Privacy policy

This is an English translation for convenience. The German version is legally binding.

Version 1.0 – valid from 14 October 2026

1. Controller

Megaphone Software AG (“tastee” or “we”), Rue des Sablons 6, 3960 Sierre, Switzerland, UID number CHE-168.400.471, is the controller responsible for the processing of personal data described in this privacy policy.

For questions about data protection: hi@tastee.app

2. Scope

This privacy policy applies:

• to the tastee mobile app (iOS and Android), its web versions and the widgets embedded on restaurants’ websites (the “App”);
• to the tastee website;
• to our relationship with the restaurants that use tastee (the “Businesses”).

3. Our roles

tastee is the controller for the user accounts, the operation and security of the App, the website and the business relationship with the Businesses.

The Business is the controller for the data that you transmit to it via the App for a reservation, an order or a payment. tastee then processes this data on the Business’s behalf as its processor, exclusively in accordance with its instructions and with the data processing agreement concluded with it. To exercise your rights in relation to this data, please contact the Business in the first instance; if you contact us, we will forward your request to the Business without delay and assist it in responding.

4. What data we process

4.1 Use without an account

You can use the App without creating an account. In that case, we only process personal data if you:

• reserve a table: name, telephone number and/or email address, number of persons, whether children are present, date, time, preferred area and any comments;
• order or pay: content of the order, table number or pick-up code, amount, tip, date and time, and the reference and status of the payment. Card data is collected and processed exclusively by our payment service provider; tastee has no access to it.

In addition, technical data is processed to ensure the operation and security of the App (IP address, device type, operating system, App version, error logs). It is stored in access and activity logs and used only for these purposes.

4.2 Use with an account

If you create an account, we additionally process: first name, surname, email address, telephone number (optional), password (encrypted) and the history of your reservations and orders.

If you save dietary preferences or allergies, this information may constitute health data. We only process it with your express consent, exclusively in order to show you suitable dishes, and you can delete it at any time.

4.3 Notifications, camera and messages

• Push notifications: only if you allow them; we then process a notification ID of your device.
• Camera: used only to scan the code of your table; no images are stored.
• Emails and text messages: confirmations and reminders relating to reservations or orders.

4.4 Businesses

For the Businesses and their contact persons: name, position, company name, address, email, telephone, billing data, subscribed modules and communication with our support team.

4.5 Website

When you visit our website, technical data is processed (IP address, browser, pages visited). Analytics cookies are only used with your consent, which you may withdraw at any time.

5. Purposes and legal bases

We process your data in order to:

• provide the services of the App: reservations, orders, payments and pick-ups;
• manage your account, if you have one;
• send you confirmations, reminders and notifications relating to your reservations and orders;
• ensure the security of the App, prevent misuse and fix errors;
• conclude and perform our contracts with the Businesses, including invoicing;
• comply with our legal obligations, in particular accounting and tax obligations.

This processing is based on the performance of a contract, our legal obligations, our legitimate interest in the proper operation of the App or your consent. We never sell your data and do not use it for third-party advertising purposes.

6. Recipients

6.1 Businesses

When you make a reservation, place an order or pay, the Business concerned receives the data required for your visit or your order.

6.2 Service providers (processors)

We engage the following service providers. They are bound by a data processing agreement to comply with the same data protection requirements as we do and to use the data only for the provision of our services. The current list can also be found on our Subprocessors page.

SCC: Standard Contractual Clauses · DPF: Data Privacy Framework.

Invoicing for the Businesses’ subscriptions is also carried out with bexio AG (Switzerland), which only receives data of the Businesses.

6.3 Other recipients

When the App is downloaded, Apple and Google process data under their own responsibility and in accordance with their own privacy policies. We also disclose data to authorities where required by law.

7. Disclosure abroad

Your data is mainly hosted in Switzerland. Certain service providers (notifications, text messages, emails) may process data in the European Union or in the USA. Such disclosures are only made to countries with an adequate level of data protection or subject to appropriate safeguards, such as the Standard Contractual Clauses, the EU-U.S. Data Privacy Framework or the Swiss-U.S. Data Privacy Framework.

8. Retention period

We retain data for as long as is necessary for the purposes described:

• Account: until you delete it or after 24 months of inactivity, after we have informed you.
• Reservations and orders: no more than 24 months after the visit or order, or for a shorter period if the Business concerned so requests; thereafter deletion or anonymisation.
• Payments and accounting records: 10 years in accordance with the legal obligations.
• Technical data: access and activity logs are retained securely for 12 months and then deleted.
• Data of the Businesses: for the term of the contract. When the contract ends, the data processed on behalf of the Business, including that of its guests and the backup copies, is deleted or returned within 30 days; accounting records are retained in accordance with the legal obligations.

9. Security

We protect your data with appropriate technical and organisational measures, which we review and update regularly: encryption of data in transit (TLS) and at rest (AES-256), two-factor authentication and role-based access restriction according to the principle of least privilege, logging of access, firewall, intrusion detection and protection against DDoS attacks, regular security updates, tested backups stored at several separate locations, hosting mainly in Switzerland and regular training of our employees. Details of these measures are available on request and are described on our Technical and organisational measures page. In the event of a data security breach, we take the necessary measures without delay to limit its consequences. Where we act on behalf of a Business, we inform it without delay. Where required by law, you will be informed by us or by the Business.

10. Your rights

Under the Swiss Federal Act on Data Protection (FADP) and, where applicable, the General Data Protection Regulation (GDPR), you may:

• obtain information about your data and a copy of it;
• have inaccurate data corrected;
• request the deletion of your data or the restriction of its processing;
• object to processing;
• receive your data in a commonly used electronic format;
• withdraw any consent given at any time with effect for the future.

You can delete your account directly in the App or write to us at hi@tastee.app. You also have the right to lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC) or, if you live in the European Union, with the supervisory authority of your country.

11. Minors

Creating an account is reserved for persons aged 16 and over. We do not knowingly collect data from younger persons through an account.

12. Changes

We may amend this privacy policy, in particular as the App evolves or the law changes. The version in force at any given time is published in the App and on our website. We inform account holders and Businesses of material changes.