Privacy Policy

Privacy Policy

I. General Provisions

This Privacy Policy specifies how Users’ personal data required for the provision of electronic services via the website www.wodnikrestauracja.pl (hereinafter referred to as the Website) is collected, processed, and stored.
The Website collects only the personal data necessary for the provision and development of the services offered therein.
Personal data collected through the Website are processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter referred to as the GDPR) and the Personal Data Protection Act of 10 May 2018.

II. Data Controller

The controller of personal data collected via the Website is Restauracja Wodnik SeMiLi Sebastian Kamiński, address: Przystanowa 2, 85-436 Bydgoszcz, NIP: 9671289073, REGON: 369385439, e-mail address: biuro@wodnikrestauracja.pl (hereinafter referred to as the Controller).

III. Purpose of collecting personal data

Personal data is used for the following purposes:

performance of a contract or taking action at the request of the data subject before entering into a contract (legal basis: Article 6 paragraph 1 letter b of the GDPR),
handling inquiries (Article 6 paragraph 1 letter f of the GDPR),
handling complaints (Article 6 paragraph 1 letter b of the GDPR),
keeping documentation and fulfilling the legal obligations incumbent on the Controller (Article 6 paragraph 1 letter c of the GDPR),
sending the newsletter (Article 6 paragraph 1 letter a of the GDPR),
monitoring and improving the quality of services provided – asking to complete a survey or answering several questions about the quality of services provided (Article 6 paragraph 1 letter f of the GDPR),
displaying personalized commercial information on social networks (Article 6 paragraph 1 letter a of the GDPR).
Providing data is voluntary, but necessary to conclude a contract or use other functionalities of the Website.

IV. Type of personal data processed

The Administrator may process the User’s personal data: name and surname, date of birth, address, email address, telephone number, and Tax Identification Number.

V. Personal Data Processing Period

If a person has consented to data processing (legal basis: Art. 6, Section 1, Item a of the GDPR), the data is processed until the consent is withdrawn. However, after this period, information about who, when, and what consent was granted may be archived (for the purpose of establishing, pursuing, or defending legal claims).
In other cases, the data is processed for a period justified by the purpose (e.g., contract execution, answering questions, tax regulations, warranty and guarantee services, fulfillment of obligations arising from legal provisions, until the statute of limitations for potential claims, etc.).
The processing period depends on the possibility of establishing, pursuing, or defending claims or when data retention is required due to tax regulations.

VI. Sharing Personal Data

Personal data may be shared with entities providing services to the Controller and cooperating with it, including:
entities carrying out the sales process,
law firms,
entities providing IT, marketing, electronic communications, and teleinformatic services to the Administrator.
The Administrator reserves the right to disclose selected information to competent authorities or third parties who submit a request for such information based on an appropriate legal basis and in accordance with applicable law.

VII. User Rights

A Website User has the right to: access their personal data, rectify it, erase it, restrict its processing, transfer it, object to its processing, and withdraw consent at any time (which does not affect the lawfulness of processing based on consent before its withdrawal).
A notification of a User’s exercise of the rights arising from the above rights should be sent to biuro@wodnikrestauracja.pl.
The Administrator will comply or refuse to comply with the request immediately – no later than one month from its receipt.
The User has the right to file a complaint with the President of the Personal Data Protection Office if they believe that the processing violates their rights and freedoms (GDPR).

VIII. Cookies

The Website collects information using cookies – session, persistent, and third-party.
Cookie collection supports the proper provision of services on the Website and is used for statistical purposes. Users can specify the scope of cookie access to their device in their browser settings.
IX. Automated Decision-Making and Profiling
The Administrator automatically processes personal data and performs profiling, including monitoring and collecting information about website activity, for the purpose of assessing, in particular, the analysis or forecasting of personal preferences and interests.

X. Final Provisions

The Administrator reserves the right to make changes to the Privacy Policy, but Users’ rights will not be limited. Information about any changes will be published in a notice on the Website. In matters not covered by this Privacy Policy, the provisions of the GDPR and Polish law apply.