1. Introduction
common.restaurant_name ("we", "us") is responsible for the processing of your personal data as described in this privacy policy. We are committed to protecting your privacy and handling your data in accordance with the EU General Data Protection Regulation (GDPR) and Swedish law.
2. Data We Collect
We may collect the following personal data:
- Name and email address — when you make a reservation, subscribe to our newsletter, or contact us.
- Phone number — when you provide it for reservation confirmations.
- Reservation details — date, time, party size, and any special requests.
- Messages — content you submit through our contact form.
- Technical data — IP address, browser type, and pages visited (via cookies and server logs).
3. How We Use Your Data
- To process and manage your table reservations.
- To send our newsletter if you have subscribed (you can unsubscribe at any time).
- To respond to your inquiries via the contact form.
- To improve our website and services.
- To comply with legal obligations (e.g. accounting).
4. Legal Basis
We process your data based on: (a) your consent (e.g. newsletter subscription), (b) performance of a contract (e.g. table reservation), or (c) our legitimate interest in operating and improving our restaurant services.
6. Data Sharing
We do not sell your personal data. We may share your data with trusted service providers who assist us (e.g. email delivery for newsletters), and only to the extent necessary for them to perform their services. All such providers are bound by data processing agreements.
7. Data Retention
We retain your personal data only for as long as necessary for the purposes described above. Reservation data is kept for up to 24 months. Newsletter subscriber data is kept until you unsubscribe. Contact form messages are deleted after 12 months.
8. Your Rights
Under GDPR, you have the right to:
- Access the personal data we hold about you.
- Request correction of inaccurate data.
- Request deletion of your data ("right to be forgotten").
- Request restriction of processing.
- Data portability — receive your data in a structured format.
- Object to processing based on legitimate interest.
- Withdraw consent at any time (without affecting prior processing).
To exercise any of these rights, contact us at millennium9816@gmail.com.