Privacy policy

DemoDraft version. The client reviews the text before publication and the company details still need to be filled in.

1. 01

   Data controller

   The data controller is the company listed under Company details at the bottom of this page. For any questions about your data, write to the email address given there.

   We process personal data in accordance with the General Data Protection Regulation (Regulation (EU) 2016/679, GDPR) and the Croatian Act on the Implementation of the GDPR.

2. 02

   What we collect and why

   Reservations and enquiries: name, email, phone, date, time, number of guests, occasion and note. We use them only to process your booking and reply to your enquiry. The legal basis is taking steps at your request before entering into a contract (Art. 6(1)(b) GDPR).

   Job applications: name, contact details, CV and message. We use them only to select candidates. The legal basis is steps prior to an employment contract and, for open applications, your consent (Art. 6(1)(a) and (b) GDPR).

   If you contact us by phone or email, we use the details you send only to reply.

   We do not ask for special categories of data. If you mention allergies or dietary requirements in a note, we use them only to prepare for your visit.

3. 03

   How long we keep data

   We keep reservation data for no longer than 12 months after the date of your visit, then delete it.

   We keep job applications for no longer than 12 months, unless you agree to a longer period.

   We keep email correspondence as long as needed to reply or as required by law.

4. 04

   Who else processes data

   We do not sell your data or share it for marketing. To run the website we use processors: Cloudflare (web hosting), Resend (sending form emails) and the restaurant's email provider.

   Some processors are located in the USA. Transfers are based on the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.

5. 05

   Cookies and browser storage

   We do not use advertising cookies, and Google Analytics cookies are set only if you agree. We only use a “lang” cookie that remembers your language (12 months) and browser storage that remembers you have seen the intro animation (until you close the browser).

   Visit statistics: we count page views and clicks (e.g. on call, booking or the price list) to improve the website. We use no cookies, do not store IP addresses and do not track you across days: a visitor is distinguished only within a single day, using a one-way hash that changes daily. The data is kept on Cloudflare (EU/US) and is not linked to your name. The legal basis is legitimate interest (Art. 6(1)(f) GDPR). If your browser sends a “Do Not Track” signal (GPC/DNT), nothing is recorded.

   Google Analytics (Google Ireland Ltd.): only if you click “Accept” in the cookie bar, Google Analytics 4 is loaded. It sets the “_ga” and “_ga_*” cookies (up to 24 months) and records which pages you view, on which device and where you came from. Google may transfer data to the USA under the EU-US Data Privacy Framework. The legal basis is your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time via the “Cookie settings” link in the footer. If you decline, Google Analytics is not loaded.

   The Google Maps map loads only after you click “Show map”. Google may then set its own cookies under its own privacy policy. Instagram links lead to external websites.

   The forms on this site are protected by Cloudflare Turnstile, which checks that a person and not a robot is sending the request. Cloudflare processes your IP address and technical browser data solely to prevent abuse.

6. 06

   Your rights

   You have the right to access, rectify and erase your data, to restrict processing, to data portability and to object. You can withdraw consent at any time, without affecting the lawfulness of processing before withdrawal.

   Send your request by email. We will reply within one month.

7. 07

   Complaints to the supervisory authority

   If you believe your data is processed unlawfully, you can lodge a complaint with the Croatian Personal Data Protection Agency (AZOP), Selska cesta 136, 10000 Zagreb, azop@azop.hr, www.azop.hr.

8. 08

   Changes

   We update this policy when the way we process data changes. The date of the last update is shown at the top of the page.