Privacy policy

How we process personal data in connection with this website.

Last updated: 6.11.2026

1. Data controller

The controller of personal data processed in connection with your use of [WEBSITE ADDRESS] is [FULL COMPANY NAME], with its registered office at [ADDRESS], tax ID (NIP) [NIP] (the “Controller”).

Contact for data protection matters: [E-MAIL], tel. [PHONE].

2. What data we process and why

This website is informational only (a business card for the venue). It has no forms, user accounts, comments or online shop.

Technical data (server logs)

When you visit the website, the server that hosts it automatically processes technical data, in particular your IP address, the date and time of the request, the address of the page visited, information about your browser and operating system, and the server response code.

  • Purpose: displaying the website, keeping it secure and stable, and detecting abuse.
  • Legal basis: Article 6(1)(f) GDPR (the Controller’s legitimate interest in the proper and secure operation of the website).
  • Retention: for as long as necessary for these purposes, in line with the practices of the hosting provider.

Contacting us

If you send us an e-mail or call us, we process the data you provide (for example your name, e-mail address, phone number and the content of your message) in order to reply and handle your request.

  • Legal basis: Article 6(1)(f) GDPR (our legitimate interest in communicating with people who contact us), or Article 6(1)(b) GDPR where your message concerns entering into or performing a contract.
  • Retention: until your request has been handled and, where necessary, for the limitation period of potential claims.

3. Cookies and tracking tools

This website does not use cookies, analytics tools, advertising tools or tracking pixels, so it does not show a cookie consent banner. Fonts are hosted locally, and the map and our social media profiles are provided only as ordinary links.

4. Recipients of data

Your data may be entrusted to our service providers, who process it only on our behalf under data processing agreements (Article 28 GDPR):

  • Cloudflare – website hosting and content delivery network (CDN);
  • Google – e-mail (Google Workspace).

Data may also be disclosed to public authorities where required by law.

5. Transfers outside the European Economic Area

These providers may process data in the United States. Transfers are based on the European Commission’s adequacy decision (the EU-U.S. Data Privacy Framework) for certified companies, and on standard contractual clauses included in the data processing agreements. You can obtain information about the safeguards in place by contacting us.

The website contains links to external services (for example Facebook, Instagram, Google Maps and Google reviews). No data is passed to these services unless you click a link. Once you visit their pages, their own privacy policies apply, and the Controller has no influence over them.

7. Your rights

You have the right to:

  • access your data,
  • have it rectified,
  • have it erased,
  • restrict its processing,
  • object to processing based on the Controller’s legitimate interest,
  • data portability (where applicable).

To exercise these rights, write to [E-MAIL].

You also have the right to lodge a complaint with a supervisory authority. In Poland this is the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw. You may also contact the authority in your own EU country.

8. Providing data and automated decisions

Providing data in a message to us is voluntary, but we need it in order to reply. Technical data from server logs is processed automatically and is necessary to display the website. We do not make automated decisions about you and we do not carry out profiling.

9. Changes to this policy

We may update this policy, for example when the way the website works or the law changes. The current version is always available on this page, and the date of the last update is shown at the top.