This is a translation provided for convenience. In case of any discrepancy, the Italian version prevails. Read the Italian version
Privacy by Design: no registration for guests at the table, anonymity for venue staff and full protection of data from AI training processes.
1. Privacy roles (GDPR)
The Restaurant Owner (Data Controller)The restaurant or venue that acquires the VinAI® licence acts as the Data Controller for the data generated by its own business.
VinAI® (Data Processor)VINAI di Inverso Giuseppe acts as the Data Processor (pursuant to Art. 28 GDPR), providing the technical infrastructure and the artificial intelligence in accordance with the Controller's instructions.
2. User categories and anonymity
A
End Users (Guests at the Table)
The digital menu and the AI assistant are used without any registration or login. No names, email addresses or identifying data are collected. Processing is limited to technical session logs, anonymous usage statistics and the text prompts sent to the chat.
B
Venue Personnel (Back-office Staff)
Access to the management panel takes place through generic venue-level credentials. VinAI® neither requests nor stores personal details (names or private email addresses) of staff members or waiters, guaranteeing full operational anonymity.
3. AI providers and data security
For its intelligent features, VinAI® only uses the APIs of global providers selected for the highest security standards.
🛡️ “No-Training” Policy Guarantee
The texts sent to the Artificial Intelligence (prompts) are NEVER used to train or improve public language models. Data is processed in real time and discarded in accordance with strict Enterprise policies.
General Authorisation for Sub-processorsThe Controller authorises VinAI® to use third-party cloud infrastructure and AI engine providers. VinAI® guarantees that any transfer of data outside the EU takes place under the protection of the Standard Contractual Clauses or the Data Privacy Framework. The up-to-date list of technology partners is always available to the Controller on request.
4. Infrastructure and retention
Hosting by Aruba S.p.A.The software and databases reside on infrastructure provided by Aruba S.p.A., a certified Italian provider that guarantees data is kept in a protected environment compliant with European regulations.
Deletion and SecurityData is protected by encryption and regular backups. When the contract ends, VinAI® permanently deletes all stored configurations and statistics, unless otherwise required by law.