Orzo

Privacy policy

Document in preparation. Below is the scope that must be completed before the site goes live.

  • Data controller — which company, and for which data. The restaurants are run by five separate entities, so the controller role must be set out separately for the online shop, table bookings and the newsletter.
  • Legal basis and purposes of processing — table bookings, event enquiries, newsletter, online sales, vouchers.
  • Recipients of personal data — MojStolik, Shopify, the payment provider, the email marketing tool.
  • Retention periods, data subject rights, contact details for requests.
  • Cookies and analytics tools.

Until then, the companies' registration details are available on the Documents and company details page.