Controller
Tunoo GmbH
Kesselstr. 3
40221 Düsseldorf
Germany
Phone: 02131 70861862-3
Email: info@robexa.de
Website: www.robexa.de
Represented by:
Hamid Eshaghi
Access data / server logs
When you access this website, the server automatically collects and stores information in server log files. This may include in particular:
- IP address
- date and time of the request
- requested URL
- referrer URL
- browser type and version (user agent)
- operating system
- HTTP status code
- amount of data transferred
This data is processed to deliver the website, ensure secure and stable operation, prevent abuse, and troubleshoot technical issues.
Legal basis: Art. 6(1)(f) GDPR (legitimate interests in a secure and functional website).
Log data is stored only as long as necessary for security and operation of the website and is then deleted or anonymised.
Contact and demo request
If you use the contact or demo request form, we process the information you provide. This may include in particular:
- name
- restaurant / company
- city
- email address
- phone number
- type of business
- whether delivery is offered
- whether waiters take orders at the table
- optional message, if provided
The purposes are to handle your inquiry, contact you, prepare a consultation or demo, and, where applicable, send a confirmation email to the address you provided.
Legal bases: Art. 6(1)(b) GDPR (pre-contractual measures at your request) and Art. 6(1)(f) GDPR (legitimate interests in handling business inquiries).
Email delivery and confirmation emails
When you submit the form, an internal notification may be sent to Robexa/Tunoo GmbH and a confirmation email may be sent to the email address you provided. Delivery uses a configured SMTP/email service.
We use an email service provider for sending and receiving email; data provided in the form may be processed for the purpose of delivery. Where Google services are used for email (for example if SMTP is configured to use smtp.gmail.com or similar), the provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Legal bases: Art. 6(1)(b) GDPR and Art. 6(1)(f) GDPR (reliability and traceability of communication).
Cookies, local storage and analytics
A review of the website source code did not find Google Analytics, GTM, Meta/Facebook Pixel, Plausible, PostHog, or Hotjar integrations, nor corresponding tracking scripts or deliberate use of document.cookie, localStorage, or sessionStorage for marketing or analytics.
The website currently does not use tracking cookies or analytics tools that require consent. Technically necessary storage may occur where required to operate the website.
Legal basis: Art. 6(1)(f) GDPR; where the TDDDG applies, Section 25(2) TDDDG may apply to technically necessary storage or access.
Hosting and technical service providers
This website is hosted with a technical service provider. The hosting provider processes technical access data only to provide, secure, and maintain the website.
Legal basis: Art. 6(1)(f) GDPR. Where a data processing agreement exists, Art. 28 GDPR applies.
Recipients of personal data
Recipients may include in particular:
- employees of Tunoo GmbH / Robexa with a legitimate business need
- hosting or IT service providers
- email service providers
- other processors, where actually used
Third-country transfers
When using certain providers (for example email services based outside the EU/EEA), processing outside the EU/EEA cannot be fully excluded. In such cases we rely on appropriate safeguards under Art. 44 et seq. GDPR, in particular the EU Standard Contractual Clauses, where required.
Storage duration
We store personal data only as long as necessary for the purposes described above or where statutory retention obligations apply.
Your rights
Subject to the statutory requirements, you have in particular the following rights:
- Art. 15 GDPR: right of access
- Art. 16 GDPR: right to rectification
- Art. 17 GDPR: right to erasure
- Art. 18 GDPR: right to restriction of processing
- Art. 20 GDPR: right to data portability
- Art. 21 GDPR: right to object
- Art. 7(3) GDPR: withdraw consent, where processing is based on consent
- Art. 77 GDPR: lodge a complaint with a supervisory authority
Obligation to provide data
Providing certain information is necessary so that we can process your inquiry and contact you. Without this information we cannot, or can only partially, handle your request.
Automated decision-making
We do not use automated decision-making, including profiling.
Updates
We may update this privacy policy if our website, processing activities, or legal requirements change.