This notice explains what data we process, why we process it, and your rights.
If you use PlatoQR for a restaurant, you may also be a controller for certain processing (e.g., bookings).
This Privacy Policy explains how PlatoQR processes personal data when you access the website, create an account, or use the Services (including viewing public pages via QR).
In some cases PlatoQR acts as a controller (e.g., account and platform management). If you enable modules such as contact forms or bookings, the restaurant may be the controller for end-customer data.
The controller for personal data processed through the Platform is:
If your restaurant collects data (e.g., bookings), the restaurant is responsible for providing its own notice to end customers and complying with applicable law.
We may process the following categories of personal data depending on how you use the service:
We do not intentionally collect special categories of data (e.g., health). If you submit sensitive information in notes, you do so at your own responsibility.
We process data for the following purposes (and legal bases):
If we enable newsletters or promotional communications in the future, we will rely on an appropriate legal basis (typically consent) and provide a clear opt-out.
We keep data for as long as necessary to provide the Services and meet legal obligations:
To deliver the Services, we may share data with vendors (processors) that help us run infrastructure and communications:
We share only what is necessary and require appropriate security and confidentiality commitments from vendors.
Some vendors may process data outside the European Economic Area.
We use reasonable technical and organizational measures to protect data:
Under GDPR you may exercise the following rights (subject to legal limitations):
To exercise your rights, email postmaster@platoqr.com. We will respond within the time limits set by law.
The Services are not intended for children. We do not knowingly collect children’s data. If you believe a child provided data, contact us to remove it.
We may update this Privacy Policy. We will publish the updated version on this page and indicate the “last updated” date.
If you have questions about this Privacy Policy or our data processing, contact us using the details below.
Note: this Privacy Policy does not replace the notices restaurants must provide to their customers when collecting data via contact forms or bookings.