Version 0.3, 26 October 2026. The Polish version is binding. This English version is a translation.
Subprocessors
These are the companies that process personal data for ResTable when ResTable works for a restaurant as its processor (Data Processing Agreement, §7). ResTable announces any new subprocessor at least 30 days before it starts; the Data Processing Agreement, §7, explains how to object.
| Provider | Purpose | Location | Safeguard for transfers outside the EU |
|---|---|---|---|
| Hetzner Online GmbH, Germany | Hosting, database, backups | Germany | Not needed (EU) |
| Cloudflare, Inc., USA | File and backup storage; bot protection on booking forms | Storage in the EU; bot checks worldwide | EU–US Data Privacy Framework / Standard Contractual Clauses |
| Telnyx LLC, USA | Telephone network for the phone assistant | USA | Standard Contractual Clauses |
| Soniox, Inc. | Speech-to-text during calls | EU processing endpoint | Standard Contractual Clauses |
| Cartesia, Inc., USA | Text-to-speech for the phone assistant | USA | Standard Contractual Clauses |
| Scaleway SAS, France | Language models for the phone assistant, call summaries and quality checks | France | Not needed (EU) |
| Mistral AI SAS, France | Back-up language model | France | Not needed (EU) |
| Amazon Web Services EMEA SARL | E-mail to guests | Germany (Frankfurt) | EU–US Data Privacy Framework / Standard Contractual Clauses |
Only when switched on: HostedSMS / api-sms.pl (Poland). Text messages to guests. Within the EU.
Not subprocessors: the restaurant's own staff, and the push services (Google, Apple, Mozilla, Microsoft) that deliver encrypted notifications to the staff's devices.
Changes
| Date | Change |
|---|---|
| 26 October 2026 | First version |