Draft. These texts have not been checked by a lawyer and are not legal advice — they need review, along with the real company details, before publication.
Data processing agreement
A summary of the controller–processor terms between your business and Tapmenu. The full agreement is signed at onboarding.
01 Subject and duration
Tapmenu processes data solely to provide the service, for as long as your subscription lasts and for the agreed retention period after termination.
02 Controller instructions
We act only on your documented instructions. We do not use your menu content for our own purposes, nor for model training.
03 Categories of subjects and data
Subjects: the users on your account. Data: name, email, role and technical login metadata. Visitors to the public page are not identified, so no processing of their personal data arises.
04 Sub-processors
We use approved sub-processors for hosting, email and payments. We notify you before any addition and you retain a right of documented objection.
05 Security and assistance
We apply the technical and organisational measures of Article 32 and assist you with data subject requests, impact assessments and communication with the authority.
06 Incidents
In the event of a data breach we notify you without undue delay, with the available information on scope, measures and consequences.
07 Deletion or return
On termination we delete or return the data at your choice, unless a legal retention obligation applies.