{"id":11210,"date":"2021-10-25T14:37:09","date_gmt":"2021-10-25T12:37:09","guid":{"rendered":"https:\/\/bistrocharlotte.pl\/personal-data-processing-and-protection\/"},"modified":"2026-06-10T10:12:30","modified_gmt":"2026-06-10T08:12:30","slug":"personal-data-processing-and-protection","status":"publish","type":"page","link":"https:\/\/bistrocharlotte.com\/en\/personal-data-processing-and-protection\/","title":{"rendered":"Personal Data Processing and Protection"},"content":{"rendered":"\n<h3 class=\"wp-block-heading a-heading a-heading--h3\" id=\"calibre_link-1\">Personal Data Processing and Protection<\/h3>\n\n\n\n<h4 class=\"wp-block-heading a-heading a-heading--h4\">1. General<\/h4>\n\n\n\n<p class=\"a-text wp-block-paragraph\">This Privacy Policy provides information on how your personal data are collected, stored and processed, the legal basis for their processing, and your rights in relation to their processing.<\/p>\n\n\n\n<p class=\"a-text wp-block-paragraph\">The Controller of your personal data (within the meaning of Regulation (EU) 2016\/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95\/46\/EC (General Data Protection Regulation) &#8211; hereinafter referred to as the GDPR) is Maison Charlotte sp\u00f3\u0142ka z ograniczon\u0105 odpowiedzialno\u015bci\u0105, with its registered office in Warsaw (00-549) at ul. Pi\u0119kna 11B, lok. 2, KRS Registration No: 0000363133, NIP Tax ID: 7010251730, REGON Business ID: 142545525, hereinafter referred to as the &#8220;Controller&#8221; or &#8220;Charlotte&#8221;.<\/p>\n\n\n\n<p class=\"a-text wp-block-paragraph\">Users&#8217; personal data are processed by the Controller in compliance with personal data protection legislation, including in the first instance the Regulation (EU) 2016\/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95\/46\/EC (&#8220;GDPR&#8221;).<\/p>\n\n\n\n<h4 class=\"wp-block-heading a-heading a-heading--h4\">2. Legal Basis for Data Processing<\/h4>\n\n\n\n<p class=\"a-text wp-block-paragraph\">We process your personal data only if:<\/p>\n\n\n\n<ol class=\"wp-block-list a-list a-list--ordered\">\n\n<li class=\"a-list__item a-text\">we have obtained your prior consent;<\/li>\n\n\n<li class=\"a-list__item a-text\">this is necessary for the conclusion of a contract, taking steps prior to entering into a contract, or performance of a contract;<\/li>\n\n\n<li class=\"a-list__item a-text\">the processing is necessary for compliance with our legal obligations;<\/li>\n\n\n<li class=\"a-list__item a-text\">the processing is necessary for the Controller or a third party to pursue its legitimate interests which are not overridden by the interests or rights and freedoms of the data subject.<\/li>\n\n<\/ol>\n\n\n\n<h4 class=\"wp-block-heading a-heading a-heading--h4\">3. Categories of Personal Data Processing<\/h4>\n\n\n\n<p class=\"a-text wp-block-paragraph\">Personal data are processed by us to the extent indicated in respect of:<\/p>\n\n\n\n<ol class=\"wp-block-list a-list a-list--ordered\">\n\n<li class=\"a-list__item a-text\">Customers \u2013 to the extent necessary for the acceptance and fulfilment of an order, i.e., full name, address of residence, email address, phone number;<\/li>\n\n\n<li class=\"a-list__item a-text\">Applicants \u2013 to the extent necessary to carry out a recruitment process, i.e., full name, date of birth, address of residence, email address, phone number, education and professional qualifications, and previous employment history;<\/li>\n\n\n<li class=\"a-list__item a-text\">Counterparties \u2013 to the extent necessary for the performance of the contract between the parties, i.e., full name, position, phone number and email address, and data necessary for the issue of a VAT invoice;<\/li>\n\n\n<li class=\"a-list__item a-text\">Site Users \u2013 to the extent necessary for the provision of the Newsletter service or use of the contact form, i.e., full name and email address.<\/li>\n\n<\/ol>\n\n\n\n<h4 class=\"wp-block-heading a-heading a-heading--h4\">4. Consent to the Processing of Personal Data<\/h4>\n\n\n\n<p class=\"a-text wp-block-paragraph\">Consent to the processing of personal data must be freely given, specific, informed and unambiguous. If we process your personal data based on your consent, you can withdraw your consent at any time as easily as you gave it.<\/p>\n\n\n\n<h4 class=\"wp-block-heading a-heading a-heading--h4\">5. Purposes of Personal Data Processing<\/h4>\n\n\n\n<p class=\"a-text wp-block-paragraph\">We collect, store and process personal data for the purpose of providing services, marketing our services, making and receiving payments, collecting debt, and archiving, and for marketing and statistical purposes.<\/p>\n\n\n\n<p class=\"a-text wp-block-paragraph\">Your data will be processed to the extent necessary for us to comply with our obligations and for a period necessary to achieve the purposes for which they were collected, in compliance with our data storage policy and the applicable data protection legislation. The personal data processing period may each time be extended by the statute of limitations for claims, if the processing of the personal data will be necessary for the exercise or defence of such claims by the Controller.<\/p>\n\n\n\n<p class=\"a-text wp-block-paragraph\">We process Customers&#8217; personal data in order to provide them with the service ordered &#8211; to accept and fulfil an order, as well as to handle complaints and produce accounting documents. We process the data entrusted to us for a period necessary to provide the service ordered.<\/p>\n\n\n\n<p class=\"a-text wp-block-paragraph\">Legal basis: point (b) of Article 6(1) of the GDPR.<\/p>\n\n\n\n<p class=\"a-text wp-block-paragraph\">We process personal data of Site Users and those using the contact form in order to handle the query made and to provide a response. We process the personal data entrusted to us for a period necessary to establish and manage the communication.<\/p>\n\n\n\n<p class=\"a-text wp-block-paragraph\">Legal basis: point (b) of Article 6(1) of the GDPR.<\/p>\n\n\n\n<p class=\"a-text wp-block-paragraph\">We process personal data of Newsletter service Recipients in order to provide them with news about the Controller &#8211; we inform them, among other things, about changes to our menu and events taking place at Charlotte or new restaurant openings. We process the personal data entrusted to us until you withdraw your consent.<\/p>\n\n\n\n<p class=\"a-text wp-block-paragraph\">Legal basis: point (a) of Article 6(1) of the GDPR.<\/p>\n\n\n\n<p class=\"a-text wp-block-paragraph\">We process Applicants&#8217; personal data in order to conclude a contract with the data subject, to the extent necessary for the recruitment process. We process the personal data entrusted to us for the period necessary for the current recruitment process. Applicants&#8217; personal data may be processed for the purpose of future recruitment processes only after obtaining the Applicant&#8217;s consent to such processing of their personal data.<\/p>\n\n\n\n<p class=\"a-text wp-block-paragraph\">Legal basis: point (b) of Article 6(1) of the GDPR.<\/p>\n\n\n\n<p class=\"a-text wp-block-paragraph\">We process Counterparties&#8217; personal data in order to perform the civil law contracts concluded. We process the personal data entrusted to us until our cooperation is terminated. Legal basis: points (a) and (b) of Article 6(1) of the GDPR.<\/p>\n\n\n\n<p class=\"a-text wp-block-paragraph\">We may collect personal data from social media, such as Facebook, to the extent of data relating to your activity on such portals, e.g. your activity on the Controller&#8217;s profile. Data are transferred automatically, based on contracts or website terms and conditions.<\/p>\n\n\n\n<h4 class=\"wp-block-heading a-heading a-heading--h4\">6. Making Personal Data Available<\/h4>\n\n\n\n<p class=\"a-text wp-block-paragraph\">We may transfer personal data to third parties in order to achieve the purposes listed in Article 5, insofar as this is necessary for such third parties to carry out the tasks commissioned by us, if we are required to do so by law, or if we have your consent to transfer such data to another entity. In this regard, your personal data may be transferred to:<\/p>\n\n\n\n<ol class=\"wp-block-list a-list a-list--ordered\">\n\n<li class=\"a-list__item a-text\">system hosting providers;<\/li>\n\n\n<li class=\"a-list__item a-text\">Newsletter service providers;<\/li>\n\n\n<li class=\"a-list__item a-text\">payment service providers;<\/li>\n\n\n<li class=\"a-list__item a-text\">accounting service providers;<\/li>\n\n\n<li class=\"a-list__item a-text\">document archiving service providers;<\/li>\n\n\n<li class=\"a-list__item a-text\">legal, analytical and marketing service providers;<\/li>\n\n\n<li class=\"a-list__item a-text\">postal or courier companies;<\/li>\n\n\n<li class=\"a-list__item a-text\">banks, in order for them to process payments;<\/li>\n\n\n<li class=\"a-list__item a-text\">authorities having the right to receive your data by law.<\/li>\n\n<\/ol>\n\n\n\n<p class=\"a-text wp-block-paragraph\">Your personal data will not be made available in any way to third parties, other than for the purposes indicated in this Privacy Policy, and in particular they will not be transferred to other entities for the purpose of sending third-party marketing material. Your personal data is not transferred outside the European Union.<\/p>\n\n\n\n<h4 class=\"wp-block-heading a-heading a-heading--h4\">7. Rights of Data Subjects<\/h4>\n\n\n\n<ol class=\"wp-block-list a-list a-list--ordered\">\n\n<li class=\"a-list__item a-text\">1. right to withdraw consent<\/li>\n\n<\/ol>\n\n\n\n<p class=\"a-text wp-block-paragraph\">At any time, you have the right to withdraw any consent to the processing of personal data without giving any reasons. Your request may relate to a specific purpose of processing, but may also relate to all the purposes of processing. The withdrawal of consent in respect of all the purposes of processing will result in your data not being processed by us. The withdrawal of consent will not affect the activities already completed. The withdrawal of consent does not have any adverse consequences, but it may prevent us from continuing to perform activities for you or prevent you from using our functionalities which we can lawfully provide only with your consent (Article 7(3) of the GDPR).<\/p>\n\n\n\n<p class=\"a-text wp-block-paragraph\">2. right to object to use of personal data<\/p>\n\n\n\n<p class=\"a-text wp-block-paragraph\">You have the right to object at any time to the processing of your personal data, either in their entirety or to the extent indicated, if we process them based on our legitimate interests. Unless we have another legal basis for processing your personal data, we will erase the data objected to (Article 21 of the GDPR).<\/p>\n\n\n\n<p class=\"a-text wp-block-paragraph\">3. right to erasure \u2013 &#8220;right to be forgotten&#8221;<\/p>\n\n\n\n<p class=\"a-text wp-block-paragraph\">You have the right to obtain the erasure of all or some of your personal data at any time. The request to erase the data will not affect the activities already completed. The erasure of the data will result in your data not being processed by us.<\/p>\n\n\n\n<p class=\"a-text wp-block-paragraph\">Despite a request to erase your personal data, due to an objection or withdrawal of consent, we may retain certain personal data where there are compelling legitimate grounds for processing the data or where this is necessary for the establishment, exercise or defence of potential claims related to the processing of your personal data. This applies in particular to personal data which we retain for the purpose of handling complaints and claims related to the processing of your personal data. The legal basis for our processing of your personal data for this purpose is our legitimate interest (point (f) of Article 6(1) of the GDPR).<\/p>\n\n\n\n<p class=\"a-text wp-block-paragraph\">4. right to restriction of processing of personal data<\/p>\n\n\n\n<p class=\"a-text wp-block-paragraph\">At any time, you have the right to obtain the restriction of processing of your personal data (Article 18 of the GDPR).<\/p>\n\n\n\n<p class=\"a-text wp-block-paragraph\">5. right of access to personal data<\/p>\n\n\n\n<p class=\"a-text wp-block-paragraph\">At any time, you may request us for confirmation as to whether or not we process your personal data and, if so, access them and obtain the following information: the purposes of the processing, the categories of the personal data being processed, the recipients or categories of recipients to whom the personal data have been or will be disclosed, the envisaged period for which the personal data will be stored or the criteria used to determine that period, the right to request rectification, erasure or restriction of processing of the personal data, the right to object to such processing, the right to lodge a complaint with a supervisory authority, the source of the personal data, the existence of automated decision-making, including profiling, and the safeguards used in relation to the transfer of such data outside the European Union. You also have the right to obtain a copy of your personal data (Article 15 of the GDPR).<\/p>\n\n\n\n<p class=\"a-text wp-block-paragraph\">6. right to rectification of personal data<\/p>\n\n\n\n<p class=\"a-text wp-block-paragraph\">You have the right to obtain from us the rectification of personal data if they are inaccurate or to have them completed if they are incomplete (Article 16 of the GDPR).<\/p>\n\n\n\n<p class=\"a-text wp-block-paragraph\">7. right to data portability<\/p>\n\n\n\n<p class=\"a-text wp-block-paragraph\">You have the right to obtain the personal data provided by you and to transmit them to another personal data controller of your choice. You have the right to have the personal data transmitted directly to another controller, where technically feasible (Article 20 of the GDPR).<\/p>\n\n\n\n<p class=\"a-text wp-block-paragraph\">8. right to lodge a complaint<\/p>\n\n\n\n<p class=\"a-text wp-block-paragraph\">You may submit queries and requests to us regarding the processing of your personal data and the exercise of your rights. We have the obligation to provide information on actions taken by us within one month of receipt of each request.<\/p>\n\n\n\n<p class=\"a-text wp-block-paragraph\">If you consider that your right to data protection has been infringed, you have the right to lodge a complaint with the President of the Personal Data Protection Office.<\/p>\n\n\n\n<h4 class=\"wp-block-heading a-heading a-heading--h4\">8. Contact with the Controller about Personal Data<\/h4>\n\n\n\n<p class=\"a-text wp-block-paragraph\">You may contact us regarding all personal data protection matters by sending an email to rodo@bistrocharlotte.com.<\/p>\n\n\n\n<h4 class=\"wp-block-heading a-heading a-heading--h4\" id=\"calibre_link-2\">9. Cookies<\/h4>\n\n\n\n<p class=\"a-text wp-block-paragraph\">The Site does not automatically collect any information except that contained in cookies. Cookies are IT data, in particular text files, which are stored on the Site User&#8217;s end device, and which are intended for the use of the Site. Cookies typically contain the name of the website they originate from, their storage time on the end device, and a unique number. Cookies are placed on the Site User&#8217;s end device and accessed by the Site operator and server administrator. Cookies may also be placed and used by advertisers and partners cooperating with the Site operator and server administrator, in particular Google Analytics for analytical and statistical purposes.<\/p>\n\n\n\n<p class=\"a-text wp-block-paragraph\">Cookies are used for:<\/p>\n\n\n\n<ol class=\"wp-block-list a-list a-list--ordered\">\n\n<li class=\"a-list__item a-text\">adapting the content of the Site to the User&#8217;s preferences and optimising the use of the Site, in particular such files allow the Site to recognise the User&#8217;s device and appropriately display the Site, in a way tailored to the User&#8217;s individual needs;<\/li>\n\n\n<li class=\"a-list__item a-text\">generating statistics which make it easier to understand how Site Users use the pages, so as to improve the pages&#8217; structure and content.<\/li>\n\n<\/ol>\n\n\n\n<p class=\"a-text wp-block-paragraph\">We do not use cookies to obtain any personally identifiable information about Users of our Site or to track their navigation.<\/p>\n\n\n\n<p class=\"a-text wp-block-paragraph\">In many cases, web browsing software (browser) allows the storage of cookies on the Site User&#8217;s end device by default. Site Users can change their cookie settings at any time. These settings can be changed, in particular, in such a way as to block the automatic use of cookies in the settings of the browser or alert the User each time cookies are placed on the Site User&#8217;s device. Details on the possibility and ways of using cookies are available in the settings of your software (browser).<\/p>\n\n\n\n<p class=\"a-text wp-block-paragraph\">Please be advised that restricting the use of cookies may affect some of the functionalities available on our Site.<\/p>\n\n\n\n<h4 class=\"wp-block-heading a-heading a-heading--h4\">10. Miscellaneous<\/h4>\n\n\n\n<p class=\"a-text wp-block-paragraph\">This Privacy Policy takes effect on 1 January 2021. Any changes or additions to this Privacy Policy will be published on the Controller&#8217;s Site.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Personal Data Processing and Protection 1. General This Privacy Policy provides information on how your personal data are collected, stored and processed, the legal basis for their processing, and your rights in relation to their processing. The Controller of your personal data (within the meaning of Regulation (EU) 2016\/679 of the European Parliament and of [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"core-content","meta":{"_acf_changed":false,"footnotes":""},"class_list":["post-11210","page","type-page","status-publish","hentry"],"acf":[],"_links":{"self":[{"href":"https:\/\/bistrocharlotte.com\/en\/wp-json\/wp\/v2\/pages\/11210","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/bistrocharlotte.com\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/bistrocharlotte.com\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/bistrocharlotte.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/bistrocharlotte.com\/en\/wp-json\/wp\/v2\/comments?post=11210"}],"version-history":[{"count":1,"href":"https:\/\/bistrocharlotte.com\/en\/wp-json\/wp\/v2\/pages\/11210\/revisions"}],"predecessor-version":[{"id":40763,"href":"https:\/\/bistrocharlotte.com\/en\/wp-json\/wp\/v2\/pages\/11210\/revisions\/40763"}],"wp:attachment":[{"href":"https:\/\/bistrocharlotte.com\/en\/wp-json\/wp\/v2\/media?parent=11210"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}