Privacy Policy

The controller of the personal data collected through restavor.com and the communication channels associated with Restavor is:

Data controller

[SERVICE PROVIDER NAME AND SURNAME]

Trading name

Restavor

Tax ID (NIF)

[NIF]

Address

[SERVICE PROVIDER ADDRESS]

Email address

info@restavor.com

Website

restavor.com

Hereinafter, “Restavor”.

The data processed will depend on how each person interacts with Restavor.

We may process the following categories of data:

IDENTIFICATION AND CONTACT DATA

• first name and surname;
• email address;
• telephone number;
• job title or relationship to the establishment;
• restaurant or business;
• city.

INFORMATION ABOUT THE RESTAURANT OR PROJECT

When a person requests information, books a meeting or contacts Restavor, we may process information such as:

• name and type of establishment;
• current website, where applicable;
• needs or aspects they wish to improve;
• services of interest;
• approximate time when they wish to start a project;
• any other information provided voluntarily and necessary to handle the request.

CUSTOMER DATA

When a commercial relationship is formalised, we may also process:

• identification data;
• contact data;
• job title or contact person;
• company name;
• tax ID (NIF or CIF);
• registered office;
• billing data;
• contracts;
• quotes;
• invoices;
• project-related communications;
• documentation needed to provide the contracted services.

TECHNICAL AND NAVIGATION DATA

Depending on the technologies used and the user's privacy preferences, data such as the following may be processed:

• IP address;
• browser;
• device;
• operating system;
• technical identifiers;
• pages visited;
• interactions;
• session and browsing information.

Restavor does not intentionally request special categories of personal data through its forms or booking systems.

We recommend not providing sensitive information that is not necessary to handle a request or provide a service.

As a general rule, Restavor obtains the data directly from the data subject when they:

• complete a contact form;
• book a meeting;
• contact us by email;
• contact us by telephone;
• contact us via WhatsApp;
• take part in a meeting;
• request information or a demo;
• hire a service;
• provide information needed to develop a project.

For certain services, Restavor may also receive personal data provided by client restaurants when necessary to carry out work on behalf of those establishments.

4.1. HANDLING ENQUIRIES

When a person contacts Restavor through the website form, email, telephone or WhatsApp, we may use their data to:

• handle the enquiry;
• answer the questions raised;
• provide information about our services;
• maintain the necessary communications.

Where the enquiry relates to a possible engagement, the legal basis will be the application of pre-contractual measures requested by the data subject.

In other professional communications reasonably related to Restavor's activity, the processing may be based on the legitimate interest in managing and responding to the communications received, provided that the rights and freedoms of the data subject do not prevail.

4.2. DEMO REQUEST AND BOOKING OF MEETINGS

Restavor uses Calendly to manage the booking of the first meeting.

The /solicita-demo page integrates Calendly directly and does not use a prior Restavor form for this purpose.

Through Calendly, certain data and configured answers may be requested with the aim of:

• managing availability;
• booking the meeting;
• identifying the person making the booking;
• learning basic information about their restaurant;
• preparing the first conversation;
• making the communications necessary for the meeting;
• preparing afterwards, where applicable, a tailored demo or proposal.

The legal basis will be the application of pre-contractual measures requested by the data subject.

Calendly may act as a technology provider responsible for processing certain data used to provide the booking service.

4.3. GOOGLE CALENDAR AND GOOGLE MEET

For the technical management of availability and the holding of certain meetings, Restavor uses Google services, including Google Calendar and Google Meet.

These services may be used to:

• check availability;
• create meeting events;
• generate Google Meet links;
• organise and hold meetings;
• maintain the communications relating to those meetings.

The technical account used internally for these integrations must NOT be shown publicly in this Policy.

The legal basis will be, as applicable:

• the application of pre-contractual measures;
• or the performance of a contractual relationship.

4.4. PROVISION AND MANAGEMENT OF SERVICES

When a person or restaurant hires Restavor's services, we will process the data necessary to:

• develop projects;
• create websites;
• provide maintenance services;
• manage requests and incidents;
• provide digital services;
• maintain communications;
• follow up on the project;
• manage renewals;
• comply with the agreed conditions.

The legal basis will be the performance of the contractual relationship.

4.5. INVOICING AND LEGAL OBLIGATIONS

Restavor may process the data necessary to:

• invoicing;
• accounting;
• administrative management;
• compliance with tax obligations;
• compliance with other applicable legal obligations.

The legal basis will be compliance with legal obligations.

4.6. SECURITY, SPAM AND BOTS

Restavor uses or may use Cloudflare Turnstile on certain forms to protect the website against:

• spam;
• bots;
• abuse;
• automated traffic;
• fraudulent use;
• technical threats.

Turnstile may process certain technical signals needed to distinguish legitimate traffic from automated activity.

Restavor's legal basis for this processing is its legitimate interest in maintaining the security of the website, forms and systems.

4.7. ANALYTICS AND WEBSITE IMPROVEMENT

Restavor plans to use analytics and behaviour tools such as:

• Google Analytics 4;
• Google Tag Manager;
• Microsoft Clarity.

These tools must be configured respecting the user's consent preferences.

Where processing requires consent, it must not be activated in a way incompatible with the decision expressed by the visitor.

Google Analytics 4 may be used to understand aspects such as:

• visits;
• sessions;
• pages viewed;
• traffic sources;
• devices;
• actions taken on the website.

Microsoft Clarity may be used to understand aspects of the browsing experience such as:

• clicks;
• scroll;
• navigation;
• interaction with certain parts of the interface;
• possible friction points.

Google Tag Manager may be used as a technical system to manage tags and events.

The legal basis for analytical processing that requires consent will be the user's consent.

The user may modify their preferences using Restavor's cookie settings system.

Specific information about cookies and similar technologies will be detailed in the Cookie Policy.

Currently, the data provided to:

• contact Restavor;
• request information;
• book a meeting;
• request a demo;

will not automatically be used to send newsletters, promotions or other commercial communications independent of the request made.

If Restavor incorporates commercial communications of this kind in the future and it becomes necessary to request consent, it will be obtained through a specific, separate, free and optional mechanism.

Acceptance of commercial communications will not be used as a requirement to make an enquiry or book a first meeting.

To operate the website and provide certain services, Restavor uses technology providers.

Depending on the interaction, the following may be involved:

LANDINGSITE.AI

Provider used for the development, publication and technical management of restavor.com.

The native LandingSite forms used by Restavor may send their responses to the configured email recipients and retain those responses within the LandingSite forms management panel.

CALENDLY

Provider used to:

• show availability;
• collect the previously configured information;
• book meetings;
• coordinate appointments.

GOOGLE

Services used, as applicable, to:

• Google Calendar;
• Google Meet;
• professional email and other associated services where configured.

Do not publicly show any personal or technical Google address used internally.

CLOUDFLARE

Provider used through Turnstile to protect certain forms against spam, bots and abuse.

GOOGLE ANALYTICS / GOOGLE TAG MANAGER

Where enabled and where there is a corresponding legal basis, they may be used for analytics and tag management.

MICROSOFT CLARITY

Where enabled and where there is a corresponding legal basis, it may be used for interaction and user experience analysis.

WHATSAPP / META

When the person decides to use WhatsApp to contact or communicate with Restavor.

In addition, the data may be disclosed to:

• public administrations;
• authorities;
• courts;
• legally authorised entities;

when there is a legal obligation to do so.

Restavor does not sell the personal data of its users or clients.

Some technology providers used by Restavor may be located outside the European Economic Area or use infrastructure and sub-processors located in other countries.

Where international transfers of personal data occur, they must be covered by mechanisms accepted under applicable law, such as:

• adequacy decisions;
• Standard Contractual Clauses;
• recognised international frameworks;
• other legally valid safeguards.

Calendly states that the processing of data may take place in the United States and other jurisdictions and has a Data Processing Agreement that includes mechanisms applicable to international transfers.

Restavor will endeavour to use providers that offer adequate safeguards in accordance with applicable law.

Restavor will retain personal data only for as long as necessary to fulfil the purposes for which it was collected.

The following criteria apply:

ENQUIRIES AND POTENTIAL CLIENTS

The data will be retained for as long as necessary to:

• handle the enquiry;
• maintain the necessary communications;
• carry out reasonable follow-up of the business process;
• deal with possible liabilities.

When it is no longer necessary and there is no other retention obligation, it must be deleted or blocked when legally required.

CLIENTS

The data necessary to provide the service will be retained while the contractual relationship remains active.

Once the relationship ends, data that must be retained to comply with legal obligations or deal with possible liabilities may be kept duly blocked for the applicable periods.

INVOICING AND DOCUMENTATION

Invoices, contracts, receipts and documentation subject to legal obligations will be retained for the periods established by applicable law.

ANALYTICS

Data associated with analytics tools will be retained in accordance with:

• the configuration applied in each tool;
• the user's consent decisions;
• and the criteria of minimisation and retention limitation.

When a person voluntarily contacts Restavor via WhatsApp, we may process:

• telephone number;
• name;
• available profile information;
• content of conversations;
• files or information that they decide to send.

Conversations may be retained while they are necessary to:

• manage an enquiry;
• develop a pre-contractual process;
• maintain a commercial relationship;
• provide a service;
• keep a record of relevant instructions or decisions;
• deal with possible liabilities.

Restavor does not use WhatsApp ephemeral messages as a general retention system.

However, this does not imply that conversations must be retained indefinitely.

When they are no longer necessary and there is no obligation or legitimate reason for retention, the corresponding deletion or blocking policy must be applied.

WhatsApp/Meta may also carry out its own processing in accordance with its own privacy documentation.

Meetings held by Restavor via Google Meet are not recorded automatically.

In exceptional cases, Restavor may propose recording a meeting when there is a specific purpose that justifies it, for example:

• documenting especially complex requirements;
• keeping a record of certain important project decisions.

In those cases:

• participants will be informed in advance;
• the purpose will be explained;
• a recording will not be started covertly;
• where the basis used is consent, it must be obtained before starting the recording.

If a recording depends on consent and a person does not wish to be recorded, the meeting may be held without recording.

In certain development, maintenance or technology management services, Restavor may need to access personal data for which the client restaurant is responsible.

For example, personal data may exist in:

• forms;
• requests;
• bookings;
• contact systems;
• certain panels or tools of the restaurant.

When Restavor processes this data:

• on behalf of the restaurant;
• following its instructions;
• and without determining for its own incompatible purposes the purpose of the processing;

Restavor may act as a data processor and the restaurant as the data controller.

Where legally required, this relationship must be regulated through the corresponding processing agreement or clause.

Restavor will not use the data processed on behalf of the restaurant for its own purposes incompatible with the instructions received.

The fields identified as mandatory will be those necessary to correctly manage the corresponding request.

If certain necessary data is not provided, it may be impossible to:

• respond appropriately;
• manage a meeting;
• prepare a request;
• formalise a service;
• correctly execute a contract.

Restavor will endeavour to request only data that is adequate, relevant and limited to what is necessary for each purpose.

Restavor does not currently make decisions based exclusively on automated processing that produce legal effects on visitors to restavor.com or significantly affect them in a similar way.

The tools used for:

• security;
• bot detection;
• analytics;
• booking of meetings;

are not used to automatically decide whether or not a person can hire Restavor's services.

Data subjects may exercise, where applicable, their rights to:

• access;
• rectification;
• erasure;
• objection;
• restriction of processing;
• data portability.

Where processing is based on consent, that consent may also be withdrawn at any time, without affecting the lawfulness of processing carried out before its withdrawal.

To exercise these rights, a request may be sent to:

The request must allow the data subject to be adequately identified and specify the right they wish to exercise.

When necessary, Restavor may request additional reasonable information to verify identity and prevent improper access to third-party data.

If a person considers that Restavor has not processed their personal data in accordance with applicable law, they may lodge a complaint with the competent supervisory authority.

In Spain:

Source: official AEPD website. It opens in a new tab.

Restavor will adopt appropriate and proportionate technical and organisational measures to protect personal information against risks such as:

• unauthorised access;
• loss;
• alteration;
• disclosure;
• accidental or unlawful destruction.

The measures may be reviewed when the following change:

• the systems used;
• the providers;
• the functionalities;
• the processing;
• the associated risks.

The use of cookies and similar technologies will be regulated specifically in the:

Analytical technologies that require consent must respect the preferences selected by the visitor.

This Privacy Policy mainly regulates:

• restavor.com;
• Restavor's commercial activity;
• the communication channels related to Restavor;
• the processes before and after contracting its services.

Cuotly is a proprietary platform linked to certain Restavor services and may process additional information related to:

• user accounts;
• restaurants;
• members;
• requests;
• incidents;
• files;
• communications;
• services;
• activity within the platform;
• data and reports.

For this reason, Cuotly will have its own Privacy Policy and legal texts specifically adapted to its operation.

Restavor may update this Policy when the following change:

• the services;
• the functionalities;
• the providers;
• the purposes of processing;
• the systems used;
• the applicable legal requirements.

The current version will be available at:

The last updated date will appear at the beginning of the page.