1. Data and purposes
When you contact us, apply, register or purchase, we process the information you provide, such as your name, email, phone, business and address details, order and correspondence. We use this to answer enquiries, perform agreements, manage accounts, provide support and maintain our administration.
Technical data such as device registrations, session information and errors may be processed to operate and secure the system, manage access, diagnose faults and prevent abuse.
2. Legal bases
Depending on the purpose, processing is based on an agreement or pre-contractual steps at your request, a legal obligation such as record-keeping, or our legitimate interest in a secure and reliable system. Where consent is required, we request it separately and you may withdraw it.
3. Guests and employees
The venue, shop or organiser determines the use of its guests’, customers’ and employees’ personal data and is the controller. SmartPOSapp supports it as a technical service provider and processes data on its instructions where applicable.
Contact the relevant business about table orders, invoices, reservations, tickets or staff records. Requests sent to SmartPOSapp will be forwarded to the responsible business where necessary.
4. Recipients and payments
Data is shared only as necessary with service providers for hosting, accounts, email, support and payments, or with parties entitled to it by law. Processing agreements are used where required. Transfers outside the European Economic Area must use applicable GDPR safeguards.
For Viva.com payments, you enter bank or card details with Viva; other methods use their respective providers. SmartPOSapp receives the necessary payment reference, amount and status, not your full card details or bank login credentials. The payment provider also has its own privacy policy.
5. Security
We apply appropriate technical and organisational measures including HTTPS encrypted connections, access restrictions and business-scoped access to company data. Payment status is checked with the provider. No security measure removes every risk; report suspected abuse or a data breach promptly to customer service.
6. Retention
We retain personal data only as needed for its purpose, the agreement and applicable legal obligations. Tax records generally require seven years’ retention. Other data is deleted or anonymised when its purpose ends unless legal obligations or disputes justify further retention.
7. Cookies and local storage
The website and apps use necessary cookies or local storage for sign-in, language, device preferences and the shopping cart. Where non-essential tracking requires consent, it must only be used with consent. Clearing browser storage may sign you out or remove preferences.
8. Rights and contact
You may request access, correction, deletion, restriction or portability and, where applicable, object to processing. Withdrawing consent does not affect the lawfulness of prior processing. We may need to verify your identity and normally respond within one month, subject to legal exceptions.
Use the contact details below for privacy requests. You may also complain to the Dutch Data Protection Authority at autoriteitpersoonsgegevens.nl. An updated policy will be made available on this page when changes occur.