Last updated : January 25, 2026
1. Data Controller
The controller of personal data processing is:
2. Data Collected
In the context of using Remios, we collect and process the following personal data:
- Identity data: name, first name, email address, phone number
- Connection data: IP addresses, connection logs, session identifiers
- Payment data: transaction information via Stripe (encrypted credit card numbers), payment history
- Usage data: data related to service usage (orders, menus, stock, etc.)
- Billing data: information necessary for invoice issuance and accounting management
3. Processing Purposes
Personal data is collected and processed for the following purposes:
- Provision and management of the Remios service (POS software for restaurants)
- Order and payment management
- Invoice and accounting document issuance
- Customer relationship management and technical support
- Compliance with legal and regulatory obligations (accounting, taxation)
- Service improvement and development of new features
4. Legal Basis for Processing
The processing of your personal data is based on the following legal grounds:
- Contract performance: processing necessary for the performance of the service contract
- Legal obligations: compliance with accounting and tax obligations (invoice retention for 10 years)
- Legitimate interest: service improvement and fraud prevention
5. Data Recipients
Your personal data is intended for:
- Pantalacci Alexandre: data controller
- Supabase: data hosting (company based in the European Union)
- Vercel: infrastructure hosting (company based in the European Union/United States)
- Stripe: payment processing (PCI-DSS compliant, potential transfers outside the EU with appropriate safeguards)
- Competent authorities in case of legal obligation or judicial requisition
Transfers outside the EU: Currently, no data is transferred outside the European Union, except for Stripe which may transfer data to the United States in the context of payment processing, with appropriate safeguards (European Commission standard contractual clauses).
6. Retention Period
Personal data is retained for the following periods:
- Billing and accounting data: 10 years from the end of the fiscal year (legal tax and accounting obligation)
- Payment data: period necessary for payment processing and legal obligations, in accordance with PCI-DSS standards
- Service usage data: duration of the contractual relationship plus 3 years for customer relationship management purposes
- Connection data and logs: maximum 12 months
Beyond these periods, data is deleted or irreversibly anonymized.
7. Your Rights
In accordance with the General Data Protection Regulation (GDPR) and the Data Protection Act, you have the following rights:
- Right of access: you can obtain a copy of your personal data
- Right to rectification: you can request correction of inaccurate data
- Right to erasure: you can request deletion of your data (subject to legal retention obligations)
- Right to restriction: you can request restriction of processing of your data
- Right to object: you can object to processing of your data for legitimate reasons
- Right to data portability: you can request recovery of your data in a structured format
- Right to set directives: regarding the fate of your data after your death
To exercise your rights, you can contact us by email at alexandre@remios.app or by mail to the address mentioned above.
You also have the right to file a complaint with the Commission Nationale de l'Informatique et des Libertés (CNIL): www.cnil.fr
8. Data Security
We implement all appropriate technical and organizational measures to ensure the security and confidentiality of your personal data, including:
- Encryption of sensitive data (payments, passwords)
- Secure authentication
- Restricted access to data according to the need-to-know principle
- Regular backups
- Security incident monitoring and detection
9. Cookies
For more information on cookie usage, please consult our Cookie Policy.
10. Policy Modification
This privacy policy may be modified at any time. The date of last update is indicated at the top of this page. We encourage you to regularly consult this page to be aware of any changes.
11. Contact
For any questions regarding the processing of your personal data, you can contact us: