WORKER PRIVACY POLICY
Supplementary Privacy Notice for Workers Using the RESTOBOT Tips and Employee Portal Service
Scope of this document. This Worker Privacy Policy applies only to the personal data of a Worker (an individual who registers a profile to receive tips) processed through the RESTOBOT Tips and Employee Portal service described at www.restobot.pro/worker. It does not replace, and is supplementary to, RESTOBOT's general Privacy Policy, available at www.restobot.pro/privacy-policy, which governs RESTOBOT's processing of personal data across the wider RESTOBOT Platform. This document does not describe how Payers' (guests') or Venues' (restaurant partners') personal data is processed; that is addressed in separate notices.
1. Who processes your data
RESTOBOT registered in Poland, NIP 1133092409, REGON 524951267, Warsaw, Poland, email [email protected] ("RESTOBOT," "we," or "us"), is the data controller for the personal data described in this Policy, except where stated otherwise below (in particular regarding Stripe, see Section 6).
2. Definitions
Service - the RESTOBOT Tips and Employee Portal functionality described in the Terms of Use for Workers.
Worker - the individual who registers a Profile on the Service. This Policy concerns the Worker's personal data only.
Profile - the personal page a Worker creates on the Service.
Job Market - the optional feature described in Section 5, allowing a Worker to indicate availability for employment.
Stripe - Stripe Payments Europe, Ltd. and its affiliates, the licensed payment institution that processes payouts to Workers. Stripe's privacy policy is available at https://stripe.com/privacy.
3. Categories of data we process, purposes, and legal bases
The data described below corresponds to the fields you may complete when creating and using your Profile. Most fields are optional; you decide how much of your Profile to complete.
A. Account and contact data
Email address and phone number.
Purpose: account management, service communications (e.g., confirmations, security notices), and customer support.
Legal basis: performance of a contract with you (GDPR Art. 6(1)(b)).
By default, your email and phone number are not shown on your public tipping page. They may become visible to Venues and other Users only if you separately enable Job Market visibility, as described in Section 5.
B. Age and identity-adjacent data
Date of birth and citizenship country code.
Purpose: verifying that you meet the minimum age requirement set out in the Terms of Use for Workers, and general fraud prevention.
Legal basis: legitimate interest (GDPR Art. 6(1)(f)) in confirming eligibility and preventing misuse of the Service.
Your date of birth is never displayed on your public Profile as such; only a derived age indicator is displayed, and only if you enable the corresponding visibility setting (see Section 4). Please note that Stripe independently collects and verifies identity documents, including proof of date of birth, as part of its own KYC process; this is separate from RESTOBOT's own processing described here (see Section 6).
C. Gender and student status
Gender (self-declared: male, female, other, or prefer not to say) and student status.
Purpose: allowing you to optionally personalise and describe your Profile.
Legal basis: for internal storage, performance of a contract, since you choose to provide this data as part of your Profile; for public display, your explicit consent (GDPR Art. 6(1)(a)), given separately through the relevant visibility toggle.
We apply heightened care to this data given its personal nature. It is never displayed publicly unless you actively switch on the corresponding visibility setting, and you may switch it off again at any time.
D. Public profile content
Display name, photo, biography, position ("personal_position"), personal page styling choices (such as font and custom button text or link), and any social media links you choose to add (e.g., Instagram, Facebook, WhatsApp, Telegram, TikTok, Twitch, LinkedIn, Discord, X, YouTube).
Purpose: displaying your public tipping page, which is the core function of the Service.
Legal basis: performance of a contract (GDPR Art. 6(1)(b)), since creating and displaying this content is the feature you actively request.
These elements, where completed, are visible by default to anyone who opens your Profile page, for example via a QR code or link at a Venue.
E. Personal Goal ("Dream") data
Goal description, goal image, and target amount.
Purpose: displaying your optional personal savings or aspirational goal on your Profile, as described in the Terms of Use for Workers.
Legal basis: performance of a contract (GDPR Art. 6(1)(b)), since this is an optional feature you actively choose to use.
This data, where provided, is displayed publicly on your Profile. RESTOBOT does not verify the content of your goal and does not treat it as a fundraising or investment activity; see the Terms of Use for Workers, Article 4.4.
F. Job Market data
Availability status ("looking for job"), Job Market visibility setting, work experience, and, only if you separately enable it, your email address and/or phone number for Job Market purposes.
Purpose: allowing Venues and other Users to identify Workers who are available for employment.
Legal basis: your explicit consent (GDPR Art. 6(1)(a)), given by actively enabling Job Market visibility. This is separate from, and additional to, the consent required for public display of contact details under this feature.
You may enable or disable Job Market visibility, and the public display of your contact details within it, at any time through your account settings. Disabling visibility stops future display but does not retroactively remove information already viewed, saved, or downloaded by a third party beforehand.
G. Transaction data
The amount of each Tip received, the date and time, the Payer's transaction reference, and the Venue concerned.
Purpose: operating the Service, handling complaints, and complying with accounting and tax obligations.
Legal basis: performance of a contract and legal obligation (GDPR Art. 6(1)(b) and (c)).
H. Payment and payout data
RESTOBOT does not collect or store your bank account details, card details, or identity documents. These are collected directly by Stripe as an independent controller as part of your Stripe Express account (see Section 6).
I. Technical data
Device type, browser, IP address, and similar log data generated when you use the Service.
Purpose: security, fraud prevention, and keeping the Service functioning correctly.
Legal basis: legitimate interest (GDPR Art. 6(1)(f)).
4. What is public, and what is not
By default, the following elements of your Profile, where you complete them, are visible to anyone who opens your public tipping page: your display name, photo, position, biography, Personal Goal, and any social media links you add.
By default, the following are hidden and are displayed only if you actively enable the corresponding setting: your age (derived from date of birth; your date of birth itself is never displayed), your gender, and your student status. You may switch each of these on or off independently, at any time.
Your email address, phone number, and detailed work experience are never shown on your public tipping page. They become visible to Venues and other Users only through the separate Job Market feature described in Section 3.F and Section 5, and only if you actively enable that visibility.
5. Job Market feature
If you enable Job Market visibility, your Profile becomes discoverable within the Job Market section of the Service by Venues and other Users. Depending on your settings, this may include your work experience, position, and, only if you separately enable it, your email address and/or phone number.
This is an entirely optional feature, separate from the core tipping functionality of the Service, and is not enabled by default. See also the Terms of Use for Workers, Article 5, regarding RESTOBOT's role in connection with this feature.
6. Stripe as an independent controller
To receive Tips, you connect your own Stripe Express account. Stripe collects and processes data necessary for its own identity verification (KYC) and anti-money laundering (AML) obligations directly from you, such as identity documents, date of birth, address, and bank account or card details. Stripe acts as an independent data controller for this purpose, not as a processor acting on RESTOBOT's instructions.
This means that, in addition to this Policy, your personal data relating to Stripe's verification and payout processes is also subject to Stripe's own privacy policy, available at https://stripe.com/privacy. We encourage you to review it.
7. Who we share your data with
Stripe - for the purposes described in Section 6.
Payers and other visitors to your public Profile page - limited to the fields described as public in Section 4.
Venues and other Users of the Job Market - only if you enable Job Market visibility, limited to the fields described in Section 5.
IT and hosting providers acting on RESTOBOT's behalf, under data processing agreements compliant with the GDPR, solely to operate the technical infrastructure of the Service.
Authorities and regulators, where required by applicable law (for example, tax or anti-money laundering authorities) or in response to a lawful request from a court or supervisory authority.
We do not sell your personal data, and we do not use it for third-party advertising purposes.
8. Data retention
We retain the personal data described in this Policy for as long as your account remains active. If you delete your account, we delete or anonymise your Profile data (display name, photo, biography, social links, Personal Goal, and Job Market fields) within a reasonable time, except as follows:
transaction records relating to Tips received (amount, date, and reference) are retained for 5 years from the date of the transaction, in line with applicable accounting and tax retention obligations;
technical log data is retained only for the period necessary for security and troubleshooting purposes, typically not exceeding 90 days, after which it is deleted or anonymised.
RESTOBOT does not control Stripe's own retention periods for identity, KYC, or payout data; these are governed by Stripe's privacy policy and applicable financial regulation.
9. International transfers
RESTOBOT processes the personal data described in this Policy within the European Economic Area (EEA). Where a service provider involved in delivering the Service is located outside the EEA, or where Stripe's own infrastructure involves a transfer outside the EEA, such a transfer takes place only on the basis of appropriate safeguards recognised under the GDPR, such as the European Commission's Standard Contractual Clauses.
10. Your rights
Under the GDPR, you have the right to:
request access to the personal data RESTOBOT holds about you;
request correction of inaccurate or incomplete data;
request erasure of your data, where there is no legal basis for RESTOBOT to keep it;
request restriction of processing in certain circumstances;
object to processing based on legitimate interest;
receive your data in a structured, machine-readable format, where technically feasible;
withdraw your consent at any time, in particular regarding the public display of your age, gender, or student status, and regarding Job Market visibility, without affecting the lawfulness of processing carried out before withdrawal;
lodge a complaint with a competent data protection supervisory authority - in Poland, the Prezes Urzędu Ochrony Danych Osobowych (UODO), or the supervisory authority of your own country of residence within the EU.
To exercise any of these rights, contact us at [email protected].
11. Cookies and similar technologies
The Service uses technical cookies or equivalent local storage strictly necessary for your account session and for the Service to function (for example, to keep you logged in). These do not require your consent under applicable ePrivacy rules.
If RESTOBOT introduces analytics or marketing cookies on the Service in the future, this Policy will be updated accordingly, and consent will be requested where required by law.
12. Changes to this Policy
We may update this Worker Privacy Policy from time to time, in particular to reflect changes to the Service or to applicable law. The version in force is the one published at www.restobot.pro/worker/privacy at the time you use the Service. Material changes will be notified to you by e-mail or through the Service.
Contact
RESTOBOT
Warsaw, Poland
NIP: 1133092409 | REGON: 524951267
Email: [email protected]
Effective date: 02.07.2026