Privacy Policy

1. Data Controller

Data Protection Officer: not appointed — not required for our scale of processing (Art. 37 GDPR). All data-protection matters are handled directly by the controller via the contacts above.

2. Purposes and Legal Basis

• Table reservations and catering services — Art. 6(1)(b) GDPR (contract performance).
• Responses to inquiries — Art. 6(1)(f) GDPR (legitimate interest).
• Accounting / invoices — Art. 6(1)(c) GDPR (legal obligation).
• Defense against claims — Art. 6(1)(f) GDPR.

3. Data Recipients

• GoDaddy Operating Company LLC (EU servers) — web hosting and reservation form backend (handled on our own server, no third-party form processor).
• Google Ireland Ltd / Google LLC — Google Maps and Fonts (after consent).
• Accounting firm and government authorities where required by law.

4. Transfers Outside EEA

Reservation form data is processed exclusively within the EEA (on our GoDaddy EU server and our company email). No reservation data is transferred outside the EEA.

The only potential transfer to the United States happens when Google Maps or Google Fonts are loaded — this only occurs after your explicit cookie consent. Such transfers are based on the EU-US Data Privacy Framework adequacy decision (10 July 2023) and/or Standard Contractual Clauses (Regulation 2021/914).

5. Retention Periods

Each online reservation is stored together with the IP address and browser identifier (User-Agent) — collected automatically for anti-spam and abuse-prevention purposes (Art. 6(1)(f) GDPR — legitimate interest).

• Reservation form data (incl. IP + User-Agent) — up to 30 days after reservation, then automatically deleted.
• Email correspondence — duration of correspondence + 12 months.
• Invoices / accounting — 5 years (Polish Tax Ordinance).
• Server logs — up to 12 months.

6. Your Rights (GDPR Articles 15–22)

• Right of access, rectification, erasure ("right to be forgotten").
• Right to restriction, data portability, objection.
• Right to withdraw consent at any time.
• Right to lodge a complaint with the Polish Data Protection Authority (UODO, uodo.gov.pl).

To exercise your rights, contact us at restauracjaemilio@gmail.com. We respond within 30 days.

7. Cookies

Our website uses cookies. See our Cookie Policy or open Cookie settings.

8. Authoritative version

This is a summary in English for international guests. The legally authoritative version is the Polish original at polityka-prywatnosci. In case of discrepancies between language versions, the Polish version prevails.