Malpertuus & Malpertuus 2
Your privacy.
A warm welcome, with respect for your information. Here is what we use and why.
Updated 5 November 2026 · version 3
Management app and notifications
Only when an administrator enables notifications do we store the device’s technical push address, its encryption keys and the selected language. The browser’s notification service (Apple on iPhone and iPad) delivers the encrypted notification. Names, email addresses and message content are not included in the notification. Notifications can be disabled for each device in management; signing out disables them for that device. Technical notification logs are automatically removed after seven days.
Who is responsible?
Malpertuus VOF / SNC, Dweersstraat 22, 8000 Bruges, Belgium, VAT number BE 1011.256.870, is responsible for this website and reservation processing for both restaurants.
Malpertuus — Eiermarkt 9 · Malpertuus 2 — Dweersstraat 22.
For questions or requests about your information, email [email protected].
Management and email
Messages sent to [email protected], including attachments, are received through Resend and processed in the secure management area hosted by Cloudflare. Only authorised administrators can read and reply to messages and manage bookings. Login attempts and administrative actions are logged for security.
What information do we use, and why?
For a real online booking we use your name, email, phone number, restaurant, date, time, party size, language and any practical note. This information is needed to make, confirm, change or cancel the booking. Notes are optional; the required fields are needed to book online. You can also book by phone.
Do not include medical or other sensitive information. Please discuss allergies with the restaurant by phone.
Our legal basis
A real booking and related communication are processed to fulfil your request or contract (GDPR Article 6(1)(b)). Technical information for a secure, available website and replies to general enquiries rely on our legitimate interests (Article 6(1)(f)). This website does not use reservation details for newsletters or advertising profiles.
Technology and service providers
Delivering the website involves technical information such as your IP address, requested page and browser details. Authorised restaurant staff and, where needed, hosting and email providers may process information to deliver the service. Fonts and images are loaded from this website. There are no embedded social feeds, advertising pixels or visitor analytics.
Cloudflare hosts the website and booking database. For online bookings, Resend processes the emails sent to the guest and the restaurant. More information · Cloudflare · Resend.
How long is information kept?
Real booking and contact details are kept for as long as needed to deal with your visit, enquiry and any follow-up. Longer retention is only appropriate when required by a legal obligation or a specific dispute. Necessity, completion of the request and applicable legal obligations determine the period. Contact us about the retention period for your particular information.
Your rights
Where the GDPR provides, you may request access, correction, deletion, restriction or portability of your information and object to processing based on legitimate interests. Send your request to the email address below. You may also lodge a complaint with the Belgian Data Protection Authority.
Availability and external links
The reservation system automatically checks whether enough seats are available for the chosen time. It does not create a personal profile or credit assessment. Parties of ten or more book by phone or email. Directions, email and telephone links open another service when clicked; that service’s policy then applies.