Your data belongs to you
This policy explains how WellensMedia SRL processes personal data for RiLoBook. We only collect the data the service needs, we never sell data and we do not share it with third parties for commercial purposes.
Who is responsible for your data?
- Restaurant accounts, the rilobook.com website, contact and demo requests: WellensMedia SRL is the controller.
- Reservations: the restaurant you book with is the controller of your data (name, contact details, special requests). WellensMedia SRL acts on its behalf as a processor (Article 28 GDPR), only on its instructions. For any question about a reservation, contact the restaurant first; we help it answer you.
Restaurants using RiLoBook are bound to WellensMedia SRL by a data processing agreement.
Controller contact details
WellensMedia SRL, Esplanade 5, 7800 Ath, Belgique. Company number 0537.612.404.
Privacy contact: contact@wellensmedia.be.
We have not appointed a data protection officer (it is not mandatory for our activity): please write to the address above.
Data processed and retention periods
| Type | Data | Purpose | Retention |
|---|---|---|---|
| Restaurant account | Name, email, phone, venue | Providing the service, invoicing | Term of the contract + 3 years |
| Reservations (on behalf of the restaurant) | Name, email, phone, date, party size | Managing the reservation | Guest record anonymised after 3 years without a reservation |
| Special requests and allergies | Free text entered with the reservation | Preparing the service | Erased automatically 30 days after the service date |
| Deposit payment | Amount, reference; no card data stored (Stripe) | Payment, accounting | Statutory accounting retention period |
| Time clock (restaurant staff) | Clock-in times, signature, IP address, browser | Working-time records kept by the employing restaurant | Signature, IP and browser erased after 12 months; the times are kept for the restaurant's employment-law obligations |
| Technical logs | IP address, browser, dates | Security, troubleshooting | 12 months |
| Audience measurement (with your consent) | Random visitor identifier, pages viewed, referrer | Website traffic statistics | Cookie: 1 year; statistics: 12 months |
Legal bases
- Performance of a contract: restaurant accounts; for reservations, handling the booking requested by the guest.
- Legal obligation: accounting records, time-clock data kept by the employing restaurant.
- Legitimate interest: service security, technical logs.
- Consent: audience measurement (rilo_v and rilo_s cookies) and, for an allergy, the guest's explicit consent (Article 9 GDPR), which can be withdrawn at any time.
Your rights
You have the right of access, rectification, erasure, objection, restriction and portability, and the right to withdraw your consent at any time. Write to contact@wellensmedia.be. See also our GDPR page.
Processors
We use the following providers:
- Stripe (deposit payments; Ireland and United States): guest email, amount. Card data is handled by Stripe alone. Stripe privacy policy.
- Resend (email delivery; United States): recipient address, message content.
- o2switch SAS (hosting; Chemin des Pardiaux, 63000 Clermont-Ferrand, France).
Full, up-to-date list: our sub-processors.
Transfers outside the European Union
Stripe and Resend may process data in the United States. These transfers rely on the EU–US Data Privacy Framework where the provider is certified and, otherwise, on the European Commission's standard contractual clauses (Article 46 GDPR).
Complaints
You may lodge a complaint with the Belgian supervisory authority: Autorité de protection des données (APD), Rue de la Presse 35, 1000 Bruxelles (www.autoriteprotectiondonnees.be).
If you live in Italy, you may also contact the Garante per la protezione dei dati personali (www.garanteprivacy.it).
WellensMedia SRL · BCE 0537.612.404 · Esplanade 5, 7800 Ath