Privacy policy
1. Controller
Oleksandr Rybalchenko, An d. Ottosäule 14, 85521 Ottobrunn, Deutschland. Email: support@kellno.com.
2. Hosting and server log files
When you visit this website, technically necessary data (IP address, date and time, requested page, browser and operating system information) is processed in server log files. This serves the secure and stable operation of the website (Art. 6(1)(f) GDPR).
The website is hosted by Railway Corporation. Enquiries from the contact form are stored in a database at Supabase Inc. (data centre in London, United Kingdom). Data processing agreements are or will be concluded with both providers. Where data is transferred to countries outside the EU/EEA (e.g. the United Kingdom, the USA), this is based on an adequacy decision of the EU Commission or standard contractual clauses.
3. Cookies and tracking
The public pages of this website do not set cookies and do not use tracking or analytics services. The customer area (sign-in) uses only technically necessary cookies for logging in (Art. 6(1)(b) GDPR, Section 25(2) TDDDG).
4. Contact form and email
If you contact us via the form or by email we process restaurant name, name, email address and – where provided – phone number, city and message, to answer your enquiry and present our offer. The legal basis is your consent (Art. 6(1)(a) GDPR) or steps prior to entering into a contract (Art. 6(1)(b) GDPR). You can withdraw consent at any time with effect for the future.
We delete your details once they are no longer needed for the purpose, at the latest twelve months after the last communication, unless statutory retention obligations apply.
5. Demo on the home page
The interactive demo on the home page (menu, language switch, AI chat) runs entirely in your browser with fixed sample data. No data is transmitted to us, to any third party or to OpenAI, and no cookies are set.
A link on the page also leads to the real, public menu of our reference customer Donisl at donislki.nocodly.com. The notes under section 6 for guest menus apply there.
6. Customer account, menu data and AI features
If you create an account we process your email address and password (as a hash only) through Supabase authentication so that you can use the customer area (Art. 6(1)(b) GDPR). Your menu content (dishes, prices, photos, logo, texts) is stored at Supabase and shown publicly at your menu address.
For AI features (importing your files, automatic translation, the AI assistant for guests) we send the content needed for them – e.g. uploaded menu documents, dish descriptions and guests' questions – to OpenAI (USA). Uploaded documents are not stored permanently; only the result you confirm is added to your menu. Please do not upload documents containing third parties' personal data. The transfer is based on standard contractual clauses; data processing agreements are or will be concluded with the providers.
Guests who open a menu are served without cookies. We use the browser language to provide the menu. For restaurants' usage statistics (views, opened dishes) we record anonymised events without cookies and without storing IP addresses; individual guests are not recognised across days.
Restaurants using the service are responsible for the content of their menu themselves, in particular the accuracy of allergen information. On request we conclude a data processing agreement with restaurant customers.
7. Your rights
You have the right of access, rectification, erasure, restriction of processing, data portability and objection. Contact us at the email address above. You also have the right to lodge a complaint with a supervisory authority, for example the Bavarian State Office for Data Protection Supervision (www.lda.bayern.de).
8. Last updated
September 2026