Courtesy translation. The Spanish version is the legally binding one.

Privacy Policy

1. Data controller

Name:

Sebastian Ehrhardt

Tax ID (NIF):

X9576579T

Address:

{{ADDRESS}}

Email:

contact@seb-service.com

2. Purpose of processing

Personal data is processed only for the following purposes:

• Managing the signup and use of the Service by the Customer (the venue owner).
• Allowing venue staff to log in on the devices via PIN.
• Recording order events and waiter-call events generated by the Service.

3. Legal basis

• Contract performance (GDPR Art. 6(1)(b)) for the Customer's signup and use.
• Legitimate interest (GDPR Art. 6(1)(f)) for staff registration by the Customer.

4. Categories of data

• Customer: email address, business name, business address.
• Venue staff: alias or identifier chosen by the Customer, plus a numeric PIN stored in encrypted form.
• Diners:no personal data is collected. Actions from the diner's page (calling a waiter) generate a technical record tied to the table, not to any individual.

5. Recipients and processors

Data is processed via the following sub-processors:

• Supabase — database hosting in the European Union.
• Vercel — application hosting on a global CDN.

No data is shared with other third parties except as required by law.

6. International transfers

Vercel may process technical data in jurisdictions outside the European Economic Area. Such transfers are carried out with the safeguards provided for in GDPR Arts. 44 et seq. (Standard Contractual Clauses).

7. Retention

• Customer data: for the duration of the contractual relationship plus any legally mandated periods afterwards.
• Trial accounts that do not convert: data is retained for up to 6 months from the date the trial period ends or the account falls into disuse, after which it is permanently deleted.
• Staff device sessions: automatic purge after 24 hours of inactivity.
• Order and call records: for a reasonable operating period; can be exported by the Customer.

8. Your rights

You may at any time exercise your rights of access, rectification, erasure, objection, restriction and portability by emailing contact@seb-service.com.

Deletion requests are acted on without delay. Once your data has been erased, you will receive email confirmation.

If you believe the processing does not comply with applicable rules, you may file a complaint with the Spanish Data Protection Agency (www.aepd.es).

9. Origin

All data originates directly from the Customer or is generated by the use of the Service itself.

Last updated: 2026-05-24 · Legal Notice · Terms of Use