Article 1. Roles and Contact

• Controller: TalloRes (for Client and Website data).
• Processor: TalloRes (for Guest data on behalf of the Client).
• Contact: TalloRes BV, Borchtstraat 30 bus 401, 2800 Mechelen. Email: info@tallores.com.

Article 2. Processing by TalloRes (As Controller)

TalloRes processes the following data:

1. Client Data (Company and Billing data, VAT number, Name/Email/Phone Contact Person):
2. 1. Purposes of Processing: Execution of the Agreement (service delivery, invoicing, communication).
   2. Legal Basis (GDPR): Necessary for the performance of the Agreement (Art. 6(1)(b)).
3. Marketing Data (Name, Email):
4. 1. Purposes of Processing: Sending newsletters and marketing information.
   2. Legal Basis (GDPR): Consent (with opt-in and opt-out) (Art. 6(1)(a)).
5. Website Visitors (IP address, cookies, analytical data via Google Analytics):
6. 1. Purposes of Processing: Analysis of website use and optimization of the service.
   2. Legal Basis (GDPR): Legitimate Interest (Art. 6(1)(f)).

Article 3. Processing on Behalf of the Client (As Processor)

TalloRes processes the data of the Guests (Name, Email, Phone Number, etc.) exclusively on the instructions of the Client (the Restaurant). The conditions for this are laid down in the Data Processing Agreement (DPA). The Client is responsible for the lawfulness of the collection of this data.

Article 4. Sharing with Third Parties (Sub-processors)

TalloRes uses the following parties for the provision of the Service: Microsoft Azure, Mollie, SendGrid / Twilio, Odoo, and Google Analytics. TalloRes ensures that the required contractual safeguards (data processing agreements) are in place with these parties.

Article 5. Rights of the Data Subject

The data subject has the rights under the GDPR (right of access, rectification, erasure, objection, data portability).

• Queries about their own data (as a Restaurant Client) can be directed immediately to TalloRes.
• Queries about Guest data must be directed to the Restaurant (the Controller)