Privacy policy
Last updated: 30 September 2026 · Version 2.1
Who is the controller of your data?
Platomico S.L. (hereinafter, "Platomico", "we") is the controller of the personal data we collect through this website. You will find its full identification details at the end of this page.
Data Protection Officer (DPO): Antonio Casanova, dpo@platomico.com
Platomico's role depending on the type of data
It is important that you understand when Platomico decides about your data and when it merely processes it on behalf of someone else. This distinction defines who is answerable to you:
| Situation | Platomico's role | Who is responsible |
|---|---|---|
| When you use this website (contact forms, demo, browsing) | Data Controller: Platomico decides why and for what purpose it uses this data | Platomico S.L. This Privacy Policy covers this case. |
| When you place an order at a restaurant that uses Platomico's technology | Data Processor: Platomico only processes the data following the restaurant's instructions | The restaurant. You should consult that restaurant's privacy policy. |
| When you use the REN app as a courier | Joint Controller (art. 26 GDPR): Platomico and the restaurant (our Customer) whose orders you deliver jointly decide certain aspects of the processing of your delivery data | Platomico S.L. and the restaurant (our Customer), jointly. You can contact either of them. |
- Situation
- When you use this website (contact forms, demo, browsing)
- Platomico's role
- Data Controller: Platomico decides why and for what purpose it uses this data
- Who is responsible
- Platomico S.L. This Privacy Policy covers this case.
- Situation
- When you place an order at a restaurant that uses Platomico's technology
- Platomico's role
- Data Processor: Platomico only processes the data following the restaurant's instructions
- Who is responsible
- The restaurant. You should consult that restaurant's privacy policy.
- Situation
- When you use the REN app as a courier
- Platomico's role
- Joint Controller (art. 26 GDPR): Platomico and the restaurant (our Customer) whose orders you deliver jointly decide certain aspects of the processing of your delivery data
- Who is responsible
- Platomico S.L. and the restaurant (our Customer), jointly. You can contact either of them.
Important note
This Privacy Policy refers only to the data Platomico processes as Controller, that is, the data we collect directly through this website. When we provide a service to a restaurant and process its customers' data, we act as Data Processor and it is the restaurant that answers as Controller; that relationship is governed by the contract between Platomico and each restaurant, not by this policy. Even so, because the REN app is used directly by couriers and Platomico and the restaurant act as joint controllers in it, we explain transparently below what data it processes, on what legal basis and for what purpose.
What data do we collect and for what purpose?
We collect personal data depending on how you interact with us. Here is each case:
| How you give us your data | What data we collect | What we use it for | Legal basis |
|---|---|---|---|
| Contact form / demo request | Name, email, phone, company or restaurant, message and, if you tell us, how you heard about us. If you complete the pre-demo questionnaire, also the type of business, the number of locations and the approximate order volume | Reply to your enquiry and, where applicable, prepare and schedule a demo tailored to your business profile | Your consent (form checkbox) |
| Registration as a customer on the platform | Email and account/business configuration data | Allow you to create a self-service account and configure your business. The dashboard is not fed with real data until you subscribe to the service | Pre-contractual steps at your request (art. 6.1.b) and your consent |
| Use of the website forms | IP address | Limit the number of submissions and prevent abuse. We process it temporarily and in memory for a few seconds; we do not store it | Our legitimate interest in protecting the service |
| Browsing the website (cookies) | Browsing data according to your cookie preferences (see Cookie Policy) | Analytics and site improvement, subject to your consent | Your consent (see Cookie Policy) |
- How you give us your data
- Contact form / demo request
- What data we collect
- Name, email, phone, company or restaurant, message and, if you tell us, how you heard about us. If you complete the pre-demo questionnaire, also the type of business, the number of locations and the approximate order volume
- What we use it for
- Reply to your enquiry and, where applicable, prepare and schedule a demo tailored to your business profile
- Legal basis
- Your consent (form checkbox)
- How you give us your data
- Registration as a customer on the platform
- What data we collect
- Email and account/business configuration data
- What we use it for
- Allow you to create a self-service account and configure your business. The dashboard is not fed with real data until you subscribe to the service
- Legal basis
- Pre-contractual steps at your request (art. 6.1.b) and your consent
- How you give us your data
- Use of the website forms
- What data we collect
- IP address
- What we use it for
- Limit the number of submissions and prevent abuse. We process it temporarily and in memory for a few seconds; we do not store it
- Legal basis
- Our legitimate interest in protecting the service
- How you give us your data
- Browsing the website (cookies)
- What data we collect
- Browsing data according to your cookie preferences (see Cookie Policy)
- What we use it for
- Analytics and site improvement, subject to your consent
- Legal basis
- Your consent (see Cookie Policy)
Why may we process your data? (legal basis)
We only process your personal data when we have a legal basis for doing so. Depending on the case, that basis may be:
- Your consent: when you give it to us freely and expressly, for example by accepting cookies or subscribing to our communications. You can withdraw it whenever you like.
- Performance of a contract: when we need your data to provide the service you have subscribed to.
- Legitimate interest: when we process your data for purposes you can reasonably expect, such as replying to your enquiry or improving our services, always respecting your rights.
- Compliance with legal obligations: when a law requires us to keep or process certain data (for example, tax obligations).
Who do we share your data with?
We do not sell your personal data. We share it only with providers that help us deliver our services, and always with the safeguards the law requires. These providers act as data processors and only process your data following our instructions.
Categories of providers that may process data collected on this website:
- Cloud infrastructure and hosting: providers with servers in the European Union (Ireland and Spain).
- Email delivery: to reply to contact and demo forms, with the international transfer safeguards described in section 6.
- Website usage analytics: we measure how the site is used in pseudonymised form with PostHog, which processes the data in the European Union, without storing your IP and only if you accept analytics cookies.
Do we transfer your data outside Europe?
Most of your data is processed within the European Economic Area (EEA): our hosting infrastructure is in the European Union (Ireland and Spain) and our web analytics provider (PostHog) stores the data in the European Union.
Some of our providers are companies based in the United States. Where this involves an international data transfer, it is carried out with the safeguards of article 46 GDPR: through certification under the EU-US Data Privacy Framework and/or the European Commission's Standard Contractual Clauses (SCCs). This is the case for the provider that sends the form emails (Resend) and, on some pages, for Google's mapping services. Google fonts are served self-hosted from our own servers, so they do not involve any transfer.
You can request further information and a copy of the applicable safeguards at privacy@platomico.com. For details about cookies, see our Cookie Policy.
How long do we keep your data?
We keep your data only for as long as necessary for the purpose for which we collected it, and afterwards for the periods required by legal obligations.
| Type of data | Retention period |
|---|---|
| Contact form data (enquiries) | 1 year from the last contact |
| Customer data (contractual relationship) | For the duration of the contractual relationship and, afterwards, blocked for 6 years (commercial and tax obligations) |
| Technical records (logs) | 2 years |
| Browsing data | As set out in the Cookie Policy |
- Type of data
- Contact form data (enquiries)
- Retention period
- 1 year from the last contact
- Type of data
- Customer data (contractual relationship)
- Retention period
- For the duration of the contractual relationship and, afterwards, blocked for 6 years (commercial and tax obligations)
- Type of data
- Technical records (logs)
- Retention period
- 2 years
- Type of data
- Browsing data
- Retention period
- As set out in the Cookie Policy
What are your rights?
The law grants you a number of rights over your personal data. You can exercise them at any time by writing to us at privacy@platomico.com. Your rights are:
- Access: know what data of yours we process.
- Rectification: correct data that is inaccurate or incomplete.
- Erasure: ask us to delete your data when it is no longer necessary.
- Objection: object to our processing of your data in certain cases.
- Restriction: ask us to restrict the processing of your data.
- Portability: receive your data in a structured, commonly used format, or ask us to send it to another controller.
We will respond to your request within a maximum of one (1) month. If you believe we have not processed your data properly, you have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD), at www.aepd.es.
How do we protect your data?
We apply technical and organisational measures to protect your data against unauthorised access, loss or alteration. Among others: encryption of communications in transit (TLS) and of data at rest, backups, hosting with European Economic Area providers meeting high security standards, role-based access control and restriction of access to authorised staff. We review and strengthen these measures on an ongoing basis.
Minors
Our services are aimed at companies and professionals in the restaurant sector. We do not deliberately collect data from minors. If we detect that we have collected a minor's data without the corresponding authorisation, we will delete it.
What data is processed if you use the REN app as a courier?
REN is the Platomico app that couriers use to manage deliveries for the restaurants that work with our technology (our Customers). With regard to the data the app processes, Platomico and the restaurant whose orders you deliver are joint controllers (art. 26 GDPR). The restaurant identifies you in the app itself. Basic allocation of responsibilities:
- The restaurant: decides on the delivery operations for its orders and on the use of your data in that context.
- Platomico: provides and maintains the app, defines the security measures and processes the data as agreed and in accordance with the law.
- Point of contact: you can exercise your rights with either of them. Platomico: privacy@platomico.com (Data Protection Officer: Mr Antonio Casanova, dpo@platomico.com).
- Your relationship as a courier: you provide the delivery service on your own account under your contract, either with the restaurant or with a delivery company (fleet). Under no circumstances are you an employee of Platomico.
| What data is processed | What it is used for | Legal basis |
|---|---|---|
| Precise location, including background location | Assigning you nearby orders during your shift and allowing the restaurant to check the status and location of pickups and deliveries | Performance of your delivery contract and legitimate interest in providing a safe service (art. 6.1.b and 6.1.f GDPR) |
| Photos you take with the app | Proving the pickup or delivery of an order | Performance of the delivery contract and legitimate interest (art. 6.1.b and 6.1.f) |
| Account and activity data: name, email, shifts and absences, order and delivery history | Managing your account, your shift planning and the record of your activity | Performance of the delivery contract and compliance with legal obligations (art. 6.1.b and 6.1.c) |
| Device identifier | Sending you push notifications related to your activity | Legitimate interest / performance of the contract (art. 6.1.f and 6.1.b) |
- What data is processed
- Precise location, including background location
- What it is used for
- Assigning you nearby orders during your shift and allowing the restaurant to check the status and location of pickups and deliveries
- Legal basis
- Performance of your delivery contract and legitimate interest in providing a safe service (art. 6.1.b and 6.1.f GDPR)
- What data is processed
- Photos you take with the app
- What it is used for
- Proving the pickup or delivery of an order
- Legal basis
- Performance of the delivery contract and legitimate interest (art. 6.1.b and 6.1.f)
- What data is processed
- Account and activity data: name, email, shifts and absences, order and delivery history
- What it is used for
- Managing your account, your shift planning and the record of your activity
- Legal basis
- Performance of the delivery contract and compliance with legal obligations (art. 6.1.b and 6.1.c)
- What data is processed
- Device identifier
- What it is used for
- Sending you push notifications related to your activity
- Legal basis
- Legitimate interest / performance of the contract (art. 6.1.f and 6.1.b)
About your location
Your location is only tracked during your delivery shift and stops when you end it. While background location is active, the app shows a persistent notification so you always know it is in use. You can manage or withdraw this permission at any time from your device settings.
Automated decisions
Assigning nearby orders relies on your location, but no decisions that significantly affect you are taken based solely on automated processing (art. 22 GDPR); the restaurant always provides human organisation and oversight.
What we don't do
This data is not sold or used for advertising purposes.
How long it is kept
As joint controllers we apply these periods: location, only for the duration of the order/shift; delivery photos, 90 days; account data and order and delivery history, for as long as the relationship lasts and up to 6 years afterwards due to applicable legal obligations; aggregated metrics, 2 years. The restaurant, as joint controller, may set additional periods according to its obligations.
How to exercise your rights
You can exercise your rights of access, rectification, erasure, objection, restriction and portability with either joint controller: the restaurant you provide services to or Platomico (privacy@platomico.com / dpo@platomico.com); we will forward your request to whoever is responsible and help you get a response. If you believe your request has not been handled properly, you can lodge a complaint with the Spanish Data Protection Agency (AEPD, www.aepd.es).
Where your data is processed
Hosting, the providers involved and the safeguards for international transfers are those set out in the general sections of this Policy.
Changes to this policy
We may update this Privacy Policy when necessary. Where the changes are significant, we will tell you through a notice on the website or, if we have your email address, by email. The "last updated" date at the top shows when we last made a change.
Contact
For any enquiry about this Privacy Policy or about the processing of your personal data, write to us at:
Email: privacy@platomico.com
Web: www.platomico.com
Address: C/ Antonio Machado 9, Rozas de Puerto Real, 28649 Madrid, Spain
Platomico, S.L.
VAT number: B22741094
C/ Antonio Machado 9, Rozas de Puerto Real, Madrid, 28649
privacy@platomico.com