1. Who is responsible for your data
This site and the Mesa Lista service are operated by Nicolas Garcia, an individual residing in Bogotá, Colombia, contact mesa-lista@tankmail.lat. Nicolas Garcia is the party responsible for processing the personal data collected here. Mesa Lista has no registered company name or tax registration: the responsible party is the individual named above.
2. What data we collect
Only the data you type, at three different moments:
a) Waiting list (optional).
- Email address (required): so we can write to you about the menu and available spots.
- Name (optional): so we can address you by name.
- Message (optional): whatever you tell us about the dishes you would like to find.
b) Your account and your orders.
- Email address and password: the password is stored only as a cryptographic digest (scrypt), never in plain text, and we cannot read it.
- Name of the person receiving the order, phone number and delivery address in Bogotá, plus any delivery notes you write: the minimum needed to deliver your order.
- Your orders: the five dishes you picked with their version, the delivery week, the status of the order and the dates of each change.
c) Payments. Your card details (number, expiry date, security code and the name on the card) are sent from the form straight to the payment gateway through the technology platform that runs this site: they are not stored, not logged and never kept in Mesa Lista's database. For each payment we keep only the identifier the gateway returns, its status, the amount with its currency, the last four digits of the card and the authorisation code, so we can prove your week is paid.
The address of the page the waiting-list form was sent from is also recorded. We do not ask for identity documents and we do not collect sensitive data (health, ethnic origin, biometric data or others listed in article 5 of Colombia's Law 1581 of 2012): we do not calculate calories, we do not handle therapeutic diets and we do not store health information about anyone.
3. What we use it for
- To keep your account and your session so you can build, review and pay for your orders.
- To prepare and deliver the week's order at the address you gave us, and to call you if there is a problem with the delivery.
- To charge the week you paid for and keep a record of the payment, the order and its changes.
- To email you when we publish the week's menu or spots open up, if you left your address on the list.
- To answer the message or question you send us.
- To understand, in aggregate, which dishes and conditions interest families.
We do not use your data for any other purpose. We do not sell it, rent it out, or share it with third parties for commercial or advertising purposes.
4. Where it is stored and who sees it
Waiting-list submissions are transmitted to and stored on the technology platform Nicolas Garcia uses to run this site, which acts as data processor and handles them only on his instructions. Your account and your orders are stored in this application's own database, hosted on that same platform. The card charge is carried out by the payment gateway contracted through it, which receives the card details and handles them as the party responsible for that charge.
Within Mesa Lista, only the responsible party named in point 1 has access to this data. Each account sees only its own orders. That platform and the gateway may host the information on servers located outside Colombia; by accepting this policy you authorise that transfer, limited to the purposes in point 3.
5. How long we keep it
Your account and your orders are kept while your account is open. Paid orders and the record of their payments are kept as supporting evidence of the sale even if you ask us to close the account, because they are the proof of a charge; the rest of your data is deleted when you ask. Your waiting-list record is kept while you remain interested in the service, and is deleted if you ask us to.
6. Your rights and how to exercise them
Under Colombia's Law 1581 of 2012 and Decree 1074 of 2015, as the owner of your data you may:
- Access, update and correct the data we hold about you.
- Request proof of the authorisation you gave us.
- Be informed about how we have used it.
- Withdraw your authorisation and request the deletion of your data.
- File complaints with the Superintendencia de Industria y Comercio.
To exercise any of these rights, write to mesa-lista@tankmail.lat from the address you registered, telling us what you need. We answer enquiries within a maximum of ten (10) business days and complaints within a maximum of fifteen (15) business days, following the deadlines in the law cited above. Removing your email from the list is free of charge.
7. Minors
This site is intended for people over 18. We do not knowingly collect data from minors; if we receive any, we delete it when we notice or when their legal guardian asks us to at the contact address.
8. Cookies and tracking
This site uses a single first-party cookie, your session cookie, which is technically necessary for you to log in and see your orders; it is deleted when you log out. We do not install advertising cookies or third-party analytics tools, and we do not track your browsing across sites.
9. Changes to this policy
If we change this policy we will publish the new version on this same page with its update date. When a change affects the purposes in point 3, we will tell everyone on the list by email.
10. Contact
Party responsible for the site and the service: Nicolas Garcia. Contact email: mesa-lista@tankmail.lat. City of operation: Bogotá, Colombia.