Privacy Policy

1. Data controller

The controller of personal data is Rzeźnicza 32 Sp. z o.o., Rzeźnicza 32-33, 50-130 Wrocław, NIP: 8971933394, REGON: 527683726 (the "Controller").

Contact for data matters: biuro@r32.com.pl, tel. +48 515 126 260.

2. Scope, purposes and legal bases of processing

• Table reservations (name, phone, email, reservation details) - to take and handle the reservation. Basis: Art. 6(1)(b) GDPR.
• Contact (data provided in a message or call) - to respond to an enquiry. Basis: Art. 6(1)(f) GDPR.
• Corporate events (contact person and company data) - to handle the enquiry and prepare an offer. Basis: Art. 6(1)(b) and (f) GDPR.
• Recruitment (CV data) - to run the recruitment process. Basis: Art. 6(1)(a) and (b) GDPR.
• Accounting and tax obligations - to the extent required by law. Basis: Art. 6(1)(c) GDPR.
• Establishing or defending claims. Basis: Art. 6(1)(f) GDPR.
• Video monitoring (CCTV) on the premises - to ensure the safety of people and property. Basis: Art. 6(1)(f) GDPR.
• Browser storage and analytics - see the Cookie Policy. The site stores notice and consent decisions, essential form and navigation state and, after consent, PostHog analytics identifiers (visit statistics and session recordings; legal basis: consent - Art. 6(1)(a) GDPR; anonymous statistics with no browser storage: legitimate interest - Art. 6(1)(f) GDPR).

3. Data recipients

Data may be entrusted to or shared with:

• the online reservation system provider;
• hosting and site-maintenance providers and form providers;
• IT, accounting and legal service providers;
• entities authorised under the law.

4. Retention period

• reservation and event-enquiry data - for as long as needed to handle them and until claims become time-barred;
• accounting data - for the period required by tax law (as a rule 5 years);
• correspondence - until the matter is closed and claims become time-barred;
• recruitment data - until the end of recruitment, or until consent is withdrawn;
• CCTV recordings - for no longer than 3 months, unless a recording is evidence in proceedings.

5. Rights of data subjects

You have the right to:

• access your data and obtain a copy;
• rectify (correct) your data;
• erase your data;
• restrict processing;
• data portability;
• object to processing based on legitimate interest;
• withdraw consent at any time (without affecting the lawfulness of processing before withdrawal).

6. Right to lodge a complaint

You have the right to lodge a complaint with the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw) if you believe the processing infringes the GDPR.

7. Voluntary provision of data

Providing data is voluntary but necessary to make a reservation, handle an event enquiry, obtain a response or take part in recruitment. Not providing it makes those purposes impossible.

8. Profiling and transfers outside the EEA

Data is not used for automated decision-making or profiling with legal effects. Any transfer outside the European Economic Area will take place only with the appropriate safeguards required by the GDPR.

9. Changes to the policy

The Controller may update this Policy. The current version is always available on the site.