Table X

Privacy Policy

Learn how Table X collects, uses, and protects your personal data.

1. Introduction

Table X (https://table-x.com) respects your right to data protection and is committed to processing your data lawfully, transparently, and with care. This Privacy Policy describes what personal data we collect, how we use, store, and protect it, and what rights you have as a user.

2. Data Controller

"TEBELH" EOOD, registered in the Commercial Register and the Register of Non-Profit Legal Entities at the Registry Agency with UIC 207511736, with registered office and management address: Varna, postal code 9000, Odesos district, 48 Patriarch Evtimiy Street, floor 6, apt. 10. The company is a personal data controller within the meaning of the General Data Protection Regulation (Regulation (EU) 2016/679) and the Personal Data Protection Act.

Contact with the Commission for Personal Data Protection (CPDP)

  • Address: Sofia 1592, 2 Prof. Tsvetan Lazarov Blvd.
  • Email: kzld@cpdp.bg
  • Website: www.cpdp.bg

3. What Personal Data We Collect and For What Purposes

Data Category
Examples
Purpose of Use
Data you provide
Name, phone, email, preferences
For registration, reservations, communication, confirmations
Reservation/order data
Date, time, number of guests, special requests
For service delivery, tracking, analytics
Technical/anonymous data
IP address, device type, browser
For security, optimization, analysis
Marketing consents
Consent for Viber/WhatsApp/SMS/Email
For sending promotional messages (only with explicit consent)

4. Legal Basis for Processing

  • Contract performance – for services you have requested (reservations, orders).
  • Consent – for marketing messages via email/Viber/WhatsApp/SMS.
  • Legitimate interest – for maintaining security, analysis, and improvements.
  • Legal necessity – when required by law.

5. Transfer of Data to Third Parties

  • The venue where you make a reservation will receive only the necessary information for service (name, phone, email, etc.).
  • Suppliers and partners (hosting, analytics services, SMS/Viber/WhatsApp providers) – only under contractual conditions and guarantees.
  • National and judicial authorities – when legally required.

6. Storage and Retention Period

  • Reservation data is stored for 2 years from the reservation registration date.
  • Marketing data is stored until consent is withdrawn.
  • Product analytics in PostHog Cloud EU is retained for up to one year. Technical and security logs follow the applicable provider and internal retention policies.

7. Security

Table X applies technical and organizational measures:

  • Encryption (SSL/TLS)
  • Access control, account locking
  • Regular backups
  • Team training

In case of a data breach, we will notify the competent authorities and affected users within the period provided by law.

8. Cookies and Tracking Technologies

  • Necessary storage supports security, navigation and reservations. Optional analytics and marketing technologies are disabled by default.
  • You can accept, reject, customize or later withdraw optional consent through Privacy settings in the footer.
  • With analytics consent, we use PostHog Cloud EU for product funnels and Vercel Analytics for aggregate traffic. Vercel Speed Insights measures performance. Meta Pixel is not currently enabled and will require marketing consent if introduced.

9. Your Rights

  • Access to your personal data
  • Correction/updating
  • Erasure (under conditions)
  • Restriction of processing
  • Objection to processing
  • Data portability
  • Withdrawal of consent (for marketing messages)
  • Complaint to a supervisory authority (in Bulgaria – CPDP)

10. Changes to the Policy

Table X may update this Policy due to legal changes, technological developments, or business needs. Changes will be published here, and for significant changes – we will notify active users.