Effective from: September 15, 2025

INTRODUCTION

This Privacy Policy, hereinafter referred to as the "Privacy Policy", provides information on the processing of personal data in connection with the use of the GoodResto Portal, an online platform available at portal.goodresto.app, which enables the management of restaurant data displayed in the GoodResto App and affiliated websites, as well as the handling of reservation processes.

All capitalized terms used in this Privacy Policy shall have the same meanings ascribed to them in the Terms of Service of GoodResto Portal, unless expressly stated otherwise.

DATA CONTROLLER AND CONTACT INFORMATION

The controller of your personal data is:

Goodresto sp. z o.o.ul. Williama Heerleina Lindleya 1602-013 Warsaw, Poland

KRS: 0001124926

NIP: 7011221145

You can contact us via:

• Postal mail: Goodresto sp. z o.o., ul. Williama Heerleina Lindleya 16, 02-013 Warszawa, lub

• E-mail: [email protected]

TYPES OF PERSONAL DATA PROCESSED

Data provided directly by Users:

When registering a restaurant as a Venue Representative and setting up a User account, we may collect:

• Restaurant name

• Contact phone number

• Contact email address

• Restaurant website and social profiles (e.g., Google Maps, Facebook, Instagram, Tripadvisor, if applicable)

• First name, last name, position of the Venue Representative, with contact number and email address (if different)

When registering as a Venue Worker and setting up a User account, we may collect:

• First name, last name, position of the Venue Worker, with contact number and email address (if different)

Additionally, to display the restaurant in the GoodResto App, we process:

• All content provided by the user about the Gastronomic Venue (e.g., description, contact options, menu, promotions, and other information)

For invoicing purposes, we process:

• Business name of the entity running the Gastronomic Venue

• Company address

• Tax Identification Number (or equivalent business identifier, depending on jurisdiction)

Data collected automatically:

When you use the Portal or visit our website, we may collect:

• IP address

• Date and time of the visit

PURPOSES AND LEGAL BASES FOR PROCESSING

We may also contact you by telephone or by email to present you with offers related to the Portal's services, such as subscription packages or time-limited promotions. Such contact is made based on our legitimate interest in direct marketing, especially where the contact details were provided during business registration. You have the right to object to such contact at any time.

We process personal data in compliance with GDPR and for the following purposes:

• To provide services as described in the Terms of Service

• To fulfil legal obligations, including tax and accounting requirements

• To conduct direct marketing of our services (based on consent)

• To ensure the security and technical integrity of the GoodResto Portal.

The legal basis depends on the specific context:

• Performance of a contract (Art. 6(1)(b) GDPR)

• Legal obligations (Art. 6(1)(c) GDPR)

• To conduct direct marketing of our services (based on consent)

• Consent for marketing (Art. 6(1)(a) GDPR)

• Legitimate interest of the controller (Art. 6(1)(f) GDPR)

OBLIGATION TO PROVIDE DATA

Providing personal data is voluntary but necessary to use the Services. Without this data, we will not be able to create or manage your account or provide functionalities.

DATA RECIPIENTS

We may share your data with:

• Trusted service providers such as IT companies, accounting firms, marketing agencies, analytics providers, or payment processors, but only to the extent necessary for the delivery of our services;

• Advisors such as legal, accounting or tax;

• Entities affiliated with Goodresto, if necessary for internal administrative purposes;

• Public authorities or regulatory bodies when required by applicable laws or legitimate legal requests

In principle, we do not transfer your personal data outside the European Economic Area (EEA). If such transfer becomes necessary, it will only be done in accordance with applicable legal requirements and with the use of appropriate safeguards, such as standard contractual clauses approved by the European Commission.

USER RIGHTS

You have the right to:

• Access your data and receive a copy.

• Rectify incorrect or outdated information.

• Request data deletion (in legally allowed situations).

• Restrict data processing.

• Withdraw consent (if processing is based on it).

To exercise your rights, contact us at: [email protected]