1. Data controller and contact details
Our role under data protection law depends on the feature concerned. We generally act as the controller for the public benvido website and the administration of benvido accounts. For certain guest data processed by a hospitality business through benvido, we may act as a processor on behalf of that business.
2. Visiting the public website
When you access benvido.eu, we process connection data necessary to deliver the website. These include your IP address, the time of access, the requested URL, the amount of data transferred, browser and device information, and technical status and error data.
We process these data to deliver the website securely, investigate errors and prevent abuse. The legal basis is our legitimate interest in a secure and reliable website under Article 6(1)(f) GDPR.
Necessary technologies secure the operation and store your privacy choice for up to 180 days. Optional audience measurement and convenience services only start after your voluntary consent. You can change your choice at any time via ‘Privacy settings’ in the footer. Fonts and images are delivered by our own infrastructure.
2a. benvido Online Check
For the optional online check, we process the business details you select or enter, publicly available information about the business, technical website characteristics and connection data needed to prevent abuse. We use Google Places for business searches and local comparisons. Google PageSpeed Insights may be used to assess technical website performance. Our crawler retrieves no more than six public pages from the same website.
The preview is available for 30 days through a randomly generated, unguessable link. It contains no personal data entered by guests and is not made available for search engine indexing. We associate the full report with a business only after email verification, confirmation of ownership and account creation. Processing is necessary to take steps before entering into a contract under Article 6(1)(b) GDPR and to provide the service securely and prevent abuse under Article 6(1)(f) GDPR.
3. Contact
When you use the contact form or contact us by email, we process your contact details, message, selected request type and the metadata required for handling it. A DSA notice additionally includes the reported URL, legal reasoning and good-faith confirmation. Processing is based on taking steps before entering into a contract under Article 6(1)(b) GDPR, compliance with legal obligations under Article 6(1)(c) GDPR, or our legitimate interest in orderly communication under Article 6(1)(f) GDPR. We use Cloudflare Turnstile to prevent abuse; instead of storing the full IP address in the case, we retain only a non-reversible fingerprint derived from technical request data.
4. benvido account and platform usage
When registering, logging in and using benvido, the following data may be processed in particular:
- Name, e-mail address and authentication data,
- Business memberships and user roles,
- Business, domain and billing information,
- Text you provide, opening hours, menus, images and documents,
- Usage, security, error and change logs.
Processing is necessary to provide and secure the platform, perform the contract or take steps before entering into a contract under Article 6(1)(b) GDPR. Security logging may also be based on Article 6(1)(f) GDPR.
The authenticated platform uses essential browser storage for sign-in and necessary settings. This storage is not used to track users across other websites for advertising.
5. Reservations, newsletters and guest data
When guests use features of a website operated through benvido, we may process their name, contact details, reservation request, messages, newsletter consent and email delivery information, depending on the enabled feature.
The relevant hospitality or accommodation business is generally responsible for the lawful collection and use of these data. benvido processes the data as a technical service provider within the agreed scope. Guests can find further information in that business’s privacy policy.
Marketing newsletters are sent only to addresses whose registration has been confirmed via a confirmation link using double opt-in. Custom or manually imported recipient lists are not permitted. Every marketing message contains a simple unsubscribe option.
6. Optional connections to Google, Facebook and Instagram
A business can choose to connect benvido to external services. We may process identifiers of connected accounts and pages, granted permissions, connection status, encrypted access tokens and content submitted at the user’s request.
We use the connection to perform the requested function. External platforms also process data under their own terms and privacy policies. You can disconnect services in benvido or revoke access with the provider. For Meta connections, see Data deletion.
6a. Google connection: access, use and protection of your data
This section applies when you connect your Google account to benvido at app.benvido.eu. You authorise access through Google OAuth and select the available accounts, locations and properties in benvido. We do not receive your Google password. Access is limited to the permissions you grant and is used to provide the features you configure.
Google data we process and why
- Google Business Profile: account and location identifiers, business name, contact details, address, regular and special opening hours, available profile metrics, and reviews including reviewers’ display names, ratings, text, timestamps and replies. We use these data to select locations, display reviews and metrics, and maintain profiles at your request. Replies, posts and profile changes are published only on your instructions; enabled automatic synchronisation, such as holiday opening hours, follows your configuration.
- Google Search Console: available website properties and access levels, search queries, page URLs, clicks, impressions, click-through rates and positions. We read these data to display search performance and identify opportunities for improvement; the webmasters.readonly permission does not allow changes in Search Console.
- Google Analytics 4: available accounts, properties and web data streams, including the measurement ID, and aggregated user, session, page, traffic-source and event metrics, including reservation, phone and directions clicks. We use these data for the statistics dashboard and period comparisons. The analytics.readonly permission does not allow changes to your Analytics configuration. When the measurement ID is installed on your benvido website, visitor measurement starts only after the appropriate analytics consent; the relevant business’s privacy policy also applies.
- Connection management: granted permissions, account and property assignments, connection status, encrypted access and refresh tokens, and technical synchronisation and error information. These support secure authentication to Google APIs, automatic data retrieval and troubleshooting. We do not request access to Gmail, Google Drive, Calendar or other Google Workspace content.
Purpose limitation and sharing
Processing is necessary to provide the requested platform features under Article 6(1)(b) GDPR and to secure the service under Article 6(1)(f) GDPR. Where we process data on behalf of your business, its instructions and the agreed data processing terms apply. Google authorisation does not replace any consent required from your website visitors.
We use Google user data only to provide or improve the features you use. We do not sell these data or use or transfer them for personalised advertising, retargeting, credit assessment, or training general-purpose or non-personalised AI or machine-learning models. Google Ads measurement described for our marketing website does not use data retrieved through your Google account connection.
Access is available to authorised users of your business and, where necessary for operation and security, authorised personnel and technical service providers: Supabase for the database and authentication, Hetzner for backend hosting, and Cloudflare for secure transmission and delivery. Google receives the data needed to carry out your requests and changes. Other disclosure occurs only on your express instructions, where required by law, or to protect against abuse and security incidents. Section 7 explains recipients and international transfers.
The use and transfer of information received by benvido from Google APIs comply with the Google API Services User Data Policy, including the Limited Use requirements.
Security, retention and deletion
We transmit data over HTTPS/TLS. Google access credentials are encrypted and stored in an area inaccessible to regular users. Role-based and site-specific access controls restrict access to stored Google data. Technical logs support monitoring and troubleshooting; tokens are not stored in the browser.
While the connection is active, we retain the tokens and assignments needed to operate it. Retrieved metrics, reviews and synchronisation information are retained for your site’s reporting and management for as long as needed for those purposes, no longer than until the relevant site deletion, subject to statutory retention obligations. Temporarily cached GA4 dashboard reports are reused for up to five minutes.
You can choose “Disconnect” under “Google & visibility”. This deletes the stored Google tokens and stops future authorised retrievals; it does not fully delete previously stored metrics, reviews or technical assignments. You can also revoke access in your Google account connections . Revoking access at Google does not automatically delete data previously stored by benvido.
To request complete deletion of site data retrieved from Google, use our privacy request form and identify the business and your request to “delete Google data”. We verify your authority and handle the request in accordance with applicable law. Alternatively, the site deletion process in section 8 applies. Records subject to statutory retention are restricted to the required purpose. Deletion at benvido does not automatically remove data in the original Google account or content already published on Google.
7. Technical service providers and recipients
We only use service providers to the extent necessary for operation, security and communication. Depending on the use, these include in particular:
- Cloudflare for DNS, security, content delivery, network services and the invisible Turnstile abuse-prevention service. The following also applies: Cloudflare Turnstile Privacy Addendum,
- Supabase for authentication, database and storage services,
- Resend for sending transactional emails,
- Google for the optional online check, and Google and Meta, when you have actively set up the relevant account connection.
Where service providers process personal data on our behalf, we engage them under contracts in accordance with Article 28 GDPR. Where data are processed outside the European Economic Area, we rely on appropriate safeguards where required under Chapter V GDPR, such as adequacy decisions or standard contractual clauses.
8. Retention
We retain personal data only for as long as needed for the relevant purpose, to provide the contracted service or to meet statutory retention obligations. Account and contract data are generally retained for the duration of the business relationship. Security logs and server data are deleted or anonymised once they are no longer needed for security and troubleshooting.
A site deletion scheduled in the account is carried out no sooner than 30 days after the request and never before the contract ends. Operational site data and associated files are then removed; invoices and contractual evidence subject to statutory retention remain restricted to that purpose and are disconnected from the deleted site. Authorised business users can anonymise the personal details of individual reservations or newsletter contacts earlier.
For Google connections, the separate rules for tokens, stored reports and deletion requests in section 6a apply. For other platform connections, the relevant data deletion notices also apply.
Public online-check links expire after 30 days. A full report associated with an account after verification remains available for use within that account. It is removed following an authorised deletion of the account or site, unless statutory obligations require its retention.
9. Your rights
Subject to the GDPR, you have rights of access, rectification, erasure, restriction of processing, data portability and objection. You may withdraw consent at any time with effect for future processing.
Please use our secure privacy form. If it is temporarily unavailable, you can email [email protected] . You also have the right to lodge a complaint with a data protection supervisory authority. In Austria, this is the Austrian Data Protection Authority, Barichgasse 40–42, 1030 Vienna, www.dsb.gv.at.
10. Changes to this information
We update this privacy policy when features, service providers or legal requirements change materially. The version published on this page applies.