[nnamtr]

A restaurant or company could use its own scanner app to save the data, but I assume this would be illegal

[soco]

Technically they could - if they had the skills (a restaurant with programmer staff?), had a the reason (risking to alienate the customers?) and had the guts to go against GDPR (somebody will spill the beans). So...