Contact us
Need help, want to know more about the service or have a suggestion? Write to us: our team will get back to you as soon as possible.
Need help, want to know more about the service or have a suggestion? Write to us: our team will get back to you as soon as possible.
Notice on the processing of personal data
This Privacy Notice describes how TocTocMenu ("Provider", "we") collects, uses and protects the personal data of Users (restaurant owners) and End Customers who view the digital menus published via the Platform at https://www.toctocmenu.it. Processing complies with Regulation (EU) 2016/679 ("GDPR").
The Data Controller is TocTocMenu, reachable for any privacy-related matter at support@toctocmenu.it. No Data Protection Officer (DPO) is mandatorily appointed under Art. 37 GDPR; requests should be sent to the same address.
To provide the Service we process the following categories of data:
Regarding End Customers of the restaurant (people scanning the QR to view the menu), we do not collect direct identifying data. Only anonymous or pseudonymised technical data (IP, browsing information) needed to render the page correctly is processed.
We process your data on the following legal bases:
We do not sell, rent or disclose your data. Data may be shared with third parties acting as autonomous controllers or processors, strictly for the purposes above:
Some providers (notably PayPal) may process data in countries outside the EU. Such transfers rely on appropriate legal safeguards under the GDPR, including Standard Contractual Clauses approved by the European Commission or adequacy decisions.
The Platform uses only technical cookies essential to the Service (keeping the login session, CSRF token, language preference). These cookies do not require consent under Art. 122 of the Italian Privacy Code. We do not use profiling cookies or third-party advertising trackers on management pages.
At any time and free of charge you may exercise the following rights under Articles 15–22 GDPR:
Requests should be sent to support@toctocmenu.it; we will respond without undue delay and in any event within 30 days.
We adopt appropriate technical and organisational measures to protect data from unauthorised access, loss or destruction: encrypted HTTPS connections, hashed passwords, CSRF tokens on forms, access controls on uploaded files, periodic backups and continuous system updates.
The Service is intended for adult business operators. We do not knowingly process data of minors under 16. If we become aware of any inadvertent processing, we will delete the data.
We reserve the right to update this Notice at any time to reflect legal changes or new Platform features. The updated version will be published on this page with the latest revision date prominently shown. Material changes will be communicated by email.
For any question or request regarding the processing of personal data please write to support@toctocmenu.it.
