Privacy policy

Data controller

The controller of personal data is Karol Michalak, conducting business under the name Miłość na Talerzu Karol Michalak, with registered address: Osiedle Konstytucji 3 Maja 1A, 64-000 Kościan, Poland, Tax ID: 6981871624, REGON: 542688330.

For matters concerning personal data, you can contact us by e-mail: miloscnatalerzu@onet.pl.

Scope of data

The website does not have a contact form, user accounts, newsletter, online reservations or online ordering.

If you contact us by phone or e-mail, we may process data that you provide yourself, such as your name, e-mail address, phone number, message content, order information or delivery address provided outside the website.

Purposes and legal grounds

Personal data may be processed for the following purposes and on the following legal grounds:

• handling phone and e-mail enquiries — legitimate interest of the Controller, Article 6(1)(f) GDPR
• confirming order, pickup or delivery details — taking steps before entering into a contract or performing a contract, Article 6(1)(b) GDPR
• maintaining correspondence and resolving matters — legitimate interest of the Controller, Article 6(1)(f) GDPR
• fulfilling legal, accounting and tax obligations if they arise outside the website — legal obligation of the Controller, Article 6(1)(c) GDPR
• establishing, pursuing or defending possible claims — legitimate interest of the Controller, Article 6(1)(f) GDPR
• ensuring website security and proper operation — legitimate interest of the Controller, Article 6(1)(f) GDPR

Retention period

Data from e-mail or phone contact is kept for the time needed to handle the matter and then for the period required by law or until possible claims expire.

Accounting data, if created outside the website, is kept for the period required by tax and accounting regulations.

Recipients of data

Data may be accessed by the Controller and persons authorised by the Controller, in particular restaurant employees or collaborators, if this is necessary to handle contact, an order, pickup or delivery.

Data may also be processed by technical service providers, in particular hosting provider home.pl, the e-mail provider and entities supporting legal, accounting or IT services if needed.

After clicking a link to Google Maps, you move to an external Google service that operates under its own privacy rules.

Server logs

The website server may store technical visit logs. Logs may include, among other things, IP address, date and time of visit, URL, server response code, browser type, operating system, referrer and other technical connection data.

Logs are used for security, error diagnostics and proper website operation. The detailed retention period depends on the home.pl hosting configuration.

Transfers outside the EEA

The website itself does not load external analytics or marketing tools and does not embed Google Maps as an iframe. You move to Google Maps only after clicking a link leading to the map.

After clicking a Google Maps link, data may be processed by Google, including outside the European Economic Area, according to the rules of that service.

For hosting and e-mail, processing details depend on the providers of those services.

User rights

To exercise the rights listed below, you can contact the Controller by e-mail: miloscnatalerzu@onet.pl.

• right of access to data
• right to rectify data
• right to erase data
• right to restrict processing
• right to object
• right to data portability, where applicable

The data subject also has the right to lodge a complaint with the President of the Personal Data Protection Office in Poland if they believe that their data is processed unlawfully. More information is available at uodo.gov.pl.

No profiling

The website does not profile users and does not make automated decisions about them.

Voluntary provision of data

Providing personal data is voluntary, but it may be necessary to handle an enquiry, contact, a phone or e-mail order, pickup or delivery.

Changes to the privacy policy

This privacy policy may be updated if the website operation, scope of services, tools used or applicable laws change. The current version of the policy is always available on this page.