TableTosh provides tools that can support GDPR-compliant reservation operations. The software does not make a restaurant compliant on its own: lawful use also depends on the restaurant’s purposes, notices, settings, staff practices, contracts, retention rules, and response procedures.
Last updated 10 August 2026
A restaurant decides why and how it uses guest information for reservations, customer service, payments, records, and marketing. It is normally the data controller for that processing.
When TableTosh handles reservation data for a restaurant, it normally acts on that restaurant’s documented instructions as its processor under Article 28 GDPR.
Article 5 GDPR sets the baseline. Product settings should follow the purpose and risk of the restaurant’s processing, not replace that assessment.
These controls help with day-to-day data governance. A restaurant should test and document how it uses them as part of its own technical and organisational measures.
Depending on the circumstances, people may have rights to information, access, rectification, erasure, restriction, portability, objection, and protection from solely automated decisions. These rights are not absolute in every case.
A guest should usually contact the restaurant that collected the booking first. As processor, TableTosh can assist the restaurant with locating relevant records and carrying out a valid request. Requests about a TableTosh account or this website can be sent through our contact form.
Send a privacy requestAllergy, disability, or accessibility notes may reveal health information and can be special-category data under Article 9 GDPR. Restaurants should only request what is necessary, identify an Article 6 lawful basis and an applicable Article 9 condition, restrict access, and set an appropriate retention period.
Free-text fields should not be used for medical histories, payment-card details, identity documents, or other information that is not needed to provide the booking.
This page is a product explanation, not legal advice or a certification. Compliance depends on the facts of each restaurant’s processing and the law that applies to it. The following official sources explain the underlying duties.