1. General Provisions
This Privacy Policy sets out the rules for processing and protecting personal data provided by Users in connection with the use of the Nat-Bistro website and services provided by the restaurant.
The data controller is BISTRONOMIA SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ with its registered office in Krakow (31-062), ul. Krakowska 34, Tax ID (NIP): 6762667303, Business Registry Number (REGON): 528397069.
2. Types of Data Processed
In connection with the use of our services, we may process the following data:
- Contact information: first name, last name, phone number, email address
- Technical data: IP address, browser type, operating system, device information
- Reservation data: date and time of reservation, number of guests, dietary preferences (if provided)
- Correspondence data: content of messages sent through the contact form or email
3. Purposes and Legal Bases for Processing
We process personal data for the following purposes:
- Processing table reservations - legal basis: performance of a contract (Art. 6(1)(b) GDPR)
- Responding to inquiries - legal basis: legitimate interest of the controller (Art. 6(1)(f) GDPR)
- Direct marketing - legal basis: legitimate interest of the controller (Art. 6(1)(f) GDPR) or consent (Art. 6(1)(a) GDPR)
- Fulfillment of legal obligations - legal basis: legal obligation (Art. 6(1)(c) GDPR), including issuing and storing accounting documents
- Service security - legal basis: legitimate interest of the controller (Art. 6(1)(f) GDPR)
4. Data Recipients
Personal data may be disclosed to the following categories of recipients:
- IT service providers and website hosting providers
- Reservation system providers (mojstolik.pl)
- Accounting firms and law offices
- Public authorities to the extent required by law
Data is not transferred to third countries or international organizations.
5. Data Retention Period
We store personal data for the period:
- Necessary to process reservations and periods required by law (e.g., 5 years for accounting documents)
- Until consent is withdrawn - in the case of processing based on consent
- Until an effective objection is raised - in the case of processing based on legitimate interest
6. Rights of Data Subjects
Under GDPR, you have the following rights:
- Right of access to your personal data (Art. 15 GDPR)
- Right to rectification of data (Art. 16 GDPR)
- Right to erasure "right to be forgotten" (Art. 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to object to processing (Art. 21 GDPR)
- Right to withdraw consent at any time (Art. 7(3) GDPR)
- Right to lodge a complaint with the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw, Poland)
7. Cookies and Tracking Technologies
Our website uses cookies for the purpose of:
- Ensuring proper functioning of the website
- Adapting website content to user preferences
- Conducting anonymous visit statistics
Cookies can be deleted or blocked at any time through appropriate browser settings. Detailed information is available in your browser settings.
8. Data Security
We implement appropriate technical and organizational measures to ensure the protection of processed data, in particular we secure data against unauthorized access, loss, damage or destruction.
9. Contact Regarding Personal Data
For matters concerning the processing of personal data and exercising your rights, please contact:
Nat Bistro
ul. Krakowska 34, 31-062 Kraków, Poland
Email: natbistro@gmail.com
Phone: +48 664 006 824
10. Changes to Privacy Policy
We reserve the right to make changes to this Privacy Policy. We will inform about any changes by posting the new version on the website.
Last updated: December 17, 2025