1. Personal data controller
The controller of your personal data is Kaszubski Młyn, ul. Młyńska 11, 84-113 Wierzchucino, Poland.
For matters regarding personal data protection, you can contact us by e-mail: restauracja.kaszubskimlyn@gmail.com.
2. Purpose and legal basis of processing
We process your personal data solely to respond to enquiries submitted through the contact form available on our website.
The legal basis for processing is your voluntary consent given before submitting the form — Article 6(1)(a) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR).
3. Scope of processed data
We process the data you provide in the contact form:
- first and last name,
- e-mail address,
- phone number (optional),
- subject of the enquiry,
- message content.
4. Data retention period
We store data for the time necessary to handle the enquiry, but no longer than 12 months from the date of receipt or until you withdraw your consent to data processing — whichever occurs first.
5. Your rights
In connection with the processing of your personal data, you have the following rights:
- Right of access — you can obtain information about what data we process about you.
- Right to rectification — you can request correction of inaccurate or completion of incomplete data.
- Right to erasure — you can request deletion of your personal data ("right to be forgotten").
- Right to restriction of processing — you can request restriction of data processing in specified cases.
- Right to withdraw consent — you can withdraw your consent to data processing at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal.
- Right to lodge a complaint — you have the right to file a complaint with the supervisory authority — the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, Poland.
To exercise the above rights, please contact us at: restauracja.kaszubskimlyn@gmail.com.
6. Data recipients
Data submitted via the form is transmitted over an encrypted HTTPS connection to our technical infrastructure (Cloudflare Workers) and onwards to the controller's e-mail address. We do not share personal data with third parties for commercial purposes.
7. Voluntary data provision
Providing personal data is voluntary, but necessary to respond to your enquiry. Refusal to consent to data processing will prevent the form from being submitted.
8. Changes to the privacy policy
This privacy policy may be updated. We will notify you of significant changes by publishing a new version on this page. Date of last update: .