Privacy Policy

1. Data Controller

iTaula is the data controller for your personal data. We are committed to protecting your privacy and complying with applicable data protection legislation, including the General Data Protection Regulation (GDPR) and relevant national laws.

2. Data We Collect

We collect the following types of personal data:

Identification data: Name, email address, phone number.
Billing data: Information required for billing and payment of our services.
Usage data: Information on how you use our platform, including access and activity logs.
Technical data: IP address, browser type, operating system and other technical data necessary for the service.
Business data: Information about your restaurant or venue, number of tables and other data related to the use of our services.

3. Purpose of Processing

We use your personal data for the following purposes:

To provide and manage our restaurant software services.
To process your requests and manage your account.
To send you service-related communications, updates and improvements.
To comply with our legal and regulatory obligations.
To improve our services and develop new features.
To carry out statistical analysis and market research (with anonymised data).
To manage billing and collection of our services.

4. Legal Basis

The processing of your personal data is based on:

Contract performance: For the provision of our services.
Consent: For sending commercial and marketing communications.
Legal obligation: To comply with our tax and legal obligations.
Legitimate interest: To improve our services and ensure security.

5. Data Retention

We will retain your personal data for as long as necessary to fulfil the purposes for which it was collected, and in any case for the periods required by applicable law. After the retention period, we will securely delete your data.

6. Sharing Data with Third Parties

We do not sell or rent your personal data. We may share your data with:

Service providers: Companies that help us operate our business (hosting, payment processing, email services) under strict confidentiality agreements.
Public authorities: When required by law or court order.
Billing services: For tax and e-invoicing compliance.

7. International Transfers

Where international data transfers are necessary, we ensure they are carried out with appropriate safeguards under applicable law, including EU-approved standard contractual clauses.

8. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction or alteration. We use encryption, access controls and up-to-date security systems.

9. Your Rights

You have the right to:

Access: Obtain information about the personal data we process.
Rectification: Correct inaccurate or incomplete data.
Erasure: Request deletion of your data when it is no longer necessary.
Object: Object to the processing of your data in certain circumstances.
Restriction: Request restriction of processing in certain cases.
Portability: Receive your data in a structured, commonly used format.
Withdraw consent: At any time, when processing is based on consent.

To exercise these rights, you can contact us at: our contact page.

10. Cookies and Similar Technologies

We use cookies and similar technologies to improve your experience on our website. For more information, see our cookie policy or adjust your browser settings.

11. Minors

Our services are aimed at hospitality professionals. We do not knowingly collect personal data from anyone under 16 without parental or guardian consent.

12. Changes to this Policy

We reserve the right to modify this privacy policy. We will notify you of any significant changes via a notice on our website or by email. The date of the last update is shown at the top of this document.

13. Contact and Complaints

If you have questions about this privacy policy or wish to exercise your rights, you can contact us:

Via our contact page
Via WhatsApp (floating button on the website)

You also have the right to lodge a complaint with your national data protection authority if you believe that the processing of your personal data does not comply with applicable law.