Zum Inhalt springen
PanDa Sushi & Ramen
de
Online bestellenBestellen

Królowej Jadwigi 2B, 76-200 SłupskDi–Sa 13:00–21:00 · So 13:00–20:00

PanDa Sushi & Ramen

Datenschutzerklärung

Verbindlich ist die polnische Fassung der Datenschutzerklärung.

This policy is based on the platform template, with the controller's details provided by the Venue. It explains what personal data we collect through this website and related services, why, and what your rights are (GDPR).

1. Data controller

  1. The controller of your personal data is Patryk Kozieł, Królowej Jadwigi 2B, 76-200 Słupsk, tax ID (NIP) 8393231662, operating the venue PanDa Sushi & Ramen (the “Venue”, “we”).
  2. For personal data matters, email pandasushi.slupsk@gmail.com or call +48 787 787 926.

2. What data, why and on what legal basis

  1. Orders: first name, phone number, optionally email address, order contents and notes, and optionally a tax ID for the sales document — to accept, prepare and hand over the order, contact you about it and keep you informed of its status (Art. 6(1)(b) GDPR — contract).
  2. Table reservation: name, phone number, email address, date, party size and notes — to accept and handle the reservation and send a confirmation (Art. 6(1)(b) GDPR — contract).
  3. App account: phone number verified by SMS code, first name, optionally email address, and session data — to run your account and sign you in (Art. 6(1)(b) GDPR — contract) and to protect the account against unauthorised access (Art. 6(1)(f) GDPR — legitimate interest).
  4. App notifications: a device notification ID — to inform you about your order status, based on your consent (Art. 6(1)(a) GDPR), which you can withdraw in the app or phone settings.
  5. Contact and complaints: the data you provide in a message or complaint — to reply and handle the complaint (Art. 6(1)(b) and (c) GDPR).
  6. Sales documents: data on receipts or invoices — to issue and keep them as required by tax law (Art. 6(1)(c) GDPR — legal obligation).
  7. Claims: data related to an order or reservation — to establish, pursue or defend claims (Art. 6(1)(f) GDPR — legitimate interest).
  8. Providing data is voluntary, but without the data marked as required we cannot accept an order or reservation.
  9. We do not make decisions about you based solely on automated processing, including profiling.

3. Who we share data with

  1. The provider of the website, ordering, reservation and app software (the Pure Alpha platform) — as a processor acting on our behalf under a data processing agreement.
  2. The software provider's subprocessors: Amazon Web Services (servers and databases in the Frankfurt data centre, sending emails and text messages) and Cloudflare (delivering and protecting the website).
  3. Apple and Google notification services — for app notifications.
  4. Our accounting office — for sales documents.
  5. Public authorities — only where required by law.
  6. Some providers (e.g. Cloudflare, Apple, Google) may process data outside the European Economic Area, including in the USA, under a European Commission adequacy decision (EU-US Data Privacy Framework) or standard contractual clauses. We will share information about these safeguards on request.

4. How long we keep data

  1. Orders: 12 months from when the order was placed.
  2. Reservations: 24 months from the visit date; after that personal data is deleted and only anonymous statistics remain.
  3. App account: until you delete the account or 24 months after your last sign-in; the notification ID — until you sign out, turn notifications off or delete the account.
  4. Sales documents: 5 years from the end of the tax year, as required by tax law.
  5. Complaints and claims: until the limitation period expires.

5. Your rights

  1. You have the right to access your data and receive a copy, to rectification, erasure, restriction of processing, data portability, to object to processing based on legitimate interest, and to withdraw consent at any time (without affecting the lawfulness of processing before withdrawal).
  2. To exercise your rights, email pandasushi.slupsk@gmail.com. We will reply within one month.
  3. You can also delete your app account yourself in the app.
  4. You have the right to lodge a complaint with the Polish data protection authority, the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl).

6. Cookies and browser storage

  1. The website uses essential browser storage (technical cookies or local storage), for example to remember your language, basket contents and the status of your order. We do not use advertising cookies. You can delete this data in your browser settings; the website will then forget your settings.
  2. The website contains links to external services (e.g. maps, social media, app stores). Once you open them, those services' privacy policies apply.

7. Changes to this policy

  1. We update this policy when our services or the law change. The current version is always available on this page.