Privacy policy

This is a translation for convenience. In case of conflict, the Italian version prevails.

Data controller

Emme-Effe Services di Lorenzo Mercurio Fedel, Via dello Stadio 7, 38042 Baselga di Piné (TN), Italia, VAT no. 02833120229, which runs Tavoola (tavoola.menu). For any request about your data: tavoola.menu@gmail.com.

Data we process

• Account: name, email and password (stored only in hashed form). If you sign in with Google, we receive your name, email and profile picture from Google.
• Venue and menus: venue details (name, address, phone) and the content you publish, including photos.
• Payments and invoicing: company name, address, VAT number, SDI code or PEC and, for prints, the shipping address and a phone number for the courier. Subscription payments are handled by Stripe: we never see or store card data.
• Support requests: what you write to us via the contact form or by email.
• Your guests: people opening a public menu do not sign up and receive no cookies. QR scans are logged in anonymous, aggregate form (country, device type and browser language), with no IP addresses or personal identifiers.
• Technical data: the hosting provider's server logs, which include IP addresses, for security and operation of the service.

Purposes and legal basis

• Providing the service and managing accounts, subscriptions and print orders: performance of a contract (Art. 6.1.b GDPR).
• Invoicing and tax obligations: legal obligation (Art. 6.1.c).
• Service communications, support, security and abuse prevention: legitimate interest (Art. 6.1.f).

We do not sell data, use it for advertising or make automated decisions about you. The artificial intelligence features (automatic translation, suggested allergens, importing a menu from a photo) run only when you use them and only receive the menu text or the image you upload.

Who we share data with

We use these providers, appointed as data processors, each only for its own part:

• Vercel (website hosting and storage of photos and PDFs)
• Neon (database)
• Stripe (payments)
• Resend (email delivery)
• Google (sign-in with Google, only if you choose it)
• Vercel AI Gateway and Anthropic (artificial intelligence features, only if you use them)
• OpenStreetMap Foundation (the venue map: we derive the venue's position from its address, and whoever opens the map downloads the images from its servers, which see their IP address)

Print orders are produced, invoiced and shipped by the partner named in the order (for example the partner print shop): we pass on the necessary data (content to print, billing details, shipping address, contact phone and email), which it processes as an independent controller to issue the invoice and deliver through a courier. Subscription billing data is shared with our accountant.

Transfers outside the EU

Some providers process data in the United States. Transfers rely on the provider's EU-US Data Privacy Framework certification or, where missing, on the standard contractual clauses approved by the European Commission (Art. 46 GDPR).

How long we keep data

• Account data and content: while the account is active. When you delete it we erase them immediately; backup copies are overwritten within 30 days.
• Billing data: 10 years, as required by Italian law, even after account deletion. It remains in the invoices issued and with Stripe. Print order data stays in your order history while the account is active, and with the print shop for as long as the law requires.
• Support requests: as long as needed to handle them.

Your rights

You can request access, rectification, erasure, restriction and portability of your data and object to processing based on legitimate interest by writing to tavoola.menu@gmail.com. You can also delete your account yourself from Settings. If you believe your data is processed unlawfully, you can lodge a complaint with the Italian data protection authority (Garante per la protezione dei dati personali, garanteprivacy.it) or with the authority of your country.

Personal data in your content

If the content you publish includes other people's personal data (for example staff photos), you are the controller of that data and we process it on your behalf. If you need a data processing agreement (Art. 28 GDPR), write to us.

Cookies

We only use technical cookies, so no consent banner is required. Public menu pages set no cookies at all. The dashboard uses:

• the session cookie, required to stay signed in;
• NEXT_LOCALE, the interface language, written only when you change it;
• TAVOOLA_THEME, the dashboard colour theme, written only when you pick one.

We use no profiling, analytics or third-party advertising cookies.