Privacy policy

1. Data controller

The controller of your data is Żar Gastronomia sp. z o.o., ul. Przykładowa 1, 80-000 Gdańsk, NIP (tax ID) 000-000-00-00. For data protection matters write to stolik@zar.test or call +48 58 000 00 00.

2. What data we collect

• Booking request: date and time of the visit, number of people, name, phone, e-mail and — if you give them — the occasion and notes.
• Group enquiry: the same data plus the type of event, the chosen set menu and — if you need an invoice — company name and tax ID.

We do not ask for marketing consent and we do not send newsletters. The site has no user accounts.

3. Purposes and legal bases

• Handling your booking request or group enquiry — Article 6(1)(b) GDPR (steps taken at your request before a contract).
• Issuing invoices and keeping accounting records — Article 6(1)(c) GDPR (legal obligation).
• Protecting the forms from abuse (a limit on submissions from one device) — Article 6(1)(f) GDPR (our legitimate interest).

4. Allergy information

Allergy information is health data. Mention it in the notes only if the kitchen needs to prepare in advance — otherwise your waiter will ask at the table. If you write it in the notes, we use it only to prepare your meal safely, based on your explicit consent (Article 9(2)(a) GDPR). You can withdraw consent at any time by writing to stolik@zar.test.

5. How long we keep data

• Booking requests and group enquiries reach us by e-mail. We delete them [example: 30 days] after the visit or after the enquiry is declined.
• Invoice data is kept for 5 years from the end of the year in which the invoice was issued, as tax law requires.
• The site keeps form data for 20 minutes only to show you a summary after sending. It does not store it in a booking database.
• For the submission limit the site keeps a hash of your IP address (not the address itself) for 1 hour.

6. Who receives data

Companies that host the website and our e-mail [example: a hosting provider based in Poland] may process data on our behalf under a data processing agreement. Our accountants receive invoice data. We do not sell data and do not transfer it outside the European Economic Area.

7. Your rights

You have the right to access, correct, delete and move your data, to restrict its processing, and to object to processing based on legitimate interest. Write to stolik@zar.test. You can also complain to the Polish data protection authority, Prezes Urzędu Ochrony Danych Osobowych (ul. Stawki 2, 00-193 Warszawa).

8. Cookies and external services

• We do not use analytics or advertising cookies, so the site shows no consent banner.
• Fonts load from our own server, and the map on the site is a static image from OpenStreetMap.
• The interactive Google map loads only after you click “Show interactive map”. Google may then set cookies under its own rules.
• Review links and “Get directions” open Google Maps or TripAdvisor in a new tab. These services have their own privacy policies.