This policy describes how Bosfor & Bałtyk (PALAS RESTAURANT Sp. z o.o.) collects, uses and protects your personal data — in accordance with the European Parliament Regulation (GDPR) and the Polish Act on Personal Data Protection.
1. Who is your data controller
The controller of your personal data is PALAS RESTAURANT Sp. z o.o., Aleja Grunwaldzka 76/78, 80-244 Gdańsk, KRS: 0001174340, NIP: 9571188415, REGON: 540823890.
We collect only those data that are necessary to perform a specific service or purpose. Specifically:
Table reservation / kontakt — name and surname, phone number, email address, number of guests, possible notes (e.g. diet, birthday).
Formularz kontaktowy — name and surname, email address, phone number (optional), message content.
Zapisy do newslettera — adres e-mail.
Corporate orders / invoices — dane firmy (nazwa, adres, NIP) potrzebne do wystawienia faktury VAT.
Dane techniczne — anonymous IP address, browser type, operating system, visit time, traffic source (Google, social media). Only if you consent to analytical cookies.
3. For what purpose and on what basis we process data
Cel
Podstawa prawna (RODO)
Table reservation, obsługa zamówienia
Art. 6 ust. 1 lit. b — wykonanie umowy
Answering contact form inquiries
Art. 6 ust. 1 lit. f — uzasadniony interes
Newsletter, marketing
Art. 6(1)(a) — consent (you can withdraw at any time)
Invoices, bookkeeping
Art. 6(1)(c) — legal obligation
Analityka strony (Google Analytics)
Art. 6 ust. 1 lit. a — zgoda na pliki cookies
Reklamy (Meta Pixel, Google Ads)
Art. 6 ust. 1 lit. a — zgoda na pliki cookies marketingowe
4. Who we share your data with
We never sell your data. We can only transfer it to:
IT and hosting service providers — Hostinger International Ltd. (hosting strony, e-mail).
Providers of marketing and analytical tools — Google LLC (Google Analytics, Google Tag Manager, Google Workspace for email), Meta Platforms Ireland Ltd. (Meta Pixel) — only when you consent.
Payment / reservation system providers — when we launch online reservation or orders.
State bodies — when it results from the law (e.g. tax office, law enforcement agencies in case of a justified request).
5. Cookies and similar technologies
The website uses cookies — detailed information can be found in the Polityce cookies. Pierwszy raz odwiedzając stronę zobaczysz baner cookies, w którym możesz zaakceptować lub odrzucić poszczególne kategorie. Swoją decyzję możesz w każdej chwili zmienić, klikając „Cookie settings" w stopce.
6. Transfer of data outside the EEA
Some of our providers (Google, Meta) are based outside the European Economic Area (USA). We transfer data to them solely on the basis of Standard Contractual Clauses approved by the European Commission and the Data Privacy Framework mechanism.
7. How long we store data
Dane rezerwacji — up to 12 months after the visit (or shorter if you request it).
Dane z formularza kontaktowego — up to 6 months after the resolution of the matter.
Address e-mail w newsletterze — until you unsubscribe.
Faktury — 5 years from the end of the tax year (statutory obligation).
Dane analityczne (Google Analytics) — up to 14 months.
8. Your rights
Na podstawie RODO masz prawo do:
Access to your data and receiving their copy.
Sprostowania rectification of incorrect data.
Erasure danych („prawo do bycia zapomnianym").
Ograniczenia przetwarzania.
Przenoszenia danych do innego administratora.
Sprzeciwu to processing (especially for marketing purposes).
Withdrawal of consent w dowolnym momencie (np. wypisanie z newslettera, odrzucenie cookies).
Wniesienia skargi to the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, Poland, uodo.gov.pl.
9. Contact regarding GDPR
Please address any questions, requests and objections regarding your personal data to kontakt@bosforbaltyk.com. We reply within 30 days (usually much faster).
10. Changes to the policy
The policy may be updated due to changes in the law or our services. The current version is always available on this page. The date of the last update is at the end.