Legal

The controller responsible for personal data on this customer service is:

• Sopu Ravintola, Y-tunnus 3519999-6
• Operating address: Kapponkatu 17, 21210 Raisio, Finland
• Postal address: [Add postal address if different from the store address]
• Customer service email: [Add customer-service email]
• Customer service phone: [Add customer-service phone]
• Privacy contact: [Add privacy / data-protection email]
• Data Protection Officer, if appointed: [Add Data Protection Officer details if one is appointed, otherwise remove this item]

• identity and contact details, such as your name, email address, phone number, and saved customer profile information
• address details, such as delivery address, postal code, city, and address coordinates when address validation or delivery availability checks are used
• order data, such as items ordered, modifiers, special instructions, order type, delivery notes, order totals, and order history
• payment-related metadata, such as payment status, Stripe checkout session references, saved-card summaries, currency, totals, and other order-payment references needed to verify a paid checkout and keep accounting records; sopu ravintula does not store your full card number or CVC
• account and authentication data, such as session identifiers, sign-in provider information, verified-phone status, and account settings
• technical usage data needed to run the service, such as guest cart identifiers, session cookies, browser storage values, and server logs related to requests, security, and troubleshooting

• to provide the service and fulfil your orders, including delivery or pickup, customer account access, and order status updates: contract
• to process payments, verify paid checkout sessions, prevent misuse of the service, and secure customer accounts: contract and legitimate interests
• to comply with accounting, tax, bookkeeping, and other mandatory legal requirements related to orders and payments: legal obligation
• to respond to customer service requests, complaints, and refund issues: contract, legal obligation, and legitimate interests
• to maintain, debug, and improve the reliability and security of the service: legitimate interests
• to use non-essential cookies or similar technologies, if they are added later: consent

• directly from you when you browse the service, create an account, sign in, save settings, enter a delivery address, or place an order
• from payment and authentication providers when you use card payments, Google sign-in, magic-link sign-in, or phone verification
• from Google Maps geocoding services when the service resolves or validates an address that you provide or confirms your delivery area
• payment processor: Stripe, for card payments and related payment confirmation flows
• authentication and identity providers: Stack Auth, Google sign-in, and phone-verification providers such as Firebase when enabled in the service
• address and map provider: Google Maps / Google Geocoding for address resolution and delivery availability checks
• accounting, invoicing, bookkeeping, or receipt providers used by sopu ravintula: [Add any accounting, invoicing, bookkeeping, or receipt-delivery providers used by sopu ravintula]
• other external services used by sopu ravintula: [Add any other external services you use, for example hosting, database, email, SMS, customer support, delivery, accounting, CRM, ERP, analytics, or consent-management tools]

• active customer account and contact data: for as long as the account is needed, and after that only as long as required for legal, security, or dispute-handling purposes
• order, payment, and bookkeeping records: for as long as required by accounting, tax, consumer-protection, and other legal obligations
• guest-cart and session cookies: typically up to 30 days or until cleared earlier
• browser session-storage items used for login flow or checkout notes: until the browser session ends or the data is cleared earlier
• local browser data used for order continuity, such as the latest order reference: until replaced or removed by the user or the service
• some service providers used by sopu ravintula may process personal data outside the European Economic Area using lawful transfer mechanisms such as adequacy decisions or Standard Contractual Clauses where required
• subject to applicable law, you may request access, correction, erasure, restriction, portability, or object to processing based on legitimate interests

You can exercise your privacy rights by contacting sopu ravintula at [Add privacy / data-protection email]. We may need to verify your identity before processing the request. You also have the right to lodge a complaint with the Office of the Data Protection Ombudsman in Finland at tietosuoja.fi.

• Trader: Sopu Ravintola
• Business ID: 3519999-6
• Operating address: Kapponkatu 17, 21210 Raisio, Finland
• Postal address: [Add postal address if different from the store address]
• Customer service email: [Add customer-service email]
• Customer service phone: [Add customer-service phone]

• you can browse the menu without signing in, but checkout requires a signed-in customer account with a verified phone number
• before you place an order, the service shows the main characteristics of the products, your selected order type, the final price, and any delivery fee shown in checkout
• orders are placed through the checkout flow of the service and must be paid with the payment method currently accepted in checkout
• before the final payment-confirmation step, the service or payment flow should make clear that the customer is entering into an order with a payment obligation
• an order becomes binding once sopu ravintula accepts it through the service after successful checkout and payment verification
• availability may change in real time, and sopu ravintula may need to reject or adjust an order if an item is unavailable, outside the delivery area, or affected by a technical or operational issue

• the current customer service may require a customer account and a verified phone number before checkout can be completed
• you must provide accurate and up-to-date account, contact, and delivery information
• prices shown in the service are the prices applicable at the time of ordering unless a clear pricing error is evident
• the checkout summary shows the order subtotal, any delivery fee, and the total amount payable before payment
• the current customer checkout supports card payments processed through Stripe
• if strong customer authentication or other bank/payment-provider verification is required, the customer must complete that step in order to finish payment
• sopu ravintula does not store full payment-card numbers or card security codes
• if a payment fails or is reversed, sopu ravintula may cancel the related order
• other external services involved in order fulfilment or support: [Add any other external service partners involved in ordering, delivery, support, billing, accounting, CRM, or other customer-facing operations]

After an order is accepted, the customer should receive order confirmation in a durable form that can be saved for later reference.

Current confirmation method used by sopu ravintula: [Confirm how the customer receives order confirmation, for example email, SMS, in-app, or a combination].

Current receipt or payment-confirmation method used by sopu ravintula: [Confirm how the customer receives a receipt or durable payment confirmation, for example email, downloadable receipt, Stripe receipt, or in-app].

• delivery is available only to addresses within sopu ravintula's current delivery area, which is checked by address lookup and delivery-zone validation in the service
• pickup availability, estimated preparation times, and delivery estimates are shown as guidance only and may change due to demand, weather, traffic, or operational issues
• if sopu ravintula cannot fulfil an accepted order, sopu ravintula will contact you using the details connected to the order and arrange an appropriate refund or other remedy required by law

Current business hours for delivery and pickup: [Add delivery / pickup opening hours if you want them stated here].

• ingredients, recipes, availability, and product presentation may change
• allergen and intolerance information should be checked carefully before ordering
• if you need clarification about ingredients, allergens, or suitability for a specific dietary need, contact sopu ravintula before ordering at [Add customer-service email] or [Add customer-service phone]
• prepared meals and other perishable goods typically do not have the normal 14-day withdrawal right once the statutory exception applies
• if you need to request a cancellation before preparation begins or before an order is accepted, contact sopu ravintula immediately and sopu ravintula will review the request according to the order status and applicable law
• if your order is missing items, incorrect, defective, or otherwise not as agreed, contact sopu ravintula without delay so the appropriate remedy can be assessed under mandatory consumer law

These terms are governed by the mandatory consumer laws of Finland. Disputes should first be addressed directly with sopu ravintula.

• consumers in Finland may contact Consumer Advisory Services for assistance before escalating a dispute
• disputes may also be referred to the Consumer Disputes Board
• the former EU Online Dispute Resolution platform was discontinued on July 20, 2025 and is no longer available

This customer site uses cookies, local storage, and session storage to keep the menu, cart, sign-in flow, and checkout working. At the time of this draft, the app is built primarily around essential cookies and essential browser storage.

If non-essential analytics, marketing, profiling, embedded media, or support tools are added later, this page should be updated before those technologies are activated.

• foodapp_session: keeps the signed-in customer session active when sopu ravintula's own session cookie is used. Typical retention is up to 30 days unless cleared earlier.
• foodapp_guest_cart: keeps a guest cart linked to your browser until you sign in or the cookie expires. Typical retention is up to 30 days unless cleared earlier.
• if external authentication is enabled, the sign-in provider may also use its own essential authentication cookies

• foodapp_venue_comment in session storage: keeps the customer's checkout comment while the browser session is active.
• foodapp_auth_target_path, foodapp_auth_force_login, foodapp_auth_error_code, foodapp_auth_reauth, and foodapp_auth_ui_transition in session storage: preserve login-flow state during sign-in and redirect handling.
• foodapp_latest_order_id in local storage: remembers the latest order reference so the customer can reopen current-order UI more easily.

• Stripe may use cookies or similar technologies during secure card-checkout and saved-payment-method flows
• Google sign-in, Stack Auth, or phone-verification providers such as Firebase may use cookies or similar technologies when those sign-in features are enabled
• Google Maps and geocoding services may process request data related to address lookup and delivery-area checks
• other external services used on the site: [Add any other external services that set cookies, pixels, SDK storage, analytics identifiers, chat widgets, or consent tools on the customer site]
• strictly necessary cookies and storage used to run the service do not require separate consent under the usual cookie rules
• if sopu ravintula adds non-essential analytics, marketing, profiling, or social-media technologies later, sopu ravintula will request consent before storing or accessing them where consent is required
• cookie settings link / consent control: [Add cookie settings / consent manager link when implemented]

You can delete or block cookies in your browser settings, but doing so may prevent parts of the service, sign-in flow, cart, or checkout from working properly.