Privacy Policy

1. Data Controller

The controller of your personal data is LOUNGE AND LUXURY SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ with its registered office at: ul. Warszawska 1/3, 06-400 Ciechanów, Poland, registered in the Register of Entrepreneurs of the National Court Register under KRS number: 0001236476, NIP: 5662043347, and REGON: 544558643.

In all matters regarding personal data protection, you can contact us via email at: namasteadmin.pl@gmail.com or by phone: 511984331.

2. Purposes and Legal Bases for Data Processing

Your personal data is processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) for the following purposes:

• Fulfilling online orders and delivery (Art. 6 par. 1 lit. b GDPR) – processing is necessary to perform the service contract and deliver food orders.
• Handling table reservations online (Art. 6 par. 1 lit. b GDPR) – to confirm and manage table reservations in our restaurant.
• Phone and email contact (Art. 6 par. 1 lit. f GDPR) – legitimate interest of the Controller consisting in responding to customer inquiries sent via contact forms.
• Fulfillment of legal obligations (Art. 6 par. 1 lit. c GDPR) – for accounting, tax, and invoicing purposes.
• Establishment, investigation, or defense against claims (Art. 6 par. 1 lit. f GDPR) – legitimate interest of the Controller to protect business and legal rights.

3. Types of Processed Data

We process personal data necessary for the specified purposes, including:

• First and last name
• Phone number
• Email address
• Delivery address (street name, house/flat number, postal code, city)
• Order details (shopping cart items, customer notes)
• IP address and system logs (collected automatically for security and analytical purposes)

4. Recipients of Personal Data

Your data may be shared with trusted third-party service providers acting on our behalf under data processing agreements:

• Hosting and cloud database providers (Vercel Inc., Supabase Inc.)
• Email notification delivery systems (Brevo / Sendinblue)
• Restaurant employees and delivery drivers
• Accounting offices and legal advisors (only as required by law)

5. Data Retention Period

Personal data will be stored for the following durations:

• Order and reservation data – for the period necessary to complete the service and the period required by tax laws (5 years from the end of the tax year).
• Contact details (forms) – until the inquiry is resolved and correspondence is closed.
• Data processed on the basis of legitimate interest – until a successful objection is lodged.

6. Rights of Data Subjects

You have the right to:

• Access your personal data and obtain a copy of it
• Rectify (correct) incorrect data
• Erase data ("right to be forgotten"), provided there are no other legal bases for processing
• Restrict the processing of data
• Transfer your data to another controller
• Object to data processing based on the Controller's legitimate interest
• Lodge a complaint with a supervisory authority – President of the Personal Data Protection Office (PUODO), ul. Stawki 2, 00-193 Warsaw, Poland.

7. Automated Decision-Making and Profiling

Your personal data will not be subjected to automated decision-making, including profiling, that produces legal effects or similarly affects you.