Privacy & Cookies Policy

1. General Information

This Privacy and Cookies Policy sets out the rules for processing personal data of persons using the Ask For Alonzo website, available at https://www.askforalonzo.pl/, as well as persons making reservations, contacting Ask For Alonzo, or using the restaurant’s services.

The controller of personal data is:

ASK FOR ALONZO SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ
KRS: 0001142721
NIP: 5273142575
REGON: 540367521
Registered office address: ul. Juliusza Słowackiego 25, 20-461 Lublin, Poland

Hereinafter referred to as the “Controller” or “Ask For Alonzo”.

Ask For Alonzo conducts business activities including, in particular, gastronomy services, a restaurant, and a cocktail bar.

The Controller processes personal data in accordance with applicable laws, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council, known as the General Data Protection Regulation or GDPR.

2. What Personal Data We May Process

Depending on how you use the website or Ask For Alonzo services, we may process, in particular:

• first name and surname;
• email address;
• telephone number;
• reservation details;
• information provided when contacting Ask For Alonzo;
• data relating to purchased services, events, or benefits;
• data necessary to process payments;
• IP address;
• information about your device and internet browser;
• data relating to use of the website;
• data stored in cookies and similar technologies.

In the case of online payments, some data may be transferred to the payment operator to the extent necessary to complete and process the transaction.

3. Purposes of Processing Personal Data

Personal data may be processed for the following purposes:

• handling table reservations at the restaurant and cocktail bar;
• contacting persons making reservations or enquiries;
• providing gastronomy services and other services offered by Ask For Alonzo;
• organising events, business meetings, networking events, and other events organised by Ask For Alonzo;
• performing contracts and taking action at the request of a person before entering into a contract;
• processing online payments;
• issuing and storing accounting documents;
• fulfilling obligations arising from legal provisions;
• establishing, pursuing, and defending against claims;
• ensuring the security of the website and services;
• keeping statistics and analytics relating to use of the website;
• ensuring the proper operation of the website;
• conducting marketing activities, to the extent they are carried out in accordance with applicable regulations;
• sending commercial information or newsletters, where the user has provided the required consent;
• improving the quality of services, website functionality, and user experience.

4. Legal Bases for Processing

Personal data may be processed on the basis of:

• Article 6(1)(a) GDPR – the consent of the data subject;
• Article 6(1)(b) GDPR – processing necessary for the performance of a contract or to take steps before entering into a contract;
• Article 6(1)(c) GDPR – processing necessary to comply with a legal obligation imposed on the Controller;
• Article 6(1)(f) GDPR – the legitimate interests pursued by the Controller.

The Controller’s legitimate interests may include ensuring service security, protection against abuse, pursuing claims, defending against claims, service-related communication, and analysing and developing business activities.

5. Restaurant and Cocktail Bar Reservations

When a reservation is made, we may process the data necessary to accept, confirm, modify, or cancel the reservation, including first name and surname, telephone number, email address, and reservation information.

This data may also be used to contact the guest on matters directly related to the reservation.

Ask For Alonzo operates a restaurant and cocktail bar at Chmielna 71, Varso Tower, 00-801 Warsaw.

6. Online Payments – Przelewy24

If payment is made through Przelewy24, the data necessary to process the payment may be transferred to the payment operator.

The operator of the Przelewy24 system is PayPro S.A., with its registered office at ul. Pastelowa 8, 60-198 Poznań.

Przelewy24 states in its current terms that it is the controller of payers’ personal data in relation to processing data for the purpose of providing payment services. In connection with payment processing, the merchant may provide Przelewy24 with, among other things, an email address and, depending on the situation, also first name, surname, and address.

Accordingly, Przelewy24 is an independent controller of data in relation to its own purposes and activities connected with providing payment services.

Detailed information concerning data processing by Przelewy24 is available in the payment operator’s information documents.

7. Recipients of Personal Data

Personal data may be transferred to entities cooperating with the Controller where this is necessary to achieve specific processing purposes, in particular:

• hosting and IT service providers;
• reservation system providers;
• IT system providers used to operate the club;
• payment operators, including Przelewy24;
• accounting and legal service providers;
• marketing and communication service providers;
• analytics tool providers, where such tools are used on the website;
• entities providing services related to organising events;
• public authorities and other entities authorised under applicable law.

The scope of data transferred is limited to the data necessary to achieve the relevant purpose.

8. Transfer of Data Outside the European Economic Area

If the Controller uses services of providers based outside the European Economic Area, personal data may be transferred outside the EEA only in compliance with the requirements set out in the GDPR.

Depending on the specific provider, the basis for such transfer may include an adequacy decision of the European Commission, standard contractual clauses, or another mechanism provided for under the GDPR.

9. Data Retention Period

We store personal data for the period necessary to achieve the purpose for which it was collected.

• data related to the performance of a contract is stored for the duration of the contract and for the period necessary to handle possible claims;
• data related to accounting and tax obligations is stored for the period required by law;
• data processed on the basis of consent is stored until consent is withdrawn, unless there is another legal basis for further processing;
• data processed for marketing purposes on the basis of legitimate interest is stored until an effective objection is raised or the basis for processing ceases to exist.

10. Rights of Data Subjects

A data subject has, under the conditions set out in the GDPR, the right to:

• access their data;
• rectify their data;
• erase their data;
• restrict processing;
• data portability;
• object to processing;
• withdraw consent at any time, where processing is based on consent.

Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

The data subject also has the right to lodge a complaint with the President of the Personal Data Protection Office.

11. Objection to Processing

Where data is processed on the basis of Article 6(1)(f) GDPR, the data subject may object to such processing for reasons relating to their particular situation.

In the case of processing data for direct marketing purposes, the data subject may object to such processing at any time.

12. Data Security

The Controller applies appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access.

Access to personal data is granted only to authorised persons and entities that need access to the data in connection with the performance of their assigned tasks.

13. Cookies

The Ask For Alonzo website uses cookies and similar technologies.

Cookies are small text files stored on the user’s device when using the website.

Cookies may be used to ensure proper website operation, maintain functionality, remember settings and preferences, provide security, keep statistics and analytics, and conduct marketing or remarketing activities where appropriate tools have been implemented and the required consent has been given.

14. Types of Cookies

• Necessary cookies – required for the proper operation of the website’s basic functions;
• Functional cookies – allow the website to remember user settings and preferences;
• Analytical cookies – used to collect information about how the website is used and to create statistics;
• Marketing cookies – used for advertising and remarketing purposes, where such tools are used on the website.

15. Managing Cookies

The user may manage cookies through their browser settings. Depending on the browser configuration, the user may block cookies, delete saved cookies, or receive information about an attempt to save them.

Restricting the use of cookies may affect the operation of some website functionalities.

If a consent management panel is available on the website, the user may also change their cookie preferences through that panel.

16. Changes to the Privacy and Cookies Policy

The Controller may update this Privacy and Cookies Policy, in particular in the event of changes in legal regulations, changes in website operation, introduction of new services or functionalities, changes in service providers, or changes in how personal data or cookies are used.

The current version of the Policy is published on the website.

17. Contact

For matters concerning the processing of personal data or the exercise of rights under the GDPR, you may contact Ask For Alonzo:

ASK FOR ALONZO SP. Z O.O.
ul. Juliusza Słowackiego 25
20-461 Lublin
Poland

Contact regarding the restaurant and cocktail bar:
ask.for.alonzo.pl@gmail.com

Contact regarding membership and cooperation:
info.pl@askforalonzo.com

18. Final Provisions

This Privacy and Cookies Policy constitutes information on the rules for processing personal data in connection with use of the website and Ask For Alonzo services.

In relation to data processing by external providers, including payment operators, their own privacy policies and information concerning the processing of personal data may also apply.