Privacy Policy

Ja Thai Wok & Sushi is the data controller for the data the restaurant itself processes through this website.

The service is provided to you by Sev Nordic AB (company reg. no. 559595-6052), a Swedish company inside the EU. The data is stored inside the EU — in Stockholm, Frankfurt and Ireland — and is not stored anywhere outside the EU/EEA. Where the data sits is not, on its own, what decides whether a transfer takes place: who is given access to it is. Some providers in the table above are American companies even where the processing itself runs inside the EU. That counts as a transfer to a third country and is made on the basis of the European Commission's Standard Contractual Clauses (Decision 2021/914). A transfer impact assessment covering them has been carried out and is available on request.

Onesync processes this data on behalf of the restaurant and engages other providers to do so. They are listed, with what each one does and where, under Onesync’s sub-processors.

Questions can be sent to info@jathai.se.

• Contact details such as name, email address and phone number when you send a message.
• The content of your message, for example a question about the menu, opening hours or allergies.
• Messages you write in the website chat.
• Name and email address if you sign up for news and offers, together with your consent.
• Technical information needed for security, troubleshooting and cookie handling.
• Consent choices for cookies and similar technology.

• To reply to messages and requests.
• To show accurate information about the restaurant, menus, lunch, contact details and opening hours.
• To send news and offers to you if you have signed up, until you unsubscribe.
• To protect the website and manage consent.

• Legitimate interest: answering questions, protecting the website and showing information about the restaurant.
• Consent: newsletter, optional cookies.
• Legal obligation: if data must be retained by law.

The chat on this website is answered by an AI assistant, and sometimes by a person answering on behalf of the restaurant. The chat tells you an AI assistant is in use before you write anything.

To produce an answer, what you write — together with information about the restaurant such as the menu and opening hours — is sent to Onesync, which operates the website for the restaurant, and on to the sub-processor that runs the language model: Amazon Web Services EMEA SARL (Amazon Bedrock). It processes the data inside the EU, in Frankfurt and Ireland.

Please do not write national identity numbers, health information or other sensitive data in the chat. To raise something of that kind, contact the restaurant directly.

The conversation is also stored in your own browser so you can continue it later. On a shared computer or tablet, clear your browsing data when you are done — otherwise the next person can read it.

Contact messages are kept only for as long as needed to handle the matter and any follow-up.

Chat conversations are kept for 90 days after the last message and are then deleted automatically.

Your sign-up for news and offers is kept until you unsubscribe.

Cookie choices are kept for 12 months, after which you are asked again. You can change them at any time from the link in the footer.

You can request access to, correction of, or deletion of your personal data. You can also object to certain processing or withdraw your consent.

If you believe your data is being handled incorrectly, you can contact the restaurant or file a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY).

Questions can be sent to info@jathai.se.