PRIVACY POLICY

I. General Information

1. The controller of personal data for users of this website is Ed Red Spółka z ograniczoną odpowiedzialnością, with its registered office in Kraków at ul. Rynek Główny 27, 31-010 Kraków, entered into the National Court Register under KRS number 0001188715, NIP 6762699958, REGON 542452024.
2. You may contact the controller by mail at the address above, by phone at +48 690 900 555, or by email at krakow@edred.pl.
3. This policy explains how we collect and process the personal data of visitors to our restaurant's website. Its purpose is to provide information regarding the controller, the types of data collected, the legal basis for processing, and user rights in accordance with GDPR regulations.

II. Scope of Data Collection

1. Our website does not feature a contact form or any other interface where users can input personal information. We do not collect any personal data directly from visitors.
2. Table reservations are handled by the external service MojStolik.pl. Providing personal data during the reservation process occurs directly within the MojStolik.pl system and is subject to that service's privacy policy.
3. Automatically collected data: IP address, device and browser information, cookies, pixel identifiers, and server logs. This data is recorded by servers and analytical/marketing tools (Google Analytics, Google Maps, Meta Pixel) to analyze traffic statistics, improve website performance, and conduct marketing activities.

III. Purposes and Legal Basis for Processing

1. Website traffic analysis and functionality improvements: We use Google Analytics and Google Maps to obtain visitor statistics and provide a location map. These scripts are only activated after consent for cookies is obtained, in accordance with the "consent first, tracking second" principle. The legal basis is user consent (Art. 6(1)(a) GDPR).
2. Marketing and content personalization: Using Meta Pixel and other marketing tools, we may display advertisements for our restaurant on social media platforms. Processing occurs only after consent for marketing cookies is granted (Art. 6(1)(a) GDPR). Users may withdraw their consent at any time via the Cookiebot banner settings.

IV. Data Recipients and Transfers Outside the EEA

1. Automatically collected data may be transferred to entities supporting the website infrastructure (e.g., hosting providers and the Webflow system), IT service providers, law firms, and entities providing analytical and marketing services—strictly on the basis of data processing agreements.
2. The use of Google Analytics, Google Maps, and Meta Pixel may involve transferring data to countries outside the European Economic Area (primarily the United States). Such transfers are based on standard contractual clauses approved by the European Commission, and service providers declare the application of appropriate safeguards.

V. Data Retention Period

1. We do not maintain a user database, nor do we collect personal data via forms. Statistical and marketing data are processed for periods consistent with tool settings (e.g., Google Analytics, 14 months by default) or until consent is withdrawn.

VI. User Rights

Every data subject has the right to:

1. access their data and receive a copy;
2. rectify (correct) their data;
3. erase their data (the right to be forgotten);
4. restrict processing;
5. object to data processing based on the controller's legitimate interests;
6. data portability to another controller;
7. withdraw consent at any time—withdrawal does not affect the lawfulness of processing performed prior to the withdrawal;
8. lodge a complaint with the President of the Personal Data Protection Office if they believe processing violates GDPR regulations.

VII. Cookies and Similar Technologies

1. The website uses cookies for proper operation, traffic analysis, and marketing activities. Cookies may originate from our website or from third-party providers (Google, Meta). We do not load analytical or marketing cookies without prior user consent.
2. During your first visit, we display a Cookiebot banner that allows you to manage your cookie preferences—you may accept all cookies, reject marketing cookies, or set individual preferences.
3. A detailed description of the cookies used, their retention periods, and third-party partners can be found in our separate cookie policy.

VIII. Data Security

1. We employ appropriate technical and organizational measures, such as SSL certification, regular software updates, and access controls, to ensure the security of personal data collected automatically.
2. Data transmitted via cookies is encrypted during transmission.

IX. Policy Changes

1. This privacy policy may be updated in response to changes in regulations or website functionality. The new version will be published in this same location.
2. Last updated: June 19, 2026.