Restaurant Młodnik

PRIVACY AND COOKIE POLICY

Rules governing the processing of personal data and the use of cookies.

Website domain

 

This Privacy and Cookie Policy explains how personal data is processed and how cookies and other technologies are used on the website www.restauracjamlodnik.pl.


General information

 

This Privacy Policy sets out the rules for the processing of personal data and the use of cookies by the Controller in connection with the use of the website.

1. Privacy Policy / GDPR

Providing personal data, as well as consenting to its processing, is entirely voluntary. Any personal data provided to us is processed only to the extent and for the purpose to which you have consented or as otherwise permitted by applicable law. Providing data is voluntary, although it may be necessary to use certain services or enter into cooperation with us.


I. Who is the controller of your personal data?

The controller of personal data (the “Controller”), responsible for ensuring the security of your personal data, is:

BN Jacek Borys Sandrina Nikiel Spółka cywilna
ul. Panewnicka 224
40-772 Katowice, Poland
Tax ID (NIP): 6342984505


II. How do we protect your personal data?

The Controller has implemented internal procedures that comply with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR) and provide effective protection of your personal data.


III. What personal data do we ask you to provide?

When making a reservation, we ask you to provide the information necessary to process it:

  • Full name
  • Email address
  • Telephone number

IV. How long do we retain your personal data?

The Controller does not retain your personal data for longer than necessary. We may, however, retain it for the period required by law or necessary to protect the Controller’s interests, in particular to establish, pursue or defend potential legal claims.


V. Exercising your rights in relation to personal data

A. Right to withdraw consent

You have the right to withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before it was withdrawn. It may, however, prevent you from using certain services that require consent.

Legal basis: Article 7(3) GDPR.

B. Right to object

You have the right to object to the processing of your personal data at any time. If your objection is justified and the Controller has no other legal basis for continuing the processing, your data will be deleted.

Legal basis: Article 21 GDPR.

C. Right to erasure (“right to be forgotten”)

You have the right to request the deletion of your personal data if:

  • you have withdrawn your consent to its processing,
  • the data is no longer necessary for the purposes for which it was collected,
  • you have objected to the processing of data for marketing purposes,
  • the data is being processed unlawfully.

Despite a request for deletion, the Controller may retain the data to the extent necessary to establish, pursue or defend legal claims.

Legal basis: Article 17 GDPR.

D. Right to restriction of processing

You have the right to request that the processing of your personal data be restricted if:

  • you contest the accuracy of your data,
  • the processing is unlawful,
  • the Controller no longer needs the data, but you require it to pursue claims,
  • you have objected to the processing of the data.

Legal basis: Article 18 GDPR.

E. Right of access

You have the right to obtain confirmation as to whether the Controller processes your personal data and to obtain:

  • access to your data,
  • information about the purposes and scope of processing,
  • information about the recipients of the data,
  • information about the data retention period,
  • a copy of your personal data.

Legal basis: Article 15 GDPR.

F. Right to rectification

You have the right to have your personal data corrected or completed if it is inaccurate or incomplete.

Legal basis: Article 16 GDPR.

G. Right to data portability

You have the right to receive your personal data and transmit it to another controller, as well as to request that it be transferred directly where technically feasible.

Legal basis: Article 20 GDPR.

The Controller will respond to requests without undue delay and no later than one month after receiving them. In particularly complex cases, this period may be extended by a further two months.

You also have the right to lodge a complaint with the President of the Personal Data Protection Office in Poland if you believe that the processing of your data infringes the GDPR.


VI. Changes to this Privacy Policy

The Controller reserves the right to amend this Privacy Policy if required by applicable law, if the technological conditions of the website change, or if the amendments introduce a higher standard of data protection.

This policy has been effective since 1 June 2021.


VII. Contact

If you have any questions about this Privacy Policy or the security of your personal data, please contact us:

If you would like to update or delete your personal data, please contact us using the same details: