1. Data Controller

iTaula is the data controller for your personal data. We are committed to protecting your privacy and complying with applicable data protection legislation, including the General Data Protection Regulation (GDPR) and relevant national laws.

2. Data We Collect

We collect the following types of personal data:

Identification data: Name, email address, phone number.
Billing data: Information required for billing and payment of our services.
Usage data: Information on how you use our platform, including access and activity logs.
Technical data: IP address, browser type, operating system and other technical data necessary for the service.
Business data: Information about your restaurant or venue, number of tables and other data related to the use of our services.

3. Purpose of Processing

We use your personal data for the following purposes:

To provide and manage our restaurant software services.
To process your requests and manage your account.
To send you service-related communications, updates and improvements.
To comply with our legal and regulatory obligations.
To improve our services and develop new features.
To carry out statistical analysis and market research (with anonymised data).
To manage billing and collection of our services.

4. Legal Basis

The processing of your personal data is based on:

Contract performance: For the provision of our services.
Consent: For sending commercial and marketing communications.
Legal obligation: To comply with our tax and legal obligations.
Legitimate interest: To improve our services and ensure security.

5. Data Retention

We will retain your personal data for as long as necessary to fulfil the purposes for which it was collected, and in any case for the periods required by applicable law. After the retention period, we will securely delete your data.

6. Sharing Data with Third Parties

We do not sell or rent your personal data. We may share your data with:

Service providers: Companies that help us operate our business (hosting, payment processing, email services) under strict confidentiality agreements.
Public authorities: When required by law or court order.
Billing services: For tax and e-invoicing compliance.

7. International Transfers

Where international data transfers are necessary, we ensure they are carried out with appropriate safeguards under applicable law, including EU-approved standard contractual clauses.

8. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction or alteration. We use encryption, access controls and up-to-date security systems.

9. Your Rights

You have the right to:

Access: Obtain information about the personal data we process.
Rectification: Correct inaccurate or incomplete data.
Erasure: Request deletion of your data when it is no longer necessary.
Object: Object to the processing of your data in certain circumstances.
Restriction: Request restriction of processing in certain cases.
Portability: Receive your data in a structured, commonly used format.
Withdraw consent: At any time, when processing is based on consent.

To exercise these rights, you can contact us at: our contact page.

10. Web Analytics and Cookies

Our website (itaula.es) uses a first-party analytics system to measure traffic and improve the site. We want to be transparent about how it works:

No cookies or third parties: we do not use third-party cookies or advertising tools. We do not share this data with third parties or use it to track you across other websites.
Anonymous identifier: we store a random identifier in your browser (via localStorage and sessionStorage, not cookies) to distinguish new from returning visits and count sessions. It does not allow us to identify you personally.
Aggregated browsing data: pages viewed, time on page, device type, language, visit source (referrer or campaign) and button clicks.
Approximate city: from your IP address we determine your approximate city (municipality level) for statistical purposes. Your IP address is not stored in clear text: it is stored encrypted (hashed) and we only keep the approximate city, region and country.
Legal basis: legitimate interest (Art. 6.1.f GDPR) in measuring the audience of our own website, using pseudonymised data with no transfer to third parties.
Retention: we keep this analytics data for a maximum of 13 months.
How to opt out: we honour your browser's "Do Not Track" setting; if you enable it, we record no analytics data. You can also block local storage for itaula.es or browse in private/incognito mode.

11. Minors

Our services are aimed at hospitality professionals. We do not knowingly collect personal data from anyone under 16 without parental or guardian consent.

12. Changes to this Policy

We reserve the right to modify this privacy policy. We will notify you of any significant changes via a notice on our website or by email. The date of the last update is shown at the top of this document.

13. Contact and Complaints

If you have questions about this privacy policy or wish to exercise your rights, you can contact us:

Via our contact page
Via WhatsApp (floating button on the website)

You also have the right to lodge a complaint with your national data protection authority if you believe that the processing of your personal data does not comply with applicable law.

Privacy Policy