GDPR and data protection self assessment guide
If you are a simpleERB restaurant, under the GDPR regulations you are the “Data Controller” and we are a “Data Processor” for you.
(If you use an email programme like MailChimp to send marketing emails to your customers, then MailChimp is a “Data Processor” for you as well.)
The ICO (@ICOnews) have produced a useful guide for small businesses.
You can get it here