Data Processing Agreement

Version 2026-10-24

This agreement under Art. 28 GDPR applies between the Customer (controller) and Walwer (processor).

1. Subject and duration

Processing of guest waiting list data (name, party size, arrival and seating times) for the duration of the contract.

2. Instructions

We process data only on documented instructions from the Customer, as given through the use of the service.

3. Confidentiality and security

Persons processing data are bound to confidentiality. We apply appropriate technical and organisational measures, including encryption in transit and access control.

4. Sub-processors

The Customer approves our hosting, database and payment providers. We inform the Customer of changes and allow objection.

5. Assistance and deletion

We support the Customer with data subject requests and data breaches. On contract end, data is deleted after 30 days unless law requires storage.