Last updated: May 2, 2026
Foodisiac S.L. · Calle Aragón 3, Sotogrande 11310, Cádiz, Spain
1. Introduction
Foodisiac S.L. ("we," "us," or "our") operates the Foodisiac platform (foodisiac.kozyhost.com), a hospitality platform for the restaurant and retail industries. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.
This policy complies with the General Data Protection Regulation (GDPR), the Spanish Ley Orgánica 3/2018 (LOPDGDD), and the Ley 34/2002 de Servicios de la Sociedad de la Información (LSSI-CE).
2. Data Controller & Data Processor Roles
Foodisiac S.L. as Data Processor: When vendors use the platform to manage their customer data (reservations, orders, customer profiles), Foodisiac S.L. acts as a data processor under GDPR Article 28. Vendors are the data controllers for their customers' personal data.
Foodisiac S.L. as Data Controller: For vendor account data, staff information, billing details, and platform usage data, Foodisiac S.L. acts as the data controller.
3. Information We Collect
3.1 Information You Provide
- Account registration data (name, email, phone number)
- Business information (vendor name, address, tax ID, business type)
- Payment and billing details
- Staff information (name, email, phone, role, employment details)
- Content you create (menus, products, posts, media, legal pages)
- Customer reservation data (name, email, phone, booking preferences)
- Communications with our support team
3.2 Automatically Collected Information
- Device and browser information (type, version, operating system)
- IP address and approximate geographic location
- Usage patterns and interaction data
- Session cookies for authentication and security
4. Legal Basis for Processing
We process personal data under the following legal bases (GDPR Article 6):
- Contractual necessity (Art. 6(1)(b)): Processing necessary to provide the Service
- Legitimate interest (Art. 6(1)(f)): Platform security, fraud prevention, service improvement
- Consent (Art. 6(1)(a)): Marketing communications, non-essential cookies
- Legal obligation (Art. 6(1)(c)): Tax compliance, regulatory reporting
5. How We Use Your Information
- Provide, operate, and maintain the platform and its features
- Process transactions, manage subscriptions, and handle billing
- Send transactional emails (activation, password reset, booking confirmations)
- Improve our services, develop new features, and fix bugs
- Ensure platform security, detect fraud, and prevent abuse
- Comply with legal obligations and respond to lawful requests
6. Data Storage & Security
Your data is stored on secure servers within the European Union. We implement industry-standard security measures including:
- AES-256-GCM encryption for sensitive credentials
- Argon2id password hashing with per-user salts
- TLS 1.2/1.3 encryption for all data in transit
- Role-based access control (RBAC) with per-vendor data isolation
- Regular security assessments and vulnerability monitoring
- Automated database backups with encrypted storage
7. Data Sharing
We do not sell your personal data. We may share information with:
- Service providers: hosting, email delivery, payment processing — bound by data processing agreements
- Legal requirements: when required by law, regulation, court order, or legal process
- Business transfers: in connection with a merger, acquisition, or sale of assets, with prior notification
8. Your Rights
Under GDPR and the LOPDGDD, you have the right to:
- Access your personal data (Art. 15)
- Rectify inaccurate or incomplete data (Art. 16)
- Request erasure ("right to be forgotten") (Art. 17)
- Restrict processing of your data (Art. 18)
- Data portability (Art. 20)
- Object to processing based on legitimate interest (Art. 21)
- Withdraw consent at any time (Art. 7(3))
- Lodge a complaint with the Agencia Española de Protección de Datos (www.aepd.es)
To exercise your rights, contact us at privacy@foodisiac.kozyhost.com. We will respond within 30 days.
9. Data Retention
- Active accounts: Data retained for as long as your account is active
- Deleted accounts: Personal data purged within 30 days
- Billing records: Retained for 6 years (Spanish tax law)
- Audit logs: Retained for 12 months
- Backups: Data may persist in encrypted backups for up to 90 days after deletion
10. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated by posting the updated policy and sending a notification to your registered email address.
11. Contact
Foodisiac S.L.
Calle Aragón 3, Sotogrande 11310, Cádiz, Spain
DPO Email: privacy@foodisiac.kozyhost.com
Supervisory Authority: Agencia Española de Protección de Datos (AEPD) — www.aepd.es