Privacy Policy

This notice is provided under Articles 13 and 14 of the GDPR, Italian Legislative Decree 196/2003 and other applicable data-protection laws. It explains personal-data processing in connection with plateout.com (the Portal). It does not cover linked third-party sites or processing independently carried out by Venues.

1. Controller

The controller is Plateform S.r.l., Via Andrea Costa 202/6, 40134 Bologna (BO), Italy, tax and VAT number IT 03953561200, share capital €100,000 fully paid up, supporto@plateform.app. For Portal requests you may also write to info@plateout.com; we reply within 72 business hours.

2. Who this notice concerns

It concerns Portal visitors, whose data come from browsing; people who send a report, who provide data directly; and Venue owners or contacts and review authors whose data appear in Listings, obtained from public sources or third-party services.

3. Children

The Portal is for people aged fourteen or over. We do not knowingly collect data about younger children and delete it if we become aware of it.

4. Portal visitors

4.1 Browsing data

Our systems collect data inherent in Internet protocols: IP address, browser and device type, operating system, requested pages, request time and server response. We use it to provide and secure the Portal and to produce aggregated statistics.

4.2 Approximate location

The “Use my location” feature reads a User's location only after explicit permission, which can be withdrawn in browser or device settings. Coordinates are read on the device and sent only to search nearby Venues; they are not recorded, retained or used for another purpose.

4.3 Purposes, legal bases and retention

Portal operation and security rely on our legitimate interest; system logs are normally retained no more than twelve months. Abuse prevention and accountability rely on the same interest. Aggregated statistics rely on legitimate interest, or consent where a tool is not anonymised. Nearby search relies on consent through the device and retains no coordinates.

5. People sending reports

The contact form may process name, email, optional telephone number, relevant Venue and report text. Providing it is optional, but without contact details we cannot reply. We use it to manage and verify the report, correct published data and defend legal claims, based on legitimate interest or legal obligations. Reports are retained for twenty-four months after closure, except where longer retention is needed to protect rights. We do not use these data for marketing.

6. People whose data appear in Listings

This section is the Article 14 GDPR notice for data not collected from the data subject.

6.1 Data and sources

We use address-validation services, Google business and map services, TripAdvisor, machine translation and AI for descriptive text. Data mainly concern the business: name, address, telephone number, hours, price range, photos, category, aggregate rating and review count. They can relate to people where a contact or business name identifies an owner or contact, and in reviews that include the author's public name, date, rating, text and a restaurateur's reply.

6.2 Purpose and legal basis

Processing is based on the legitimate interest of the controller and the public in organising already public information about businesses and enabling informed choices. We considered the public nature of the information, the public-facing business activity, continued attribution of reviews and the immediate right to object.

6.3 Objection and erasure

You may object or ask for removal through the form or at info@plateout.com. Venue owners and managers may request correction, update or removal; review authors may ask us not to reproduce their review or public name. We reply within thirty days. Removal from the Portal does not remove content from its source platform.

6.4 Retention

Venue information is retained and periodically updated while its Listing remains published. If an objection is accepted, we remove the data and retain only evidence of the request so it can be honoured during future updates.

7. Journey to Plateform

Restaurant-owner calls to action lead to Plateform pages. From that point, data collection, demo requests and marketing consent take place on Plateform and are governed by Plateform's privacy notice.

8. Recipients

Data may be processed by authorised personnel; service providers that collect or process listing information; DigitalOcean, whose infrastructure used for the Portal is in Frankfurt and Amsterdam; the external developer; Google, TripAdvisor, Perplexity and OpenStreetMap; and public or judicial authorities where required by law. Data are not disclosed or sold to third parties for their own marketing.

9. Transfers outside the EEA

The infrastructure is in the EU. Google and Perplexity may involve transfers to third countries, safeguarded under GDPR Chapter V, such as adequacy decisions or standard contractual clauses. Ask the contacts in section 1 for information on safeguards.

10. Your rights

You may request access, rectification, erasure, restriction, portability, objection and withdrawal of consent at info@plateout.com or supporto@plateform.app. We reply within thirty days. You may complain to the Italian data-protection authority.

11. Cookies and tracking technologies

Cookies, pixels, local storage and device-identification techniques store or access information on a device. Technical cookies are necessary and need no consent; anonymised analytics may be treated as technical; profiling and non-anonymised third-party cookies require consent. The Portal uses only PHPSESSID, a first-party technical cookie that maintains the browsing session and is deleted when the browser closes. It does not use advertising, profiling or third-party tracking cookies.

Google photos, Google Fonts icons and OpenStreetMap maps load elements from external servers and may transmit your IP address to their providers. You can manage cookies in your browser; disabling the technical cookie may prevent some functions from working.

12. Security

We adopt appropriate technical and organisational measures to protect data against destruction, loss, alteration, disclosure or unauthorised access.

13. Changes to this notice

We may update this notice for legal changes or new features. The version published on this page applies.