Data Processing Terms

The restaurant is the controller of the menu content it uploads and of the questions diners ask inside its menu. Qarta is the processor for that content. For the restaurant's own account and billing data, Qarta is the controller and its privacy policy applies.

We process menu photographs, dish text, media and diner questions in order to transcribe, translate, grade photographs, publish the menu and answer diner questions, for as long as the account is active.

Data subjects: the restaurant's staff who use the account, and diners who open the menu. Data: names and business email addresses of account users, and the free text a diner types into the table assistant together with technical request data. We instruct customers not to upload special category data and not to upload images in which individuals are identifiable.

• Process personal data only on the customer's documented instructions.
• Keep persons authorised to process the data bound by confidentiality.
• Apply appropriate technical and organisational security measures.
• Assist the customer with data subject requests, impact assessments and with responding to the supervisory authority.
• Notify the customer without undue delay after becoming aware of a personal data breach affecting their data.
• Delete or return the data on termination, except where retention is required by law.
• Make available information needed to demonstrate compliance and allow audits limited to that purpose, at reasonable intervals and notice.

The customer authorises the subprocessors listed on our subprocessors page. We impose equivalent data protection obligations on each of them and remain responsible for their performance. We will give notice of an intended change so the customer can object.

Where a subprocessor is outside the EEA we rely on the European Commission's Standard Contractual Clauses together with supplementary safeguards, and the clauses prevail over these terms in the event of conflict.

These terms apply automatically once an account is created; no separate signature is required. If your organisation needs a countersigned copy, write to hello@qarta.online.