Stokelier Labs, SL · Last updated: 21 October 2026
Privacy policy.
1. Who we are
Coberlier is a booking, gift voucher and group request service for restaurants, provided by Stokelier Labs, SL (Spain).
- Tax ID (NIF): B05790290.
- Registered address: Carrer de la Riera, 25, 08500 Vic (Barcelona), Spain.
- Commercial registry: Barcelona, sheet B-665432, entry no. 1.
- Privacy contact: hola@coberlier.com.
2. Privacy
Enquiries
If you contact us, we use the details you give us to answer and, if you ask for it, to prepare a proposal. We do not add you to any marketing list. We keep enquiries while we handle them and for up to 12 months if no contract follows.
Restaurant bookings
Each restaurant using Coberlier is the controller of its customers’ data (names, phone numbers, e-mail addresses, bookings, allergies…) and informs them in its own privacy policy. Stokelier Labs acts as a processor: it processes that data only to provide the service to the restaurant, following its instructions and the data processing agreement we sign (Article 28 GDPR). Each restaurant has its own installation, database and keys, separate from the others.
Recipients and transfers
Only the providers we need, acting as processors or sub-processors: Cloudflare, Inc. (hosting of this website and of the restaurants’ installations), Meta (WhatsApp Business Platform), only for restaurants that connect their WhatsApp (see section 3), Resend (United States), which sends the restaurants’ installation e-mails such as booking confirmations, and OVHcloud (France), our mailbox. Some of them are based in the United States or may transfer data there; transfers rely on the European Commission’s Standard Contractual Clauses and, where the provider is certified, on the EU-US Data Privacy Framework. We do not sell or share data with anyone else, unless required by law.
Your rights
You can request access, rectification, erasure, objection, restriction and, where applicable, portability by writing to hola@coberlier.com. You can withdraw any consent at any time and lodge a complaint with the Spanish Data Protection Agency (AEPD). Restaurant customers may also contact the restaurant directly.
3. WhatsApp connection (Meta app “Coberlier”)
Coberlier lets restaurants send booking confirmations and reminders by WhatsApp. To do so, the restaurant connects its WhatsApp Business account from the Coberlier dashboard through Meta’s business login window (Embedded Signup). With this connection, the Meta app “Coberlier”, owned by Stokelier Labs, gets access to the restaurant’s WhatsApp Business account.
Data we receive from Meta
- The IDs of the restaurant’s business portfolio, WhatsApp Business account and phone number.
- The business phone number and its verified WhatsApp name.
- A temporary code, used once to complete the connection and not stored.
We do not request or store the name, picture or any other Facebook profile data of the person who makes the connection, nor any password.
What we use it for
- To send, on behalf of the restaurant, booking confirmations and reminders to customers who expressly asked for them when booking.
- To receive the status of each message (sent, delivered, read) and opt-out replies (for example, STOP).
What we do not do
- We do not send advertising by WhatsApp.
- We do not read or store the restaurant’s conversations with its customers.
- We do not import the chat history or the contact list of the WhatsApp Business app.
- We do not sell or share this data, nor use it for profiling.
Storage and retention
Connection IDs are kept in the restaurant’s installation while its WhatsApp remains connected. To send messages, the installation keeps an access token as an encrypted secret on Cloudflare, used only by the program. Each customer’s opt-in and the status of their messages are deleted 30 days after the booking date.
Roles
The restaurant is the controller of its customers’ data and Stokelier Labs is its processor. Meta provides the messaging service under the WhatsApp Business terms: it acts as a processor for the messages sent on behalf of the restaurant, and as a controller for running WhatsApp itself, under its own privacy policy.
5. Data deletion instructions
Restaurants that connected their WhatsApp
- Remove the “Coberlier” app’s access, in either of these places: in your Meta business portfolio settings, Accounts → WhatsApp accounts → your account → Partners tab, and remove Stokelier Labs (Coberlier); or in Facebook, Settings & privacy → Settings → Business integrations → Coberlier → Remove. From then on, Coberlier can no longer send messages from your number, which keeps working in the WhatsApp Business app as usual.
- Ask us to delete the data by writing to hola@coberlier.com from the restaurant’s registered address, stating the restaurant’s name. Within 30 days we will delete the connection IDs, the access token and the log of sent messages, and confirm it in writing. We only keep what the law requires, such as invoices.
Restaurant customers
To stop receiving WhatsApp messages about a booking, use the link included in each message or reply STOP; the booking stays as it is. To delete your booking data, ask the restaurant, which is the controller, or write to our privacy contact and we will forward your request.
People who logged in with Facebook
Coberlier does not request or store your Facebook profile data. Removing the app under Business integrations, as explained above, deletes its access.