Privacy policy

Privacy Policy and Cookie Policy

Last updated: 12.05.2026

This document explains how personal data is processed on the website, how cookies and similar technologies are used, and how website users can manage their privacy choices.

1. Data controller

The controller of personal data processed through this website is assumed to be Bar Przy Potoku, using the public contact details available on the website.

2. Scope of processed data

Depending on how you use the website, we may process the following categories of data:

  • contact data provided in forms, such as name, email address, phone number, and message content,
  • reservation or order data, including booking details, address, pickup preferences, and optional notes,
  • technical data necessary to operate the website, such as IP address, session identifiers, browser information, and security logs,
  • analytics data collected only if you consent to analytics technologies, including a pseudonymous visitor identifier and approximate location used for traffic statistics,
  • preferences saved on your device, including language settings and cookie choices.

3. Purposes, legal bases, and retention

Purpose
Legal basis
Retention
Handling contact requests and replying to inquiries
Art. 6(1)(f) GDPR or Art. 6(1)(b) GDPR when the inquiry concerns a future contract
For the time needed to handle the inquiry, then until limitation periods for claims expire
Processing reservations and food orders
Art. 6(1)(b) GDPR
For the period necessary to complete the service and settle claims or accounting obligations
Ensuring website security, preventing abuse, and keeping server/session logs
Art. 6(1)(f) GDPR
For the period required for security, diagnostics, and defense against claims
Analytics of visits, approximate geolocation, and traffic measurement
Art. 6(1)(a) GDPR together with cookie consent rules
Until consent is withdrawn or the configured analytics retention period expires
Remembering language choice and privacy settings
Necessary cookies: legitimate interest and proper service delivery; optional settings: consent
Up to 180 days or until deleted by the user

4. Cookies and similar technologies

The website uses cookies, browser storage, and similar technologies in accordance with GDPR and Polish cookie consent requirements. Optional technologies are activated only after a clear user choice.

  • Necessary: session cookies, CSRF protection, cart state, reservation or order confirmation cookies, and language settings.
  • Functional: embedded Google Maps loaded only after consent in order to display the location panel.
  • Analytics: a pseudonymous visitor identifier stored in browser storage and traffic records sent to the website backend only after consent.
  • Marketing: reserved for future advertising tools and currently kept inactive unless such tools are added and you opt in.

You can withdraw or change your consent at any time using the control available in the website footer.

5. Recipients of data

Data may be shared with hosting providers, IT administrators, email service providers, payment or ordering support providers if activated, and with public authorities where required by law.

The website may also rely on Google services, in particular Google Maps embeds and Google business profile integrations, if these components are enabled and your preferences allow them.

6. International transfers

Some providers may process data outside the European Economic Area, especially global cloud or Google services. In such cases, transfers should rely on appropriate safeguards, such as the European Commission standard contractual clauses or another lawful transfer mechanism used by the provider.

7. Your rights

You have the right to access your data, rectify it, erase it, restrict processing, object where processing is based on legitimate interest, transfer data where applicable, and withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

8. Contact and complaints

Questions regarding privacy can be sent to example@restaurant.com or by post to Cystersów 19B, 80-330 Gdańsk.

You also have the right to lodge a complaint with the President of the Personal Data Protection Office in Poland (UODO) if you believe your personal data is processed unlawfully.

9. Policy updates

The policy may be updated whenever the website functionality, legal basis, or service providers change. The current version is always published on this page.

Open the location in Google Maps