Legal
Data processing agreement
The GDPR processor terms between Bonvi and every restaurant customer.
Roles
The restaurant is the controller of its guests’ order data. Bonvi is the processor. For Taste Passport data the guest is the data subject and Bonvi acts on the guest’s instructions.
Sub-processors
EU hosting, payment providers and transactional email. The current list is available on request and changes are announced 30 days in advance.
Security and breaches
Encryption in transit and at rest, access logging, least-privilege access. Breaches affecting your data are reported within 48 hours.