Guest Privacy Notice

The restaurant is the data controller for your reservation. Dinebase AB (org. no. 559601-9116) is the processor: we run the booking system and act on the restaurant's instructions.

• Your name, and the phone number and email address you provide.
• Party size, date, time and any request or allergy note you write.
• Notes and tags the restaurant adds about your visit.
• Technical data needed to deliver the page and prevent abuse.
• If the restaurant requires a card to secure the booking: a payment reference, plus the card brand and last four digits. The full card number is held by the payment provider and is never stored by us or by the restaurant.

• Managing and confirming your reservation.
• Sending confirmation, reminder and change messages about your booking.
• Recognising you as a returning guest and honouring preferences the restaurant has noted.
• Applying a no-show or late-cancellation fee, if the restaurant has one and the conditions are met.

The legal basis is performance of the reservation agreement with the restaurant, and the restaurant's legitimate interest in running its service and preventing no-shows.

Staff at the restaurant you booked with. Our service providers for hosting, email, SMS and payments — listed on the sub-processor page. Nobody else, unless the law requires it. Your details are not shared with other restaurants.

The restaurant decides how long your reservation records are kept, so we cannot promise a fixed date. They are kept while the restaurant uses the service, so it can see your visit history, unless the restaurant deletes them earlier or agrees to your deletion request. If the restaurant stops using Dinebase, it has 30 days to export its data, after which the applicable records are deleted within 90 days unless the law requires them to be kept, with copies in backups removed as those backups expire. Message delivery logs are kept up to 12 months.

You can ask for a copy of your data, ask for it to be corrected or deleted, or object to its use. Contact the restaurant first, since it decides. You can also write to legal@dinebase.se and we will pass the request on and help the restaurant answer it. You may complain to your data protection authority — in Sweden, Integritetsskyddsmyndigheten (IMY).

Booking a table does not sign you up for marketing. The messages we send are about your specific reservation.