Privacy policy
Who processes your data
When you book a table through Attabla, the restaurant you book with is the controller of your data. Attabla, a service provided by Adista Corp SRL (company number 0780.993.520, registered office listed in the Belgian Crossroads Bank for Enterprises), processes it on the restaurant’s behalf, as a processor. For the accounts of restaurant teams, Adista Corp SRL is the controller.
What data
- For a booking: name, phone number, email address, language, date, time, number of guests, room, and anything you choose to add: occasion, dietary needs and allergies, high chair, request to the restaurant. Allergies and dietary needs are only used to prepare your meal.
- For the security of the service: a fingerprint (hash) of your IP address and phone number, kept for one day at most, to limit abuse.
- For teams: email address, role, sign-in dates.
Why
- To manage your booking and keep you informed: confirmation, answer to a request, cancellation (performing the booking you ask for).
- To prevent abuse and keep the service secure (legitimate interest).
No advertising, no resale, no profiling.
How long
Your booking data is erased automatically 24 months after the date of the booking; the booking remains, anonymised, for the restaurant’s statistics. Security fingerprints: one day at most. Team accounts: as long as they exist.
Who can access it
The restaurant and its team. Our processors, bound by contract:
- Supabase: database, hosted in the European Union (Frankfurt);
- Vercel: application hosting, Europe region;
- Resend: email delivery.
Vercel and Resend are US companies: any transfer outside the European Union is covered by GDPR safeguards (the European Commission’s standard contractual clauses or the EU-US Data Privacy Framework).
Cookies
The widget and the booking page use no cookies. The restaurants’ dashboard uses a session cookie, required to stay signed in. No analytics or advertising cookies.
Your rights
You can ask to access, correct or erase your data, restrict or object to its use, and receive it in a readable format. Contact the restaurant, or write to us at privacy@attabla.com: we pass your request on to the restaurant and reply within a month. You can also lodge a complaint with the Belgian Data Protection Authority: www.dataprotectionauthority.be.
Security
Encrypted connections (HTTPS), access limited to the restaurant’s team, no passwords (sign-in by email link), encrypted backups.