Rowomat Privacy Notice

Last updated
31 August 2026
Version
2026-08-31.1

Data we process

We process the entered email address and/or mobile number, organization, branch, service, ticket number, issue time and channel, status changes, message-delivery records, proof that these terms were accepted and payment data needed for confirmation, reconciliation and refunds, such as the reference, status, amount and currency. With Stripe's secure checkout, Rowomat does not receive the full card number or security code. We do not request special categories of personal data.

Purpose and legal basis

Contact details, ticket progress and necessary payment data are processed to provide the requested virtual-queue service, complete the online reservation, handle refunds and send necessary operational notifications. Security, audit, accounting and evidence records are processed to meet legal obligations, protect the system, prevent misuse and resolve disputes. Marketing is processed only on the basis of separate voluntary consent.

Who processes the data

The organization and branch shown during ticket issuance are responsible for their service and for data they process in that role. Rowomat operates the technology platform, digital queue and online reservation, and uses contracted email, SMS, hosting, security and payment providers, including Stripe, only to the extent necessary for those purposes. Where processing involves another country, safeguards required by applicable law are used.

Public-page analytics

We use Plausible on public pages to measure aggregate visits, public paths, referral sources, campaigns, approximate country, device and browser types, and a fixed set of events. We do not send Plausible form content, names, email addresses, phone numbers, search text, voucher codes, access tokens, checkout identifiers, persistent viewer identifiers or business portal data; sensitive URL parameters and fragments are stripped before anything is sent. This analytics does not set marketing or analytics cookies and is not used to profile individuals.

Data retention

We keep data only for as long as reasonably necessary for the active queue and the purposes described above, and as required by applicable accounting, consumer, security and evidence obligations. The period depends on the record type and any dispute; after the necessary period ends, data is deleted or anonymized. Marketing consent and evidence of it are kept until withdrawal and afterwards only as needed to honour the withdrawal and demonstrate compliance.

Your rights and complaints

Depending on applicable law, you may request access, correction, deletion, restriction or portability, object to processing, withdraw consent, and ask for information about the relevant retention period or international transfer. Contact hello@rowomat.com. You may also complain to the competent data-protection authority; withdrawing consent does not affect the lawfulness of earlier processing.