Privacy Policy
Last updated: 20 October 2026
LunchSpin is provided by [Företagsnamn / name], [Adress], [Organisationsnummer]. Contact: Lunchspin25@gmail.com.
Data controller
[Företagsnamn / name] is the data controller (personuppgiftsansvarig) for processing whose purposes and means it determines. Contact Lunchspin25@gmail.com for questions or rights requests. The provider's identity must be confirmed before publication.
Data and purposes
City searches and autocomplete queries go to our server and then Google Places through Lovable's connector to find restaurants. If you click 'Use my location' and allow location access, coordinates rounded to 0.001 degrees are used to find nearby restaurants. Location is not saved in search history. The hosting provider processes technical data, such as IP addresses, for delivery and operation. LunchSpin has no accounts, advertising or analytics.
Your browser choices
The consent choice is essential storage. Theme, favourites and five recent successful city searches are saved between visits only with preferences consent. Without consent, visit-only memory is used and old stored values are deleted. Reusing a search fetches fresh information from Google. A separate choice remembers Google Maps preferences. See the Cookie Policy for keys and durations.
Google and other recipients
Google supplies restaurant details, ratings, photos and reviews. Queries and rounded location go to Google through our server and Lovable's connector. Photos are fetched by your browser from Google, which receives your IP address. The Hanken Grotesk font is hosted on our own site and is not loaded from Google. Google Maps loads only after a click to show a map and may then set its own cookies. Restaurant, directions and reviewer links open external websites only when followed. Google's processing is described at https://policies.google.com/privacy.
Retention and operation
Consent is renewed after 12 months or a version change. Browser choices are deleted on withdrawal or expiry and can also be cleared by you. Google responses are cached in server memory for five minutes; photo redirects have a five-minute private cache lifetime. Results are held in memory during a visit. Technical errors are logged on the server; no searches or location data are stored in your browser for this.
Legal basis and transfers
Consent is used for optional storage under chapter 9, section 28 of Sweden's Electronic Communications Act (2022:482). This does not automatically establish the GDPR legal basis for all personal data processing. Before publication, the provider must document the applicable GDPR bases, recipients/processors, log retention and any transfers outside the EU/EEA with applicable safeguards for Google and Lovable. These facts remain unverified.
Your rights and complaints
You can withdraw consent as easily as giving it through Cookie settings on every page. Withdrawal does not affect the lawfulness of earlier processing. Depending on the legal basis, you may request access, rectification, erasure, restriction and portability, and object to processing. Contact Lunchspin25@gmail.com. You can complain to Integritetsskyddsmyndigheten (IMY), Sweden's data protection authority, at https://www.imy.se/klagomal. PTS supervises the rules on storing or accessing information on terminal equipment.