PRIVACY POLICY – TAPASQR

1. DATA CONTROLLER

Controller:

360 TRAVEL, S.L.

Tax ID (CIF): B75772681

Registered office: Paseo de la Ribera, 2, Esc. 2, Floor 6, Door E, 50015 Zaragoza (Zaragoza), Spain

Commercial registry: Registered with the Commercial Registry of Zaragoza, Sheet Z-75245, Entry 1.

Contact email: tapasqrapp@gmail.com

2. DATA WE COLLECT

TapasQR may collect:

• Name.
• Email address.
• Phone number.
• Business information.
• Uploaded photographs and files.
• IP address.
• Login data.
• Approximate location data from QR scans.
• Technical device information.
• Data related to payments and subscriptions.

3. PURPOSE OF PROCESSING

Data is used to:

• Create and manage accounts.
• Enable the management of digital menus.
• Generate statistics about QR scans.
• Improve the platform.
• Manage authentication and security.
• Send necessary communications.
• Manage payments and subscriptions.
• Detect abuse or fraud.

4. LEGAL BASIS

The legal bases for processing are:

• Performance of the service.
• User consent.
• Compliance with legal obligations.
• Legitimate interest in security and service improvement.

5. AUTHENTICATION

TapasQR may allow access through:

• Google.
• Email and password.

6. THIRD-PARTY SERVICES

TapasQR uses external providers such as:

• Stripe (payments).
• Resend (email).
• Cloudflare R2 (file storage).
• Google (authentication and AI menu features).

These providers may process data on behalf of TapasQR.

7. INTERNATIONAL TRANSFERS

Some technology providers may store or process data outside the European Economic Area while applying appropriate safeguards in accordance with the GDPR.

8. PAYMENT DATA

Payments are processed by specialized external providers.

TapasQR does not directly store complete bank card information.

9. AI FEATURES

Some future features may use artificial intelligence systems for automatic translation.

The user is responsible for reviewing the generated content before using it publicly.

10. ANALYTICS AND STATISTICS

TapasQR may collect technical and usage statistics, including:

• QR scans.
• Approximate location.
• Device used.
• Language.
• Basic interactions.

Aggregated and anonymized data may also be used to improve the service.

11. DATA RETENTION

Data will be retained while:

• The account remains active.
• A contractual relationship exists.
• It is necessary for legal obligations or security.

12. USER RIGHTS

The user may:

• Access their data.
• Rectify information.
• Request deletion.
• Request restriction of processing.
• Object to processing.
• Request portability.

To exercise these rights:

tapasqrapp@gmail.com

13. SECURITY

TapasQR applies reasonable technical and organizational measures to protect personal data.

However, no system is completely secure.

14. MINORS

TapasQR is not directed at children under 16 years of age.

15. CHANGES TO THIS POLICY

This policy may be updated to adapt to legal or technical changes.