Privacy Policy

1. Introduction

10Seat ("we", "us", "our") respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use, share, and protect your data when you visit our website or use our services, in accordance with the General Data Protection Regulation (GDPR) and other applicable privacy legislation.

2. Data Controller

The data controller for the processing of your personal data is:

3. What data do we collect?

3.1 Data you provide to us

• Contact information: name, email address, phone number
• Business information: restaurant name, address, business information
• Communication data: messages you send to us via contact forms or email
• Account data: if you create an account, username and password

3.2 Automatically collected data

• Technical data: IP address, browser type and version, operating system, device information
• Usage data: pages visited, click behavior, time and duration of visit, referring website
• Location data: general location data based on IP address (not exact location)

3.3 Cookies and tracking technologies

We use cookies and similar tracking technologies to improve your user experience and analyze our services. See our Cookie Policy below for more information.

4. Why do we collect your data?

We process your data for the following purposes:

4.1 Performance of contracts

• Processing your requests for demos or trial periods
• Providing our reservation system services
• Managing your account and billing

4.2 Legitimate interest

• Improving our website and services
• Analyzing usage patterns and trends
• Preventing fraud and abuse
• Marketing purposes (where you have given consent or where this is justified)

4.3 Consent

• Sending marketing communications (newsletters, promotions)
• Use of non-essential cookies
• Sharing data with third parties for marketing purposes

4.4 Legal obligation

• Compliance with legal obligations (e.g., tax legislation)
• Responding to judicial requests

5. Who do we share your data with?

5.1 Service providers (processors)

We may share your data with trusted service providers who help us deliver our services. Examples include HubSpot (CRM), Google Analytics (analytics), and Meta (advertising).

These service providers are contractually obligated to use your data only for the purposes for which we have shared it and to implement appropriate security measures. Where required by law, these services are only activated after you have given your consent via our cookie banner.

5.2 Transfer outside the EEA

Some of our service providers are located outside the European Economic Area (EEA). When we transfer data to countries outside the EEA, we ensure that appropriate safeguards are in place, such as:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Adequacy decisions by the European Commission
• Other appropriate safeguards as required by GDPR

5.3 Legal obligations

We may share your data if legally required, for example, by court order or to comply with applicable laws and regulations.

6. Cookies and tracking technologies

6.1 What are cookies?

Cookies are small text files that are placed on your device when you visit a website. We use different types of cookies:

6.2 Types of cookies we use

6.3 Managing cookie settings

You can manage cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of our website.

7. Retention period

We retain your personal data only as long as necessary for the purposes for which it was collected, unless a longer retention period is legally required or permitted:

• Contact information: until you request deletion or up to 3 years after last contact
• Account data: as long as your account is active and up to 2 years after closure
• Analytical data: maximum 26 months (Google Analytics default)
• Marketing data: until you unsubscribe or withdraw consent
• Legal obligations: as required by applicable law (e.g., tax retention obligation of 7 years)

8. Your rights under GDPR

You have the following rights regarding your personal data:

To exercise your rights, you can contact us at hello@10seat.com. We will respond to your request within 30 days.

You also have the right to file a complaint with your local data protection authority if you believe we are not processing your data correctly:

9. Security

We take appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, destruction, or alteration:

• SSL/TLS encryption for data transmission
• Access controls and authentication
• Regular security audits
• Limited access to data only for authorized personnel
• Regular data backups

10. Links to other websites

Our website may contain links to other websites that are not operated by us. We are not responsible for the privacy policy or practices of these external websites. We recommend that you read the privacy policy of each website you visit.

11. Changes to this privacy policy

We may update this privacy policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. The "Last updated" date at the top of this page indicates when this privacy policy was last revised. We recommend that you review this page regularly to stay informed about how we protect your data.

12. Contact

If you have questions about this privacy policy or about how we process your data, you can contact us: