Privacy
This site sets no cookies, runs no scripts and uses no analytics. The web server keeps a technical log for security and discards it with rotation.
For guests’ orders and for hotel staff’s work in the panel, the hotel is the controller and Benvenire acts on its instructions. This page covers what we decide ourselves: visitors of this site, hotels we approach, customers, and the sign-in to the panel.
You can access, correct, erase or restrict your data, object, and complain to a supervisory authority. Write to the address in the legal notice.
The full text, in English:
Who we are
{{legal_name}} ({{legal_form}}, {{register}}), {{registered_office}} — “Benvenire”, “we”. Questions about your data: {{privacy_email}}.
We run a multilingual menu and room-service ordering service for hotels. For almost everything that happens inside that service — guests’ orders, hotel staff’s roles and actions — the hotel is the controller and we act on its instructions as a processor. This policy covers the rest: the things we decide ourselves.
Visitors of benvenire.com
The site is static. It sets no cookies, runs no scripts, uses no analytics and loads nothing from third parties. The web server keeps a technical log (IP address, time, page, browser) for security and fault-finding, on the basis of our legitimate interest (Art. 6(1)(f); Recital 49), and discards it with log rotation. Nothing else is collected.
If you write to us
When you e-mail {{privacy_email}} or the contact address on the site, we keep your message and our reply to answer you (Art. 6(1)(b) — the steps you asked for; Art. 6(1)(f) — keeping a record of what was said). If the conversation becomes a sales conversation, the section below applies.
Hotels we approach
Before a hotel becomes a customer, we may set up a draft of its menu to show what the service looks like. For that we keep the name, e-mail address and language of one contact person at the hotel, and notes of what was discussed.
Where it comes from: a business card, a meeting, the hotel’s own website, or an introduction by a colleague or partner — we tell you which in our first message (Art. 14(2)(f)). Why and on what basis: to offer our service to hospitality businesses (Art. 6(1)(f), legitimate interest; our balancing test is documented). In countries where the first e-mail itself needs your prior consent, we ask for it by phone or in person first and record it. How long: a draft nobody has worked on for {{prospect_days}} days is deleted together with the contact; a record that a draft existed, with the hotel’s name only, is kept so we do not approach the same hotel twice. Who sees it: our own operators, our hosting provider, and the e-mail provider that delivers our messages.
You can object at any time, without giving a reason, and we will stop: write to {{privacy_email}} or reply “stop” to any message from us. This right is yours regardless of why we were allowed to contact you in the first place (Art. 21(2)).
Customers: contracts and invoices
When a hotel becomes a customer we keep the contact details of the people who sign and pay (Art. 6(1)(b)) and the invoices themselves for as long as tax law of {{registered_office}} requires ({{billing_retention}}; Art. 6(1)(c)). Billing is not built yet; this section is a placeholder until the first invoice.
Signing in to the panel
If you work at a hotel that uses Benvenire, you sign in to a panel we run. For the sign-in itself we are the controller: your e-mail address and name, a password hash, your authenticator secret and backup codes if you set up a second factor, your interface language, the tokens that keep you signed in (an access token for fifteen minutes, a refresh token for twelve hours), and security records: failed attempts, throttling, and the moment your tokens were revoked. Basis: the contract under which we provide the panel (Art. 6(1)(b)) and keeping the service secure (Art. 6(1)(f), Recital 49). Owners must use a second factor; the secret is stored encrypted and is never shown again.
For what you do in the panel — your role at the hotel, the menus and prices you change, the orders you accept, the change log that records who changed what — your hotel is the controller. We hold that data on its instructions and cannot answer for it: ask your hotel. When you leave, your hotel can have your account forgotten; what stays is a minimised line in records the hotel is required to keep.
You can download everything we hold about your account and delete it from the security screen of the panel. The download names every recipient and every period (Art. 15(1)(c)–(d)).
Who helps us
We use a small number of service providers under written data-processing agreements. The current list — with legal entity, country, what each one does and on what basis data leaves the EEA when it does — is published at {{subprocessors_url}} and changes only with 30 days’ notice to our customers. Our servers are in {{hosting_country}}.
Transfers outside the EEA
Our hosting is in the EEA. Where a provider processes data in the United States (e-mail delivery; the language model that translates menu text — which carries no personal data of guests), it does so under the EU–US Data Privacy Framework or the European Commission’s standard contractual clauses, as stated in the list above.
Your rights
Access, rectification, erasure, restriction, portability, objection — and the right to withdraw a consent you gave, without affecting what was done before. Write to {{privacy_email}}; we answer within a month. You may also complain to {{supervisory_authority}} or to the authority of the country where you live.
We make no decisions about you by automated means.
Changes
This policy is dated {{date}}. We change it when what we do changes, and say so here.