Data Processing Agreement

Basic information about data processing between the restaurant and Restaurant Service POS.

1. Parties

The restaurant using the software acts as the data controller in relation to personal data that it enters or manages as part of its daily operations.

Restaurant Service POS, owned by Alessio Nonne, acts as a technical service provider and, where applicable, as a data processor in order to provide software support, maintenance and operation.

2. Subject matter of the processing

The processing consists of providing the technical use of the POS and maintaining account, user, subscription, transactional communication, support and service-related incident functionalities.

3. Data concerned

Data relating to the restaurant, internal users, business configuration and technical subscription information may be processed, together with operational data relating to orders, tables, employees or customers where such data is entered by the restaurant.

4. Purpose

Data will be processed solely to provide the contracted service, maintain security, manage support, provide necessary communications and fulfil associated legal or contractual obligations.

5. Processor obligations

Process data according to the restaurant's instructions and for the purposes of the service.
Not use the data for incompatible purposes of its own.
Apply reasonable technical and organisational measures.
Restrict access to necessary personnel or providers.
Provide reasonable assistance regarding data subject rights or security incidents.

6. Sub-processors and providers

Necessary technical providers may participate in providing the service, including Stripe for payments, Resend for transactional communications and Cloudflare for domain, DNS or related technical services.

7. Return or deletion

At the end of the relationship, data may be deleted, restricted or retained only for the periods necessary for legal, technical, tax or security responsibilities.

8. Base document

This page serves as an initial information document. Where a customer requires a specific Data Processing Agreement, an individual document may be formalised and signed by the parties.

Recommendation: before significantly expanding the commercial use of the service or entering into agreements with larger customers, this document should be reviewed by a legal adviser specialising in data protection.