GDPR Compliant · Belgium

Privacy & GDPR

Your rights as a guest — Cilurzo Reservations · Last updated: 13/07/2026

1. Data Controller

Cilurzo Reservations is a service by Cilurzo Digital (Manuel Cilurzo), based in Belgium.
Contact: manuel@cilurzo.be

2. Data We Collect

Restaurant owners: name, email, password (bcrypt-hashed), address, phone
Guests: name, email, phone, reservation details, IP address (hashed)

3. Legal Basis

Performance of contract (reservation management)
Consent (marketing emails, reviews)
Legitimate interest (fraud prevention)
Legal obligation

4. Your Rights

As a guest, you have the following rights under the GDPR:

🔍

Right of Access

You can request what personal data we hold about you.

✏️

Right to Rectification

You can request correction of inaccurate data.

🗑️

Right to Erasure

You can request deletion of your data (right to be forgotten).

🚫

Right to Object

You can object to processing for marketing purposes.

📦

Right to Portability

You can receive your data in a structured, portable format.

5. Retention Periods

Reservation data: 2 years after the reservation
Guest profiles: until deleted by the restaurant or upon request
Hashed IPs: 6 months

6. Third Parties & Transfers

We do not sell data to third parties. Processing is carried out only by our processors:

AWS EU (hosting, Frankfurt)
Amazon SES EU (transactional emails)
Mollie (Belgium/EU — only when an online deposit is used)
Google Fonts (font delivery; your IP address is shared with Google)

Apart from loading Google Fonts, no personal data is transferred outside the EU.

7. Cookies

We use necessary and functional cookies only. There are no tracking, analytics or advertising cookies, and we share nothing with ad networks.

Cookie	Purpose	Type	Retention
`PHPSESSID`	Keeps you signed in and maintains your session while you use the dashboard.	Necessary	30 days
`cilurzo_default_tool`	Remembers whether you prefer to open Reservations or Foodcost after signing in.	Functional	1 year

Local storage. For your convenience we keep a few preferences locally in your browser (not cookies, never sent to our server): kiosk mode, reservation view preferences, dismissing the install tip and acknowledging this cookie notice.

Third-party services. Some pages load Google Fonts (typeface) directly from Google, which shares your IP address with Google. For restaurants using online deposits, payment is handled by Mollie, which may set its own cookies on its payment page. These parties set no cookies on our own domains.

8. Lodge a Complaint

You can lodge a complaint with the Belgian Data Protection Authority (GBA).

📋 Submit a GDPR Request

No account required. We will process your request within 30 days.

Request type

Access to my data Correction of my data Deletion of my data Object to processing Copy of my data (portability)

Your name *

Your email address *

Restaurant (optional)

At which restaurant did you make a reservation?

Additional information (optional)