Data Processing Agreement

Between the Customer (controller) and the operator of TableServe named in the Imprint (processor).

1. Subject and duration

The processor processes personal data on behalf of the controller to provide the TableServe service described in the Terms of Service, for as long as the subscription runs and for the export period after it.

2. Nature and purpose of the processing

Storing and displaying the controller's menu; receiving and routing guests' orders, requests, reservations and feedback to the controller's screens; keeping the controller's service records; providing exports, backups and restores to the controller.

3. Types of data and data subjects

Guests of the controller: order contents, table or room, seat letter, reservation contact details (name, phone, e-mail) where given, feedback, notification tokens. Staff of the controller: name, e-mail, role, sign-in and action logs. No special categories of data are intended; allergy notes entered by guests are processed only to relay them to the controller's kitchen.

4. Instructions

The processor processes data only on the controller's documented instructions, which are given through the service itself (the controller's settings, actions and exports). The processor informs the controller if an instruction appears to break the law.

5. Confidentiality

Persons working for the processor who could access data are bound to confidentiality. Platform staff open a controller's data only on the controller's support request, and every such access is logged.

6. Security (Art. 32 GDPR)

Encryption in transit (TLS) and of backups at rest; one-way hashing of passwords and PINs; role-based access with owner-only administration; two-step sign-in for platform staff; logged security actions; a firewall limited to the service ports; nightly per-customer encrypted backups kept 30 nights with weekly restore checks, and an encrypted off-site copy of the whole system.

7. Sub-processors

Hosting provider (Germany); e-mail delivery provider; off-site backup storage provider. The current list is available in the Trust Centre. The processor tells the controller of a change at least 30 days in advance; the controller may object for good reason.

8. Assistance

The processor helps the controller answer data-subject requests and meet its duties under Art. 32–36 GDPR with the tools in the admin (export, deletion, anonymisation, logs) and, beyond that, on request.

9. Deletion and return

The controller can export and delete data at any time. At the end of the contract, data remains available for export for 30 days and is then deleted from the live system and, with the rotation of the nightly copies, from the backups, unless a law requires retention.

10. Audit

The processor provides the information needed to demonstrate compliance and allows audits by the controller or an auditor it mandates, on reasonable notice and at the controller's cost where the audit finds no breach.

11. Liability and law

The liability rules of the Terms of Service apply. German law applies.