Privacy Policy

1. Data controller

The data controller for personal data processed through QR-TABLES is LA BITE - BULGARIA LTD (VAT/Tax ID BG201571445), registered at 1336, Sofia, Bulgaria. For questions about this policy or to exercise your rights under it, write to admin@qr-tables.com.

2. What data we process

QR-TABLES is a QR ordering system where guests at restaurants, beach bars, and hotels order from their table without registering or installing an app. We process only the following categories of data:

• Order content — the dishes/drinks chosen, quantities, and any notes on the order.
• Table/session identifier — the token from the table's QR code, which links the order to a specific table and location; it contains no personal data about the guest and requires no account or login.
• Staff device push token — used to deliver real-time new-order notifications to serving staff's phones.

We do not request or store a guest's name, phone number, email, or payment details — payment on QR-TABLES is cash only, paid directly to staff.

3. How we use the data

Data is used solely to route the order to the right table and the right staff member in real time, and to support the service itself (troubleshooting, per-location statistics). We do not sell personal data or share it with third parties for marketing purposes.

4. Cookies

This site does not use tracking, advertising, or analytics cookies. We only use functional local browser storage (localStorage) needed for the page itself — for example, remembering your language choice or your choice on the cookie banner. This doesn't require consent under GDPR/ePrivacy since it's strictly necessary for the site to work, but we still let you explicitly accept or decline via the banner on your first visit.

We count visits to the site anonymously, without cookies and without storing your IP address: we record the page visited, the site you came from, country, device type and browser, browser language, and a random identifier computed from your IP address and browser that changes every day, so it cannot be used to follow you across days. We use this only for overall statistics. If your browser sends a “Do Not Track” signal, we don't count the visit.

5. Hosting and security

QR-TABLES's infrastructure is hosted in the European Union. We apply technical and organizational measures to protect data, including isolating each customer's (restaurant's) data at the database level.

6. Data retention

Order content and table/session identifiers are kept for as long as the restaurant needs them for operational and accounting purposes, but no longer than 3 years from the order date. Staff push tokens are kept while the staff member is active and deleted when their access is deactivated.

7. Your GDPR rights

Under the General Data Protection Regulation (GDPR) you have the right to:

• access the personal data we process about you;
• correct inaccurate data;
• erasure ("the right to be forgotten");
• data portability in a structured, machine-readable format;
• withdraw consent at any time, where processing is based on it (e.g. cookies).

To exercise any of these rights, write to admin@qr-tables.com. We respond within 30 days.