Kiosk – Pre-Contractual Transparency Information

    (Pursuant to Regulation (EU) 2023/2854 – EU Data Act (“Act”); any capitalized terms shall have the meaning as defined in the Act)

    Provider: Deliverect NV and its Affiliate Tabesto SAS
    Version: Pre-contractual; effective as of December 1, 2025

    1.Product/Service Covered 

    Kiosk Terminal (e.g., FOX/Oslo/Rio models) (the “Connected Product”) and the Kiosk SaaS Solution refers to the Software as a service solution that enables the Connected Product to receive and process orders placed by end users (the “Related Service”).

    2. Data categories generated by the Connected Product / Related Services

    Connected Product: Hardware diagnostics, operational metadata, network connection logs, terminal event logs (e.g., touch screen input, payment terminal connection status), and device usage statistics.

    Related Services: Specific order details (e.g., items selected, modifiers, transaction values, payment status, sign in to loyalty feature, cancellation, receipt request), menu configuration data (e.g., dynamic pricing rules, stock-out status), and aggregated performance metrics (e.g. time between screen interactions)

    Data formats/standards: json; csv; mysql

    3. Estimated volume and frequency

    Volume varies significantly based on usage frequency but is generated as continuous usage logs. The Kiosk terminal is designed to generate operational data, event logs, and status updates continuously and in real-time. 

    4. Storage locations and retention

    On‑device: For 30 days limited, transient, encrypted operational logs may be stored temporarily on-device to ensure continuity before transmission.

    Deliverect/Tabesto servers: Product Data (as defined under the Act) is stored for 30 days; Related Services Data (as defined under the Act) is stored indefinitely or for any period of time later communicated by Deliverect/Tabesto.

    Retention: The retention period of the collected data depends on the type of data and the purpose of the use case. Data is anonymised and kept indefinitely.

    5. How Users access, retrieve,and erase data

    Direct Access (where technically feasible): access to relevant data via Related Service exportable through the Front-end account of User.

    On Request: Deliverect/Tabesto will make Readily Available Data (as defined under the Act) accessible to the User without undue delay, free of charge and in a commonly used, structured, machine‑readable format, upon User request via the Deliverect Support team through the Help Center and the chat function on https://help.deliverect.com/en/.

    Erasure: Users may request deletion via the Deliverect Support team through the Help Center and the chat function on https://help.deliverect.com/en/. Deleted data is not recoverable.

    6. Deliverect/Tabesto’s use of readily available data

    Deliverect/Tabesto uses the data to provide the contracted services, (e.g.) enabling consumers to place orders through the Connected Product (Kiosk Terminal), initiating payment with integrated payment partners, generating receipts (printed or digital), enabling loyalty features, syncing menu items/prices, providing sales/performance analytics), maintenance and diagnostics (e.g. monitoring system performance, identifying faults and troubleshooting, applying updates, patches, and security enhancements)  improving the functioning of the Connected Product/service, developing new products or services, including artificial intelligence (AI) solutions and fulfilling legal obligations (e.g., warranty, compliance, and statutory retention). This use of non-personal data is based on the contract with the User.

    7. Sharing with third parties at the User’s request 

    In line with the Act, Deliverect/Tabesto enables Users to request that Readily Available Data be shared with a third party of their choice at no cost for the User.

    Sharing will be provided in a structured, commonly used, machine-readable format, using secure transfer methods. Sharing will be done in an automated way where technically feasible.

    Users can initiate and revoke sharing via a request to the Deliverect Support team through the Help Center and the chat function on https://help.deliverect.com/en/ Sharing is subject to technical feasibility and security requirements.

    Deliverect/Tabesto are not responsible for the third party’s use of the data; Users should review the third party’s terms & conditions and privacy policies.

    8. Security and trade secrets

    Deliverect/Tabesto reserves the right to identify specific data (e.g., complex algorithms or underlying proprietary software data) as trade secrets. To the extent applicable, disclosure of any identified trade secret data will only occur if the User (or the requested Third Party) agrees to and implements all necessary proportionate technical and organizational safeguards to preserve confidentiality as determined by Deliverect/Tabesto. Deliverect/Tabesto reserves the right to not make certain data available if they are considered to be trade secrets and no appropriate security measures have been agreed upon and implemented.

    9. Right to lodge a complaint

    The User has the right to lodge a complaint with the national competent authority or the data coordinator in the member state of establishment/residence regarding alleged infringements of the Act.

    10. Updates to This Notice

    This notice may be updated to reflect changes in the law, modifications to Deliverect/Tabesto’s products or related services, or technical updates affecting data processing.