1. Who controls your data
Pata Gastro Bar, operating at Rua das Farinhas 7, Lisboa, Portugal, is responsible for the personal data processed through Pata Social Engine. Questions or privacy requests may be sent to pata.gastrobar@gmail.com or made by telephone at +351 21 886 4060.
2. Scope
Pata Social Engine is a private content operations application for authorized Pata Gastro Bar personnel. It is not intended for restaurant customers or the general public.
3. Data we process
- Account data: name, email address, user identifier, access role and authentication events.
- Connected-platform data: TikTok account identifier, display information, permissions granted, authorization status and access credentials. Credentials are stored securely and are not shown publicly.
- Content data: photos, videos, captions, drafts, review decisions, publishing schedules and publication results supplied or created by authorized users.
- Technical data: device and app information, timestamps, error details, security events and service logs needed to operate and protect the application.
4. Why we use data
We process data to authenticate authorized users; create, review and manage restaurant content; connect Pata-controlled social accounts; schedule and publish approved content; troubleshoot failures; maintain audit records; and protect the application against misuse.
5. Legal bases
Depending on the activity, processing is necessary for Pata Gastro Bar's legitimate interests in operating and securing its content workflow, for the performance of employment or service arrangements with authorized users, and to act on the user's explicit authorization when connecting a third-party social account. Where consent is the applicable basis, it may be withdrawn without affecting earlier lawful processing.
6. Service providers and disclosures
Data is shared only as needed with providers that support the application, including Auth0 for identity and authentication, Cloudflare for application infrastructure and storage, and TikTok when an authorized user connects or publishes to a Pata-controlled TikTok account. Each provider also processes data under its own terms and privacy policy. We do not sell personal data.
7. International processing
Some providers may process information outside Portugal or the European Economic Area. Where required, Pata relies on appropriate safeguards offered by those providers, such as adequacy decisions or standard contractual clauses.
8. Retention
Account and operational records are kept while access remains active and for as long as reasonably needed for security, audit and legal obligations. Media and content records are retained until deleted under Pata's content workflow or no longer needed. Connected-platform credentials are removed or invalidated when the account is disconnected, subject to short-lived backups and security logs.
9. Security
We use access controls, encrypted transport, restricted administrative permissions and operational logging. No system is completely risk-free, and authorized users must protect their credentials and devices.
10. Your rights
Subject to applicable law, you may request access, correction, deletion, restriction or portability of your data, or object to certain processing. You may also withdraw consent where processing relies on consent. Contact us using the details above. You may lodge a complaint with Portugal's data protection authority, the Comissão Nacional de Proteção de Dados (CNPD).
11. Children
Pata Social Engine is not directed to children and is restricted to authorized personnel.
12. Changes
We may update this policy as the application or its providers change. The latest version and effective date will always appear on this page.