This policy forms part of the legal information of Antylogic and should be read together with the terms and conditions of the service. If you have questions about a specific processing activity, you may contact us before using the platform.
1. Data Controller
The controller of the processing activities carried out by Antylogic is J7121994, S.L., with provisional tax identification number B71555148, registered address at ARALAR, 41 BJ - 31004 Pamplona/Iruña (Navarra) and contact email admin@antylogic.com.
This policy explains how we process personal data in connection with the website, the demo, account registration, the commercial relationship, and the use of the Antylogic platform.
2. Scope and Roles of Antylogic
Antylogic processes data as a data controller when managing information requests, demos, user accounts, billing, service communications, security, and contractual administration.
When a client uses the platform to manage data relating to their own customers, reservations, staff, tickets, operations, or locations, the client acts as the data controller and Antylogic acts as a data processor under the terms agreed contractually.
3. Data We May Process
The data processed depends on the channel used and the configuration set up by each organisation within the product.
We do not request more information than is necessary to provide the service, handle requests, maintain security, and comply with legal obligations.
- Identification and contact data: first name, surname, email address, telephone number, company, job title, and data included in forms or communications.
- Account and access data: credentials, user and organisation identifiers, location, roles, permissions, sessions, acceptance of legal documents, and security events.
- Operational data entered by clients: reservations, restaurant customers, tables, areas, services, tickets, payments, products, staff, shifts, holidays, attendance records, incidents, and reporting.
- Economic and fiscal data: billing information, contracted plans, payment status, invoices, and data required for accounting or tax obligations.
- Technical data: IP address, device, browser, operating system, logs, traces, errors, availability metrics, and service usage.
4. Purposes and Legal Bases
We process personal data to provide Antylogic, manage the relationship with clients and users, respond to requests, protect the platform, and improve the product.
The legal basis may be the performance of a contract, the application of pre-contractual measures, compliance with legal obligations, legitimate interest, or consent where applicable.
- Responding to demo, contact, or support requests and managing requested commercial communications.
- Creating and administering accounts, organisations, locations, permissions, access rights, and service configurations.
- Providing reservations, front-of-house, point-of-sale, kitchen, staff, reporting, billing, and integration functionalities configured by the client.
- Issuing invoices, managing plans, payments, subscriptions, outstanding debt, and fiscal or accounting obligations.
- Preventing fraud, unauthorised access, abuse, security incidents, technical errors, and uses contrary to the terms.
- Analysing aggregated usage, performance, incidents, and product improvement needs, preferably using aggregated or minimised information.
5. Recipients, Providers, and Integrations
We may share data with providers that supply services necessary to operate Antylogic, always under appropriate confidentiality, security, and data protection agreements.
We may also disclose information to public authorities, regulators, courts, or third parties where there is a legal obligation, a valid request, or a need to defend rights and legitimate interests.
- Infrastructure, hosting, security, monitoring, email, authentication, support, billing, and payment providers.
- Third-party services or integrations activated by the client, such as payment gateways, terminals, printers, communication tools, or external APIs.
- Administrator users and members of the client organisation, in accordance with the permissions configured within the platform.
- In the event of international transfers, appropriate safeguards under the GDPR will apply, such as adequacy decisions or standard contractual clauses.
6. Data Retention
We retain data for as long as necessary to fulfil the purpose for which it was collected and, thereafter, for the periods required by legal obligations or to address potential liabilities.
Data associated with accounts and organisations is retained for the duration of the active relationship. Billing data is retained for the applicable statutory periods. Logs, traces, and backups are retained for limited periods proportionate to their technical, security, or evidentiary purpose.
7. Data Subject Rights
You may exercise your rights of access, rectification, erasure, objection, restriction of processing, data portability, and to not be subject to solely automated individual decision-making where applicable. To do so, please write to admin@antylogic.com.
If you consider that the processing does not comply with applicable regulations, you may lodge a complaint with the Spanish Data Protection Authority.
9. Security
We apply technical and organisational measures designed to protect data against unauthorised access, loss, alteration, or improper disclosure.
These measures may include access controls, permissions by organisation and location, encryption in transit, activity logs, monitoring, backups, and incident review. No system is entirely infallible, and credentials must therefore be safeguarded with due diligence.
10. Automation and Operational Optimisation
Antylogic may include optimisation features, operational rules, reporting, or assistance to improve reservations, capacity, front-of-house, kitchen, staff, and billing.
These features are not intended to produce automated decisions with legal effects on natural persons. Clients and authorised users remain responsible for reviewing and validating the operational, employment, fiscal, or commercial decisions they take with the support of the platform.
11. Minors
Antylogic is a professional service intended for restaurant businesses and related activities. It is not directed at minors and does not permit the creation of accounts by individuals who do not have sufficient legal capacity or valid authorisation to act on behalf of an organisation.
12. Changes to This Policy
We may update this policy in response to legal, technical, operational, or product changes. The current version will be published on this page with its update date.
When a change is material and affects registered users, we may communicate it by electronic means or request a new acceptance where necessary.