Privacy Policy · Bookarta

1. Data controller

The data controller for personal data collected through Bookarta (bookarta.eu) is Bookarta. For any privacy-related enquiries, contact us at info@bookarta.es.

2. Data we collect

We collect the following personal data:

Registration data: name, email address and password when creating an account.
Payment data: processed entirely by Stripe. Bookarta does not store card details.
Restaurant data: name, address, phone, opening hours, logo, photos and menu information that the user voluntarily provides.
Usage data: statistics on visits to the digital menu (page views, without personally identifying visitors).
Technical data: IP address, browser type and operating system, collected automatically for the proper functioning of the service.

3. Purpose of processing

We use your data to:

Provide and manage the digital menu service.
Process payments and manage subscriptions.
Send service-related communications (confirmations, technical notices).
Improve and develop new features.
Comply with legal obligations.

4. Legal basis

Processing is based on the performance of the service contract accepted upon registration (Art. 6(1)(b) GDPR), legitimate interest in improving the service (Art. 6(1)(f) GDPR) and compliance with legal obligations (Art. 6(1)(c) GDPR).

5. Data retention

Data is retained for the duration of the contractual relationship and, once the account is cancelled, for the legally required periods (up to 6 years for accounting and tax data).

6. Third parties and transfers

Bookarta uses the following trusted providers that may access data:

Supabase — database and authentication (servers in the EU).
Stripe — payment processing (PCI-DSS compliant).
Vercel — hosting infrastructure.
Resend — transactional email delivery.

We do not sell or share personal data with third parties for commercial purposes.

7. Your rights

You may exercise the following rights at any time:

Access: find out what data we process about you.
Rectification: correct inaccurate data.
Erasure: request deletion of your data.
Portability: receive your data in a structured format.
Objection and restriction: object to certain processing activities.

To exercise any right, email us at info@bookarta.es. You may also lodge a complaint with your local data protection authority.

8. Cookies

Bookarta uses only technical cookies necessary for the service to function (user session). We do not use tracking or third-party advertising cookies.

9. Changes to this policy

We reserve the right to update this policy. We will notify you of relevant changes by email or through a notice in the dashboard.

10. Contact

For any privacy enquiries: info@bookarta.es