Privacy Policy
PRIVACY POLICY
Last updated: 16 August 2026
This Privacy Policy explains how Tandoor Indian Cuisine processes personal data when you visit our website, place an order, make a table reservation, create an account, or contact us.
1. WHO IS RESPONSIBLE FOR YOUR DATA?
Tandoor Indian Cuisine is the data controller for the processing described here.
Address: Sentrumsgården 17, 2022 Gjerdrum, NorwayEmail: tandoor.gjerdrum@gmail.comTelephone: +47 977 66 677
2. PERSONAL DATA WE COLLECT
Depending on how you use our services, we may collect your name, telephone number, email address, delivery address, order and reservation details, account information, messages to us, payment status, IP address, device information, and cookie data. We do not store complete payment-card details; payments are handled by the relevant payment provider.
3. WHY WE USE PERSONAL DATA
We use personal data to process and deliver orders, take payment, manage reservations, provide customer service, maintain customer accounts, meet accounting, tax, food-safety and other legal obligations, prevent fraud, maintain website security, troubleshoot problems, and improve our services. Marketing is sent only where we have consent or another lawful basis, and you may unsubscribe at any time.
Our legal bases are performance of a contract, compliance with legal obligations, our legitimate interests in operating and protecting the restaurant and website, and consent where required.
4. WHO RECEIVES THE DATA?
We share only the data necessary with service providers that help us operate, such as our online-ordering and reservation platform, hosting provider, payment provider, delivery provider, and professional advisers. Public authorities may receive data where required by law. Service providers may use the data only for agreed purposes and must protect it.
5. TRANSFERS OUTSIDE THE EEA
If a service provider processes personal data outside the European Economic Area, we require a lawful transfer mechanism and appropriate safeguards in accordance with the GDPR.
6. HOW LONG WE KEEP DATA
We keep personal data only for as long as necessary for the relevant purpose. Order, payment, and accounting records are kept for the period required by Norwegian law. Account data is kept while the account is active or until deletion is requested, unless we must retain certain information. Reservation and enquiry data is deleted or anonymised when it is no longer needed.
7. COOKIES
We use necessary cookies to operate ordering, login, security, cart, and reservation functions. Optional analytics or marketing cookies are used only when permitted. You can manage non-essential cookies through the cookie notice or your browser settings. Blocking necessary cookies may prevent parts of the website from working.
8. YOUR RIGHTS
Under the GDPR and Norwegian data-protection law, you may have the right to access, correct, delete, or restrict your personal data, object to processing, receive portable data, and withdraw consent. Some rights may be limited where we have a legal duty to retain information.
To exercise your rights, contact tandoor.gjerdrum@gmail.com. We may ask for information necessary to verify your identity. You may also complain to the Norwegian Data Protection Authority (Datatilsynet) at datatilsynet.no.
9. SECURITY AND CHANGES
We use reasonable technical and organisational measures to protect personal data. We may update this policy when our services or legal obligations change. The current version will always be published on this page.
Last updated: 16 August 2026
This Privacy Policy explains how Tandoor Indian Cuisine processes personal data when you visit our website, place an order, make a table reservation, create an account, or contact us.
1. WHO IS RESPONSIBLE FOR YOUR DATA?
Tandoor Indian Cuisine is the data controller for the processing described here.
Address: Sentrumsgården 17, 2022 Gjerdrum, NorwayEmail: tandoor.gjerdrum@gmail.comTelephone: +47 977 66 677
2. PERSONAL DATA WE COLLECT
Depending on how you use our services, we may collect your name, telephone number, email address, delivery address, order and reservation details, account information, messages to us, payment status, IP address, device information, and cookie data. We do not store complete payment-card details; payments are handled by the relevant payment provider.
3. WHY WE USE PERSONAL DATA
We use personal data to process and deliver orders, take payment, manage reservations, provide customer service, maintain customer accounts, meet accounting, tax, food-safety and other legal obligations, prevent fraud, maintain website security, troubleshoot problems, and improve our services. Marketing is sent only where we have consent or another lawful basis, and you may unsubscribe at any time.
Our legal bases are performance of a contract, compliance with legal obligations, our legitimate interests in operating and protecting the restaurant and website, and consent where required.
4. WHO RECEIVES THE DATA?
We share only the data necessary with service providers that help us operate, such as our online-ordering and reservation platform, hosting provider, payment provider, delivery provider, and professional advisers. Public authorities may receive data where required by law. Service providers may use the data only for agreed purposes and must protect it.
5. TRANSFERS OUTSIDE THE EEA
If a service provider processes personal data outside the European Economic Area, we require a lawful transfer mechanism and appropriate safeguards in accordance with the GDPR.
6. HOW LONG WE KEEP DATA
We keep personal data only for as long as necessary for the relevant purpose. Order, payment, and accounting records are kept for the period required by Norwegian law. Account data is kept while the account is active or until deletion is requested, unless we must retain certain information. Reservation and enquiry data is deleted or anonymised when it is no longer needed.
7. COOKIES
We use necessary cookies to operate ordering, login, security, cart, and reservation functions. Optional analytics or marketing cookies are used only when permitted. You can manage non-essential cookies through the cookie notice or your browser settings. Blocking necessary cookies may prevent parts of the website from working.
8. YOUR RIGHTS
Under the GDPR and Norwegian data-protection law, you may have the right to access, correct, delete, or restrict your personal data, object to processing, receive portable data, and withdraw consent. Some rights may be limited where we have a legal duty to retain information.
To exercise your rights, contact tandoor.gjerdrum@gmail.com. We may ask for information necessary to verify your identity. You may also complain to the Norwegian Data Protection Authority (Datatilsynet) at datatilsynet.no.
9. SECURITY AND CHANGES
We use reasonable technical and organisational measures to protect personal data. We may update this policy when our services or legal obligations change. The current version will always be published on this page.