1xs websolutions · KvK 63192136
Privacy notice
Arnhem · The Netherlands · info@1xs.nl
1. Controller and scope
1xs websolutions, the Netherlands, Chamber of Commerce 63192136, info@1xs.nl, is responsible for personal data used for its own business contacts, restaurant accounts, security and subscription administration. For reservation data processed by restaurants through Restovaro, the restaurant determines the purpose and 1xs generally acts as processor. Questions about a restaurant reservation should therefore first be addressed to the restaurant.
2. Data, purposes and legal bases
For enquiries we process name, email, restaurant name and message to answer questions and prepare an agreement. Accounts involve username, email, role, password hash and security data for access and administration. Where the data subject is a contracting party, processing is based on performance of that agreement; for customer employees and necessary security, on our legitimate interest in service delivery and abuse prevention after balancing interests. Invoices involve business, address, contact and payment-status data for contract performance and legal recordkeeping. Without necessary account or invoice data, we cannot provide the relevant service.
3. Guest data and recipients
Restaurants may process names, emails, telephone numbers, visit dates, party sizes, table assignments, attendance and guest notes. Preferences or allergy notes may contain sensitive data; the restaurant determines whether they are necessary and on what valid basis. 1xs uses this data only under the processing agreement. Hosting and email providers may process data to deliver the service. Stripe is used for payments; its entity and role must be determined per activity, as Stripe may also act independently for its own legal payment obligations. Legally required disclosure to competent authorities remains possible. No internal helpdesk system is in use; support is by email.
4. Retention, security and transfers
Data is retained only as long as needed for its purpose or a legal duty. Core tax records are generally retained for seven years. While a restaurant is a customer, reservation and guest data is retained for a maximum continuous period of two years; older data is deleted or anonymised unless a legal obligation requires otherwise. After termination, the customer may request an export within three months covering the preceding two years. The data is then deleted under the data processing agreement. Restovaro uses Hostillica Europa for hosting, ZXCS Netherlands for email, HESK for support, and Stripe for subscriptions and payments.
5. Website, cookies and automatic reservations
The current standalone website contains no advertising or analytics trackers. Loading it sends technical request data to the hosting server. The application uses session and security cookies; exact production settings and lifetimes must be recorded before launch. The widget automatically confirms successful reservations based on availability and restaurant rules. Guests can contact the restaurant with questions or corrections about a reservation.
6. Rights and contact
Subject to applicable conditions, you may request access, correction, deletion, restriction or portability, object to processing based on legitimate interests and withdraw any consent given. Send requests to info@1xs.nl; for guest data we act through the restaurant where necessary. We generally respond within one month. If a permitted extension is needed, we explain it within that month. Identity checks are proportionate. You may complain to the Dutch Data Protection Authority or your competent local authority. Finalised versions carry a date; material changes are actively notified where needed.