Personal Data Deletion

Last updated: 16th May 2026

This page describes how to request deletion of your personal data processed by Ordinia. The right to erasure (or “right to be forgotten”) is guaranteed by Article 17 of Regulation (EU) 2016/679 (GDPR).

Who this applies to

What we CANNOT delete

By law we are required to retain certain data even after a deletion request:

• Tax and accounting data — invoices, receipts, payment data (10 years, Article 2220 of the Italian Civil Code and Presidential Decree 633/72)
• Invoiced order data — the restaurant is required to retain it for tax purposes (10 years)
• Security logs — relevant security events may be retained for as long as necessary to investigate any unlawful activity

In such cases, data is restricted to processing only for legal purposes and is no longer used for any other purpose.

How to request deletion

Method 1 — Email (recommended)

Send an email to privacy@ordinia.net with:

• Subject: “Data deletion request — GDPR Art. 17”
• Body:
  • Your full name
  • The email address associated with the account (or the phone number used for ordering via WhatsApp)
  • The name of the restaurant you ordered from (if applicable)
  • An explicit confirmation: “I request deletion of my personal data under Article 17 GDPR”

To verify your identity we may ask for additional documents (e.g. a copy of an ID document). We will process such documents only for verification purposes and delete them immediately afterward.

Method 2 — From your account

If you have an administrator account:

1. Log in to your dashboard at <subdomain>.ordinia.net/admin
2. Go to Settings → Account
3. Click Request deletion

(Feature coming soon — until release please use Method 1.)

Method 3 — Postal mail

You may submit the request in paper form to:

Albert Kweku Ogoe Via don Bonsignori, 156, Prevalle, Brescia Italy

Timing

We will respond to the request within 30 days of receipt, as required by Article 12(3) GDPR. In particularly complex cases the deadline may be extended by a further 60 days; in such case we will inform you within the first 30 days of the reasons for the delay.

The actual deletion process, once your identity is verified, is completed within 7 business days.

What happens after deletion

• Your account is deactivated immediately
• Your personal data is irreversibly deleted or anonymized from production systems
• Backups are overwritten in the next cycle (maximum 30 days)
• Data retained under legal obligation (see above) is segregated and not used for other purposes
• You will receive an email confirmation when deletion is complete

Complaints to the supervisory authority

If you are not satisfied with our response, you have the right to lodge a complaint with the Italian data protection authority:

Garante per la protezione dei dati personali Piazza Venezia 11 — 00187 Roma, Italy garanteprivacy.it urp@gpdp.it

EU residents may also lodge a complaint with the supervisory authority of their country of residence.

Contact

For any questions about this procedure: privacy@ordinia.net