Privacy Policy

Who we are

AppliSquare Kosovo SHPK
Rr. Agim Hajrizi nr. 23
10000 Prishtina, Kosovo
VAT number: 810091835
Email: hello@applisquare.eu

AppliSquare Kosovo SHPK is the company responsible for managing the Tavolinat platform and for processing your personal data in accordance with this Privacy Policy.

Hosting and Data Location

Our website and database are hosted in Belgium by Combell, a professional hosting provider that complies with European data protection standards (GDPR).

When we use third-party services (e.g. Google, Meta) that may transfer data outside the EEA, we ensure that appropriate safeguards are in place (such as Standard Contractual Clauses).

Data We Collect

We collect and process the following types of data:

a) Through the contact form
First name, last name
Email address
Phone number
Message content

b) Through the restaurant registration form
Restaurant name and business details
Contact person’s name and email
Address, phone number, and website
Photos and menu uploads

c) Through the MyTable reservation system
Name and surname
Email address and phone number
Date and time of reservation
Date of birth (if required for specific restaurant services)
Business information (for corporate reservations)

d) Automatically collected information
IP address, browser type, device information
Cookies for functionality, analytics, and marketing (Google Analytics, Meta Pixel, Google Ads)

Legal Bases for Processing

We process personal data on the following lawful bases:

Contract performance — to manage reservations and deliver the services users request.
Legitimate interests — to maintain platform security, detect abuse/fraud, and improve our services.
Consent — for analytics, marketing cookies, and tracking (users may withdraw consent anytime).
Legal obligations — to comply with tax, accounting, or other statutory requirements.

Controller vs Processor

For features such as account creation, restaurant listings, contact forms, AppliSquare Kosovo SHPK (Tavolinat) acts as data controller.
For reservations handled through MyTable, Tavolinat often acts as data processor on behalf of the restaurant, which in that context becomes the data controller for guest data.

Purpose of Data Processing

We process this data to:
Display restaurant information on the Tavolinat platform
Manage and confirm reservations made through MyTable
Respond to inquiries and contact requests
Improve user experience and platform performance

Tavolinat never uses personal data from visitors or restaurant guests for advertising, newsletters or other marketing purposes without explicit consent.

Cookies and Tracking

Tavolinat uses:
Essential cookies – required for the site to function properly.
Analytical cookies (Google Analytics) – to understand website traffic and improve performance.
Marketing pixels (Meta Pixel, Google Ads) – to measure advertising effectiveness.

You can manage or block cookies via your browser settings or via our cookie preference interface.

Data Sharing

We only share data with trusted third parties that help us operate our platform, such as:
Hosting provider Combell (Belgium)
Google Analytics (for anonymous statistics)
Meta (Facebook) and Google Ads for marketing tracking

We do not sell, rent or share personal data with third parties for unrelated purposes.

For links to external sites, note that those sites may have privacy policies of their own. Tavolinat is not responsible for their practices.

Data Retention

We retain data for as long as necessary for the purposes for which it was collected.

Typical retention periods include:

After that, data is securely deleted or anonymized.

Your Rights

Under applicable data protection laws (GDPR), you have the right to:
Access your personal data
Request correction or deleting
Restrict processing
Object to processing
Request portability
Withdraw consent (where processing is based on consent)

To exercise these rights, contact us at hello@applisquare.eu. We will respond within 30 days. We may ask for proof of identity before fulfilling requests.

Children & Minors

Our services are not intended for children under 16. We do not knowingly collect or process personal data from children under that age.

Automated Decision-Making & Profiling

We do not use personal data for automated decision-making or profiling that produce legal or similarly significant effects.

Security Measures

We implement technical and organizational security measures to protect personal data against unauthorized access, alteration, disclosure, or destruction.

Updates to This Policy

We may update this Privacy Policy periodically. The latest version will always be accessible here, with an updated “Last updated” date.

Contact:

For any questions regarding this Privacy Policy, you can contact us at hello@tavolinat.com.