Privacy and Data Processing Policy

This Privacy and Data Processing Policy outlines how Rezto (the "Platform") collects, uses, and protects the data of its business partners (Restaurants) and their guests.

Regarding the processing of user (guest) personal data, the Restaurant acts as the "Data Controller", while Rezto acts as the "Data Processor" on behalf of the Restaurant. The Restaurant is obliged to protect guest data in accordance with applicable laws and personal data protection standards (including GDPR). The use of this data for unauthorized marketing (spam) is prohibited.

Rezto collects and stores the Restaurant's legal and financial information solely for the proper functioning of the platform and invoicing.

To fully provide the service, Rezto is authorized to share necessary data with trusted third parties, such as:

• Reserve with Google (for reservation synchronization).
• Payment providers (for financial transactions).

Rezto does not sell data to third parties.

Upon contract termination and at the Restaurant's request, the personal guest database is deleted from the system, except for data that must be retained for legal or audit purposes.