Privacy Policy for The Bhansa Restaurant

At The Bhansa Restaurant, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our restaurant, use our website, or engage with our services.

1. Information We Collect

We may collect the following types of information:

1.1 Personal Information

  • Name and contact details (email address, phone number)
  • Delivery address (for food delivery services)
  • Payment information (processed securely through payment providers)
  • Reservation details and dining preferences
  • Dietary requirements and allergies

1.2 Automatically Collected Information

  • IP address and browser type
  • Device information and operating system
  • Pages visited and time spent on our website
  • Referring website addresses
  • Location data (with your consent)

2. How We Use Your Information

We use the collected information for the following purposes:

  • Processing and fulfilling your orders and reservations
  • Communicating with you about your orders and bookings
  • Sending promotional offers and updates (with your consent)
  • Improving our services and menu offerings
  • Analyzing website usage to enhance user experience
  • Complying with legal obligations
  • Preventing fraud and ensuring security

3. Legal Basis for Processing (GDPR)

We process your personal data based on:

  • Contract: To fulfill orders and reservations
  • Consent: For marketing communications and cookies
  • Legitimate Interests: To improve our services and prevent fraud
  • Legal Obligations: To comply with applicable laws

4. Data Sharing and Disclosure

We may share your information with:

  • Payment processors to handle transactions securely
  • Delivery partners for food delivery services
  • Email service providers for communication purposes
  • Analytics providers to improve our services
  • Legal authorities when required by law

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

5. Your Rights Under GDPR

As an EU resident, you have the following rights:

  • Right to Access: Request a copy of your personal data
  • Right to Rectification: Request correction of inaccurate data
  • Right to Erasure: Request deletion of your data
  • Right to Restrict Processing: Limit how we use your data
  • Right to Data Portability: Receive your data in a portable format
  • Right to Object: Object to certain types of processing
  • Right to Withdraw Consent: Withdraw consent at any time

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

  • SSL encryption for data transmission
  • Secure storage of personal information
  • Limited access to personal data by authorized personnel
  • Regular security assessments and updates

7. Cookies Policy

Our website uses cookies to enhance your browsing experience. Types of cookies we use:

  • Essential Cookies: Required for website functionality
  • Analytics Cookies: Help us understand website usage
  • Marketing Cookies: Used to deliver relevant advertisements
  • Preference Cookies: Remember your settings and preferences

You can manage cookie preferences through your browser settings or our cookie consent banner.

8. Data Retention

We retain your personal information for as long as necessary to:

  • Provide our services and fulfill orders
  • Comply with legal obligations
  • Resolve disputes and enforce agreements
  • Maintain business records for tax purposes (typically 7 years)

9. Children's Privacy

Our services are not directed to individuals under 16 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child under 16, we will take steps to delete such information.

10. International Data Transfers

Your information may be transferred to and processed in countries other than Poland. We ensure appropriate safeguards are in place to protect your data in accordance with this privacy policy and applicable data protection laws.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last Updated" date. We encourage you to review this policy periodically.

12. Contact Information

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us:

The Bhansa Restaurant
Data Protection Officer
Email: [email protected]
Phone: +48 739 566 577
Address: al. Jana Pawła II 18/B, 00-116 Warszawa, Poland

You also have the right to lodge a complaint with the Polish Data Protection Authority (Urząd Ochrony Danych Osobowych) if you believe your data protection rights have been violated.

Last Updated: July 16, 2025
Effective Date: January 1, 2024