Legal Information

The data controller for personal data is:
CHC Solutions by Christian Canzetti Stráda Francísca 19A, CH-6558 Lostallo, Graubünden, Switzerland, CHE-423.144.215
Email: privacy@taqr.app
For any questions regarding the processing of your personal data, you can contact us at the address above.

We collect the following categories of personal data:

Registration data:
- Email address
- Name (optional)
- Language preferences

Venue data:
- Venue name
- Address
- Phone number
- Public email
- Logo

Payment data:
- Payment data is managed directly by Stripe and is not stored on our servers

Technical data:
- IP address
- Browser and device type
- Pages visited and service interactions

We process your data for the following purposes:

Contract execution (Art. 6.1.b GDPR):
- Providing the TAQR service
- Managing user accounts
- Processing payments
- Customer support

Legitimate interest (Art. 6.1.f GDPR):
- Service improvement
- Fraud and abuse prevention
- Aggregate statistical analysis

Consent (Art. 6.1.a GDPR):
- Sending promotional communications
- Analytics and marketing cookies

We retain your data for as long as necessary for the purposes for which it was collected:

- Account data: For the duration of the contractual relationship and for 10 years thereafter for tax obligations
- Billing data: 10 years for legal obligations
- System logs: 12 months
- Inactive user data: Deleted 60 days after subscription expiration, with prior notice

We share your data only with the following third parties:

Service providers:
- Supabase: database and authentication - Servers in Europe — Privacy Policy
- Stripe: payments - PCI-DSS certified — Privacy Policy
- Crisp: support chat — Privacy Policy
- Google Fonts: typography — Privacy Policy
- Google Cloud / Google Translate API: menu content translation - Activated only upon explicit user request. Dish and category texts are sent to Google for translation — Privacy Policy
- Groq: AI-powered allergen suggestion - Activated only upon explicit user request. Dish names and descriptions are sent to Groq to suggest probable allergens. No personal data is transmitted — Privacy Policy

We do not sell or transfer your personal data to third parties for marketing purposes.

Some of our service providers may process data outside the European Economic Area (EEA) or Switzerland. In such cases, we ensure that:

- European Commission adequacy decisions exist
- Standard Contractual Clauses (SCCs) are in place
- The provider adheres to approved certification mechanisms

For the United States, we rely on the EU-US Data Privacy Framework where applicable.

Under the GDPR and Swiss FADP, you have the following rights:

- Access: Obtain confirmation of processing and a copy of your data
- Rectification: Correct inaccurate or incomplete data
- Erasure: Request deletion of your data ("right to be forgotten")
- Restriction: Restrict processing in certain circumstances
- Portability: Receive your data in a structured, machine-readable format
- Objection: Object to processing for legitimate reasons
- Withdraw consent: Withdraw consent at any time

To exercise these rights, contact us at: privacy@taqr.app

You also have the right to lodge a complaint with the competent supervisory authority.

We implement appropriate technical and organizational measures to protect your data:

- SSL/TLS encryption for all communications
- Data access limited to authorized personnel
- Regular backups and disaster recovery procedures
- Continuous vulnerability monitoring
- Secure user authentication

We reserve the right to modify this policy. In case of substantial changes, we will notify you by email or through a notice on the site. The date of the last update is indicated at the top.