation of the Client Panel to the Service Recipient. It is possible to order a presentation through the Website, after going to the “Order presentation” tab and completing the following two steps by the Service Recipient: (1) filling in an order form, and (2) clicking on the “Order presentation” field after filling in the form. In the form, the Service Recipient has to provide the following data: an e-mail address and a phone number. After the Service Recipient has completed the above steps, the Service Provider will promptly contact the Service Recipient using the contact data provided in the order form to agree on all details of the presentation.
    3. Order Presentation is a free-of-charge service; it is one-off and ends when the Service Provider completes the presentation or when the Service Recipient resigns before the end of the presentation.
    4. The use of the Contact Form starts after (1) going to the “Contact” tab, (2) filling in the Contact Form, and (3) clicking the “Send message” field – until that moment the Service Recipient may modify the entered data. In the Contact Form, the Service Recipient has to provide the following data: an e-mail address, a phone number, and a message.
    5. The Contact Form E-Service is provided free-of-charge; it is one-off and ends after the message has been sent or when the Service Recipient has resigned from sending a message.
11. CONTACTING THE SERVICE PROVIDERThe main form of day-to-day remote communication with Service Recipients is a chat available in the Client Panel.
12. COMPLAINTS ABOUT THE WEBSITE
    1. Service Recipients may make complaints about the operation of the Website using the contact form available in the Website in the “Contact” tab or in writing to the following address: Sienkiewicza 85/87/8 P. XI, 90-057 Łódź.
    2. The Service Provider recommends that the following information be provided in the complaint: (1) information on and circumstances referring to the subject matter of the complaint, including without being limited to the type and date of an irregularity; (2) claims of the Service Recipient; and (3) contact data of the person making the complaint, which will facilitate and accelerate the processing of the complaint by the Service Provider. The requirements referred to in the preceding sentence are only recommendations and have no effect on the efficiency of complaints made without the recommended description.
    3. The Service Provider will reply to the complaint promptly, not later than within 30 calendar days of receiving the complaint.
13. ADDITIONAL CONTRACTUAL PROVISIONS
    1. The Service Provider has the right to withdraw from a contract made with the Service Recipient within 14 calendar days of entering into the contract. In such a case, a withdrawal may be effected without stating a reason and does not result in any legal claims of the Service Recipient against the Service Provider.
    2. Pursuant to Art. 558(1) of the Polish Civil Code, the Service Provider excludes any liability towards the Service Provider on account of statutory guarantee concerning all contracts made in the Website.
    3. The Service Provider has the right to take, at any time, actions aimed at the verification whether the information provided by the Service Recipient is true, reliable, and accurate. As a part of the right to verify, the Service Provider has the right, among other things, to request that the Service Provider send certificates or other documents which the Service Recipient holds and which are necessary to conduct the verification. During the verification referred to above, the Service Provider has the right to suspend the Client Panel for the time of verification.
    4. The Service Provider does not guarantee that the Website is free from defects or that the Service Provider is able to operate the Website with no problems or disturbances. Moreover, due to constant development of new methods of network hacking and attacking, the Service Provider does not guarantee that the Website is free from any vulnerabilities to hacking or attacks.
    5. The Service Provider provides the Website as is and does not make any guarantees, express or implied, concerning its fitness for any specific purpose. In no case can the Service Provider and its suppliers be held liable for damage or violation of third party rights caused directly or indirectly by the operation of the Website, including damage caused by an inability to use or breaks in operation, or any repeated, incidental, or special damage of any kind, including loss of profit or reduction of costs, regardless from whether a representative of the Service Provider has been notified of the possibility of such damage or third party claims taking place.
    6. The Service Provider does not verify whether the contents entered by the Service Recipient in the Client Panel and the manner of using the Client Panel and its functionalities by the Service Recipient are reliable, accurate, and true. The Service Recipient uses the Client Panel, including entering contents and using Client Panel functionalities, at their own responsibility.
    7. The Service Provider may not be held liable towards the Service Recipient for any damage or failure to comply with its obligations resulting from force majeure or any other reasons independent from the Service Provider.
    8. The Service Provider may in no circumstances be held legally liable towards the Service Recipient for damage incurred as a result of proper or improper use of or an inability to use the Website, regardless from whether how the damage was caused and what it pertains to, and whether contractual, tort, or any other liability is invoked, even if the Service Provider knew, should have known, or has been informed on the possibility of such damage.
    9. The Service Provider may be held liable towards the Service Recipient, regardless from the legal basis of the liability, only up to the value of payments for using the functionalities of the Client Panel for the last year made by the Service Recipient to the Service Provider. The Service Provider may be held liable to the Service Recipient only for typical and actually incurred damage, predictable when entering into the contract, except for loss of profit.
14. COPYRIGHT
    1. Copyright and intellectual property rights to the Website as a whole and to its individual elements, including content, graphics, works, designs, and marks available in the Website, are owned by the Service Provider or other entitled third parties and are protected under the Copyright Act and other generally applicable legal regulations. The protection covering the Website includes all forms of expression.
    2. The structure, organization, and source code of the Website are valuable trade secrets of the Service Provider and its suppliers. The Website should be treated like any other work protected with copyright. The Service Recipient has no right to copy the Website and its functionalities, except for the cases permitted under generally applicable legal regulations. The Service Recipient also undertakes to refrain from modifying, adapting, translating, decoding, decompiling, disassembling, or attempting to determine the source code of the Website in any other way, except for the cases permitted under generally applicable legal regulations.
    3. Individual elements of the Website may be governed by separate rules and licenses to use; in such a case, the Service Recipient is obliged to observe them as well.
    4. By using the Website, the Service Recipient is not granted any copyright to the Website. Upon gaining access to a specific functionality, the Service Recipient is only granted a non-transferrable and non-exclusive license to use the Website, according to its purpose, these Terms, law, and good practices, with consideration of the interests, personal data, copyright, and intellectual property of the Service Provider, other Service Recipients, and third parties.
    5. The license is granted with no territorial restrictions.
    6. The license does not authorise the Service Recipient to sell, lease, lend, rent, or sub-license the whole Client Panel or its individual elements or to lend them for use.
    7. The Service Provider may terminate the license with immediate effect if the Service Recipient violates these Terms or other generally applicable legal regulations.
    8. Trademarks of the Service Recipients and third parties should be used in line with applicable legal regulations.
15. TECHNICAL BREAKS
    1. The Service Provider makes every effort to ensure correct and uninterrupted functioning of the Website. However, due to the complexity of the Website as well as external factors independent from the Service Provider (e.g. DDOS attacks – distributed denial of service), errors and technical failures are possible that may prevent or limit in a certain manner the functioning of the Website. In such a case, the Service Provider will take any possible and justified action to ensure that negative consequences of such events are limited as much as possible.
    2. Apart from breaks caused by errors and technical failures, other technical breaks are also possible, during which the Service Provider takes action to develop the Website and secure it against errors and technical failures.
    3. The Service Provider is obliged to schedule technical breaks in the manner that makes them as little troublesome as possible for Service Recipients and only for periods necessary for the Service Provider to complete essential actions.
    4. The Service Provider may not be held liable towards the Service Recipient for damage and failure to comply with its obligations as a result of errors and technical failures as well as technical breaks referred to in this section of the Terms.
    5. If the Service Recipient has no access to the Client Panel for more than 3 hours due to a failure of an IT system of the Service Provider, the Service Provider may return, to the Service Recipient, a part of payments made by the Service Recipient to the Service Provider as a part of the subscription model, in proportion to the time over which the Service Recipient had no access to the Client Panel.
16. ENTRUSTING PERSONAL DATA PROCESSINGThe use of the Website may be related to a need of entrusting the Service Provider, by the Service Recipient, with processing of the personal data of third parties (in particular clients of the Service Recipient’s restaurant). Matters related to entrusting processing of personal data are regulated under Appendix No. 1 hereto.
17. FINAL PROVISIONS
    1. Contracts entered into with Tastysoft sp. z o.o. through UpMenu are made in line with Polish law and in the Polish language.
    2. If the whole or a part of any provision of the Terms occurs to be invalid, other provisions remain valid; the Service Provider and the Service Recipient undertake to replace, at the request of either of them, invalid provisions with such provisions whose legal and economic effects are similar to the replaced provisions as much as possible.
    3. Amendments of the Terms – The Service Provider reserves the right to amend the Terms for important reasons, i.e. amendment to legal regulations, adding new E-Services, or important changes of the current E-Services, to the extent that those changes influence the performance of the provisions hereof. The Service Provider also reserves the right to add new methods of payment. The amended Terms are applicable to the Service Recipient if the requirements referred to in Art. 384 and 384[1] of the Civil Code have been met, i.e. if the Service Recipient has been duly notified of the amendments and refrained from terminating the contract within 14 calendar days of the notice date.
    4. All disputes arising between the Service Provider and the Service Recipient will be referred to the court competent for the place where the Service Provider’s registered office is located.
    5. All matters which are not regulated hereunder are governed with generally applicable Polish legal regulations, including without being limited to the Civil Code, the Act concerning provision of services in the electronic form of 18 July 2002 (Dziennik Ustaw 2002, No. 144, item 1204, as amended); and other appropriate generally applicable legal regulations.

Thank you for reading the Terms carefully! If you have any questions, do not hesitate to get in touch with us. Join our community, UpMenu Team  

APPENDIX NO. 1 TO THE TERMSCONTRACT CONCERNING ENTRUSTING OF PERSONAL DATA PROCESSING

The Service Recipient (further: “Entrusting Entity”) and the Service Provider (further: “Processor”) agree that in order to comply with the obligations resulting from legal regulations, including without being limited to the Regulation of the European Parliament and of the Council (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter referred to as the GDPR, as well as to perform the provisions of these Terms properly, the Entrusting Entity entrusts the Processor with the personal data of third parties for processing for the purpose of the provision, by the Processor, of services referred to in the Terms, to the extent and according to the principles specified herein, considering the provisions of the Terms.

1. The Entrusting Entity represents that the personal data entrusted to the Processor for processing have been collected in line with applicable legal regulations and that the Entrusting Entity is the controller of such data.
2. The Processor represents that it undertakes to use the personal data only to the extent that is necessary to provide the services referred to in the Terms.
3. The scope of processed personal data includes first and last names, e-mail address, phone number, data concerning orders, and the address of the social media profile of the Service Recipient’s clients whose data has been entered by the Service Recipient to the Client Panel using UpMenu tools, in particular for the purpose of processing orders placed by those persons in the Service Recipient’s restaurant using UpMenu.
4. The data are entrusted by the Entrusting Entity only for the following purposes:
   1. for the correct performance of a contract by the Processor, including a contract for provision of the Client Panel E-Service (the data are stored for the period that is necessary to perform or terminate the contract or until the contract expires in a different manner) – in conjunction with Art. 6(1)(b) of the GDPR;
   2. for the establishment, exercise, or defence of legal claims which may be made by the Entrusting Entity against the Processor or by the Processor (the data is kept for the period of a lawful interest pursued by the Processor, not longer, however, than for the period of claim limitation, i.e. 3 years in the case of claims related to business operations) – in conjunction with Art. 6(1)(f) of the GDPR.
5. The Processor processes the entrusted personal data based on documented instructions from the Entrusting Party only. The Processor shall not entrust the personal data to further entities without an explicit written consent of the Entrusting Party.
6. The Processor undertakes to secure the personal data before starting processing, by implementing and maintaining technical and organisational measures which ensure a proper security level adequate to the risk related to data processing referred to in Art. 32 of the GDPR, adequate to the type of data processed.
7. The Processor undertakes to exercise due diligence in processing the entrusted personal data. The Processor undertakes, in particular, as much as it is able to, considering the nature of processing and available information, to assist the Entrusting Entity in complying with the obligations imposed on it under Art. 32-36 of the GDPR and to reply to the requests of data subjects related to exercising data subjects’ rights.
8. The Processor undertakes to authorise, to process personal data, all parties who will process the entrusted data for the purpose of performing this Contract on behalf of the Processor.
9. The Processor undertakes to ensure that the processed data is kept confidential by parties authorised by it to process personal data for the purpose of performing this Contract, during employment at the Processor’s and after the termination of such employment.
10. After the end of the provision of services related to processing, the Processor shall erase all personal data and remove all existing copies of such data unless law of the EU or of a Member State obligate the Processor to keep the personal data.
11. The Processor represents that each person (e.g. an employee, a person working under civil law contracts, other people working for the Processor) who has been admitted to the processing of the entrusted personal data by the Processor will be obligated to keep such data confidential. The confidentiality shall also include all information concerning manners of securing the personal data entrusted for processing.
12. The Processor undertakes to notify the Entrusting Entity promptly of the following:
    1. each lawful request for access to personal data from a competent state authority unless the prohibition of notification results from legal regulations, including without being limited to criminal proceedings regulations, when the prohibition aims at ensuring the confidentiality of a pending investigation;
    2. each unauthorised access to personal data;
    3. each request from a person whose data are processed, refraining, at the same time, from replying to such a request;
    4. initiation of an inspection procedure at the Processor’s concerning the manner of processing the entrusted personal data;
    5. each doubt concerning instructions provided by the Entrusting Entity if, in the opinion of the Processor, the instructions violate the GDPR.
13. The Processor shall provide, to the Entrusting Entity, at its request, all information necessary to demonstrate that it has complied with all obligations imposed on the Processor under this Contract and the GDPR.