managemyrestaurants.events

PRIVACY POLICY

ManageMyRestaurants.Events

Last updated: 23 Jul 2026

1. General Information

This Privacy Policy defines the rules for processing personal data in connection with the use of the ManageMyRestaurants.Events web application (“Application”).

The controller of personal data is:
Nivego sp. z o.o. in formation
Mełgiewska 2 Street, 20-209 Lublin
Contact email: hello@managemyrestaurants.events

The Controller conducts business activities registered in Poland, and the Application is offered exclusively to Business Customers in Poland, the European Union, and globally.

2. Definitions

  • Business Customer – a legal entity, sole proprietor, or other entrepreneur that contracts for the Subscription, provides a company tax ID, and uses the Application for business purposes (not as a consumer), as defined in the Terms of Service
  • Organization – the Business Customer’s account/tenant in the Application
  • User – a natural person authorized to act for a Business Customer who has created an account in the Application
  • User’s Client – a natural person or entity whose data is entered into the Application by the User in connection with event organization
  • GDPR – Regulation (EU) 2016/679 of the European Parliament and of the Council
  • Account – an individual User profile within the Application

3. Scope of Application

This Privacy Policy applies to:

  • Users of the Application
  • personal data processed within User Accounts and Organizations
  • personal data of Users’ Clients processed through the Application’s functionalities

4. Roles in Data Processing

4.1 Data Controller

The Controller acts as the personal data controller for Users’ personal data.

4.2 Users’ Clients’ Data

With regard to personal data of Users’ Clients:

  • the User acts as the data controller
  • the Application Controller acts as a data processor

Such data is processed solely on the User’s instructions and exclusively for the purpose of providing services within the Application.

5. Categories of Processed Data

5.1 Users’ and Organization Data

  • first and last name
  • email address
  • phone number (if provided)
  • Organization / company / restaurant data, including name, company tax ID (required), and optional business address and country
  • record of the business-customer attestation provided at registration (including timestamp)
  • login data (password hash)
  • limited subscription and billing data

5.2 Users’ Clients’ Data

  • first and last name or company name
  • email address
  • phone number
  • identification data (e.g. tax ID)
  • data assigned to events and documents

5.3 Technical Data

  • IP address
  • browser and device data
  • system logs
  • information about how the Application is used

6. Purposes and Legal Bases for Data Processing

6.1 Provision of Electronic Services and B2B Eligibility

Legal basis: Article 6(1)(b) GDPR

  • account and Organization creation and management
  • verification that the subscriber is a Business Customer (including company tax ID and business-customer attestation)
  • use of Application functionalities
  • management of events, clients, menus, and documents
  • preventing abuse of non-business / consumer registrations

6.2 Billing and Legal Obligations

Legal basis: Article 6(1)(c) GDPR (and, where applicable, Article 6(1)(b) GDPR for contract performance)

  • subscription handling
  • invoicing and tax compliance
  • accounting and tax documentation

6.3 Security and Stability of the Application

Legal basis: Article 6(1)(f) GDPR

  • error monitoring
  • performance analysis
  • abuse and fraud prevention

6.4 Analytics

Legal basis: Article 6(1)(a) GDPR (consent)

  • Application usage statistics
  • improvement of functionalities

7. Data Processors

The Controller uses external service providers, in particular for:

  • database infrastructure
  • hosting and network security
  • analytics
  • error monitoring and performance tracking
  • payment and subscription handling

These entities process personal data under data processing agreements.

8. Payments

Payments for using the Application are handled by an external payment service provider.

The Controller:

  • does not store payment card numbers
  • processes only limited data, such as:
    • transaction identifiers
    • payment statuses
    • invoice identifiers
    • subscription identifiers

This data is processed exclusively for billing and legal purposes.

9. Data Retention Periods

9.1 Users’ Data

  • data is processed for the duration of an active Account
  • after Account deletion, personal data is deleted or anonymized

9.2 Billing and Tax Documentation Data

  • retained for the period required by tax regulations (generally 7 years), including Organization tax ID and related invoicing records where applicable

9.3 Users’ Clients’ Data

  • processed for the duration of the User’s Account
  • after Account deletion, the data is anonymized in a way that prevents identification of individuals

10. Account Deletion

The User may delete their Account independently via the Application settings.

After Account deletion:

  • access to the Application is blocked
  • personal data is deleted or anonymized
  • billing data is retained in accordance with legal obligations

The Controller is not obliged to provide support related to data that has been effectively deleted or anonymized.

11. Data Subject Rights

Data subjects have the right to:

  • access their data
  • rectify their data
  • erase their data
  • restrict processing
  • data portability
  • object to processing
  • withdraw consent at any time

Requests may be submitted to: hello@managemyrestaurants.events

12. Age Requirement

The Application is intended exclusively for individuals who are at least 18 years old and who act for a Business Customer.
The Controller does not knowingly process data of persons below this age.

13. Data Security

The Controller applies appropriate technical and organizational measures to protect personal data, including:

  • encryption
  • access control
  • infrastructure security
  • system monitoring

14. Governing Law and Jurisdiction

This Privacy Policy is governed by Polish law and European Union law.
Any disputes shall be resolved by the competent courts in Poland.

15. Changes to the Privacy Policy

The Controller reserves the right to amend this Privacy Policy.
The current version of the document is always available within the Application.