Data Processing Annex
Last updated: 29 September 2026
This draft Data Processing Annex describes processing of guest personal data on a restaurant's behalf. The processor's registered identity and the contracting details will be confirmed after Mealar's company formation, before this annex is finalized.
What is processed
Guest and order data handled through the platform: order contents and status, table or pickup context, receipt email addresses, payment references (never card numbers), and related accounting records. Data subjects are the restaurant's guests; processing lasts for the term of the agreement.
Roles & instructions
The restaurant is the controller; Mealar processes guest data only to provide the service as the restaurant configures it and on its documented instructions. If an instruction would breach data-protection law, Mealar will say so instead of following it.
Confidentiality & security
Persons authorised to process guest data are bound by confidentiality. Mealar applies the measures described in the Privacy Policy — encryption in transit, role-restricted and logged access, and payment handling confined to Stripe.
Sub-processors
The restaurant authorises the sub-processors listed in the Privacy Policy. Mealar announces additions in the dashboard; the restaurant may object on reasonable data-protection grounds and, if no workaround exists, terminate the affected service. Sub-processors are bound by equivalent obligations.
International transfers
Transfers outside the EEA/UK rely on the European Commission's Standard Contractual Clauses and supplementary measures, as set out in the Privacy Policy.
Assistance
Taking the nature of the processing into account, Mealar assists the restaurant with guest requests under data-protection law and with its security, breach-notification, and impact-assessment duties, insofar as the restaurant cannot fulfil them through the dashboard.
Personal data breaches
Mealar notifies the restaurant without undue delay after becoming aware of a breach affecting guest data, with the information reasonably needed for the restaurant's own notifications.
Deletion & return
At termination, Mealar deletes or returns guest personal data at the restaurant's choice, subject to the export window and the bookkeeping-law retention described in the Terms and the Privacy Policy.
Audit
Mealar makes available the information reasonably necessary to demonstrate compliance with this DPA and, where the law requires more, allows audits with reasonable notice, during business hours, at the restaurant's cost.
Precedence & law
If this DPA conflicts with the Terms on data-protection matters, the DPA prevails. Liability follows the Terms' limitation; governing law and venue are those of the Terms.