Who is responsible
The restaurant you book with decides why and how your details are used, and is the data controller. Serein provides the booking software and processes your details on the restaurant’s behalf. The restaurant’s name and contact details are on its booking page; if you ask us about your booking, we will pass your request to the restaurant.
What is collected and why
Your name, email address, phone number (if you give one), the date, time and party size, and any request or note you add. It is used to make and manage your reservation, to send you confirmations, reminders and changes, and to let the restaurant prepare for your visit (GDPR art. 6(1)(b), and art. 6(1)(f) for running the restaurant). To prevent abuse we verify your email address with a short code and check that you are a person with a security check from Cloudflare.
Payments
If the restaurant asks for a deposit, you pay on Stripe’s secure page. Serein and the restaurant never see your card number. The restaurant sets its own cancellation and refund rules, shown before you book.
Who sees it
The restaurant’s authorised staff, and Serein’s providers that deliver the service for the restaurant (hosting and database in the EU, email delivery, payments and bot protection). Your details are not sold or used for advertising.
How long it is kept
The restaurant decides how long it keeps reservation records. Serein removes live restaurant data when permanent restaurant deletion is confirmed; subscription expiry alone does not delete it. You can ask the restaurant to export or erase your details.
Your rights
You can ask the restaurant for access, correction, deletion or restriction of your details, and object to their use. If you are unhappy with the answer you can complain to your data protection authority; in Denmark that is Datatilsynet (datatilsynet.dk).
Public guidance from the authorities: Datatilsynet (data protection) and Erhvervsstyrelsen (cookies and e-commerce).