Legal notice & privacy policy

1. Owner

This website and the Qartscan service are owned by Felipe Jurado, SLU, Tax ID B67876805, registered office at Calle La Fuente, 29710 Mondrón (Málaga), España. Registro Mercantil de Málaga, Tomo 2271, Libro 1184, Folio 117. Contact: equipo@qartscan.com.

2. Purpose and terms of use

Accessing this site implies acceptance of this legal notice. You agree to use the site and the service diligently and not to manipulate or reproduce protected content for commercial purposes without express authorisation.

3. Intellectual property

The contents of this site (text, images, trademarks and software) are protected. Each venue is solely responsible for, and the owner of, the content of its own menu.

4. Links and disclaimer

We are not responsible for the content of linked third-party sites, for service interruptions due to force majeure, or for the unauthorised use of your credentials. We recommend strong passwords (at least 8 characters combining upper and lower case, digits and special characters).

5. Data protection: controller

The data controller is Felipe Jurado, SLU, with the contact details in section 1. For any privacy matter, write to equipo@qartscan.com.

This processing is subject to Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018, as the controller is established in Spain, and to Law 81 of 2019 on Personal Data Protection of the Republic of Panama, together with its Executive Decree 285 of 2021, as regards data subjects resident in Panama.

6. Purpose and legal basis

We process your data to: (a) manage sign-up and your subscription and bill the service (performance of the contract); (b) answer your enquiries by email, phone or WhatsApp (your consent); and (c) comply with applicable legal and tax obligations. Commercial communications, if you opt in, are based on your consent, which you may withdraw at any time (art. 21 of Spanish Law 34/2002 and art. 5 of Law 81 of 2019).

7. Data we process

Identification and contact details of the venue (name, email, phone), billing and subscription data. Payment is handled through Stripe: we do not store your full card details in our systems.

If you pay through one of our payment links without opening an account, we only process the details needed to issue the charge and contact you about it (venue name, email, phone and tax details), on the basis of performing the contract.

Regarding the published menu, we measure visits with first-party tools only — the service's own aggregate count and self-hosted analytics (Umami) running on a server of ours: no cookies, no identification of the diner, and the diner's IP address is not kept (it is used only at that moment to work out the country). None of it is shared with third parties or used for advertising. The detail is in our cookie policy.

8. Recipients

We do not share your data with third parties except by legal obligation or with the providers required to deliver the service: Stripe (payment processing), the hosting provider and the email delivery provider. Some providers may process data outside the European Economic Area or outside the Republic of Panama, in which case the safeguards required by the applicable law apply (standard contractual clauses or equivalent mechanisms).

The optional automatic translation of your menu sends only the menu text (dish names and descriptions) to an external language-model provider. No personal data is sent, and the feature only runs when you request it.

Our marketing website uses the Meta pixel, from Meta Platforms Ireland Ltd., to measure our advertising on Facebook and Instagram. It sends the page visited and the type of action, never your name, email address or phone number, and it can be turned off at any time from the cookie policy. The pixel is not used on the venues' published menus: no third-party tool follows the diner there (our own visit measurement is described in section 7).

9. Retention

We keep your data while the account is active and, afterwards, for the applicable legal periods (e.g. tax). Enquiry data is kept only as long as needed to handle it.

10. Your rights

You may exercise your rights of access, rectification, erasure or cancellation, objection, restriction and portability by writing to equipo@qartscan.com. You may also lodge a complaint with Panama's National Authority for Transparency and Access to Information (antai.gob.pa) or, as the controller is established in Spain, with the Spanish Data Protection Agency (aepd.es).

11. Governing law

This notice is governed by Spanish law, the law of the service owner's domicile, without prejudice to any mandatory data protection and consumer protection rules of the Republic of Panama that may apply. Any dispute shall be submitted to the courts of Malaga (Spain), unless the law sets another mandatory jurisdiction, such as the consumer's domicile.