ViteUneTable privacy policy

Last updated: 17 October 2026

Who are we?

ViteUneTable is a service published by LUDO DEV, a limited liability company with a capital of €500, registered with the Nancy Trade and Companies Register (RCS) under number 889 789 517, whose registered office is located at 41 rue Sellier, 54000 Nancy, France (intra-community VAT: FR52889789517). LUDO DEV is the data controller for the data of restaurant owners and of visitors to its sites. For the data of the people who book, LUDO DEV acts as data processor on behalf of the restaurant concerned, which is the data controller for that data.

For any question about your data: ludo@viteunetable.com

Where is your data hosted?

All our servers and databases are located in the European Union. Two services used by the mobile app are the exception: notifications are routed through Expo's notification service, in the United States, and then through Apple or Google, and error reports are entrusted to Sentry, an American company that stores them in the European Union (see the section “The ViteUneTable mobile app”). In addition, a restaurant established outside the European Union accesses its own customers' data from its country and may export it.

What data do we collect, and why?

a) Restaurant owners' data (our customers)

When creating an account: establishment name, contact details (address, phone, email), billing information. This data is necessary for the performance of the contract and the management of the customer relationship.

b) End customers' data (the people who book)

When making a reservation: last name, first name, phone number, email address, number of guests, date and time of the reservation, any comment, and answers to the optional questions asked by the restaurant (for example number of children, reduced mobility, terrace). This data is processed to allow the restaurant to manage the reservation (confirmation, reminder, cancellation). It is accessible only to the restaurant concerned and to ViteUneTable as a technical service provider.

c) Reservations made via “Reserve with Google”

When a reservation is made from Google (Google Maps or the search engine), Google sends us the information needed to create it: last name, first name, phone, email, number of guests and chosen time slot. This data is processed exactly like a direct reservation. The use of the Google service is also subject to Google's privacy rules.

d) Restaurant offers and consent

Some restaurants offer you, at the time of booking, the option of receiving their offers and news by email or by SMS. The corresponding checkbox is never pre-ticked and is never mandatory: leaving it unticked does not prevent you from booking. If you accept, we record your consent with its date, the channel concerned and the wording that was presented to you, in order to keep proof of it. You may withdraw your consent at any time, in one click, using the link included in your reservation emails, and this withdrawal applies to all channels. The offers are sent to you by the restaurant itself, and not by ViteUneTable.

e) Data export by the restaurant

The restaurant may export the data of its own establishment: either the list of customers who have agreed to receive its offers, or all of its reservations, in order to keep them or to change tools. This export is reserved for the holder of the restaurant's account, protected by two-factor authentication and by a security delay, and limited in frequency. The file is not stored on our servers. For each request, we record who made it, its dates, and the IP address and browser used. Once the file has been downloaded, the restaurant is solely responsible for its security and its use.

Audience statistics

We use Matomo, hosted on our own servers (self-hosted), to measure traffic on our sites. The statistics are anonymised: they do not allow you to be identified and no data is shared with third parties.

How long do we keep your data?

Reservation data is kept for a maximum of 24 months after the reservation, then automatically deleted. Proof of consent and the history of export requests are kept as evidence for the duration of the restaurant's account, then for the applicable statutory limitation period. Account data is kept for the duration of the contractual relationship, then archived in accordance with legal obligations before deletion.

Your rights

In accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act, you have the right to access, rectify, erase, restrict, object to and port your data, as well as the right to withdraw at any time your consent to a restaurant's offers. If your data was collected when making a reservation, you may send your request to the restaurant concerned or to us. To exercise these rights, write to us at ludo@viteunetable.com. You also have the right to lodge a complaint with the CNIL, the French data protection authority. If the restaurant is established outside the European Union, the law of its country may grant you additional rights, which you exercise with the restaurant.

Security

We implement appropriate technical and organisational measures to protect your data: encrypted communications (HTTPS), access control, two-factor authentication for restaurant owners' accounts, data export subject to a security delay, hosting on dedicated infrastructure in the European Union.

The ViteUneTable mobile app

The ViteUneTable mobile app is intended for restaurant owners and their teams. It uses the camera only to scan the sign-in QR code and to take photos of your restaurant, and the photo library only for the photos you choose. Face ID and fingerprint recognition are handled by your device's system: we never have access to them. Your sign-in credentials are kept in the device's secure storage, and the data cached on the device is encrypted.

The order pad and the checklists work without an account. Their data stays only on your device: it is never sent to us.

If you allow notifications, we record a notification identifier specific to your device. New-reservation and cancellation notifications contain the customer's name, the number of guests and the date and time of the reservation. They are routed through Expo's notification service (650 Industries, Inc., United States), then through Apple (Apple Push Notification service) or Google (Firebase Cloud Messaging). You can turn them off at any time in the app or in your device's settings.

To improve the app, we measure how it is used with Matomo, hosted on our own servers: screens viewed and actions taken, a random identifier specific to the installation, the app version, the language and the restaurant's name (for support). We do not collect your name, your email address, your customers' data or any advertising identifier, and we do not track you across other apps.

When an error or a crash occurs, the app sends a report to Sentry (Functional Software, Inc.), which stores it in the European Union: the technical description of the error, the device model, the system and app versions and the internal identifiers of your account and of your restaurant. These reports are used only to fix errors, are never used for advertising and are kept for a limited time.