1. Who is the controller
Your personal data is jointly controlled by Jolanta Alicja Klisinski and Anastasiia Vorontsova, partners in a civil-law partnership (spółka cywilna) trading as HAYP spółka cywilna, ul. Puławska 14, 05-532 Baniocha, NIP (tax ID) 1231607659, REGON 545162976 (“HAYP”, “we”).
Data protection contact: kontakt@hayp.pl, phone +48 519 100 788, or by post to the registered address.
2. Scope
This policy covers the website hayp.pl (the “Website”). The Website is informational: it presents the HAYP venue, menu, prices and directions. We do not sell anything, create accounts or collect data through forms on the Website.
3. What data we process, why, and on what legal basis
| Situation | Data | Purpose | Legal basis |
|---|---|---|---|
| Viewing the Website | IP address, date and time, browser and device type, page address | delivering the Website, security, protection against attacks | Art. 6(1)(f) GDPR — our legitimate interest |
| Contacting us (phone, e-mail, social media message) | data you provide, e.g. name, phone number, e-mail, message | answering your question | Art. 6(1)(f) GDPR; where a contract is concerned — Art. 6(1)(b) GDPR |
| Clicking “Show Google map” | IP address, device data, Google cookies | showing the map with directions | Art. 6(1)(a) GDPR — your consent given by clicking |
4. Cookies and similar technologies
Cookies are small files stored on your device. Browser storage (localStorage) works in a similar way.
- Necessary — we store your cookie choice in browser storage (key
hayp-consent, up to 12 months), so the banner does not appear on every visit. - Statistics and advertising — not used at the moment. If we enable them, we will ask for consent before storing them and update this policy.
- Google map — after you click “Show Google map”, Google may set its own cookies.
You can also delete or block cookies in your browser settings.
5. Recipients
- Cloudflare, Inc. — hosting and protection of the Website, as our processor.
- Google Ireland Limited — Google Maps.
- Meta Platforms Ireland Ltd. and TikTok Technology Limited — if you contact us via Facebook, Instagram or TikTok. The Website only links to these services; their privacy rules apply there.
- Public authorities — where the law requires it.
6. Transfers outside the EEA
Cloudflare and Google may process data in the USA, based on European Commission Decision (EU) 2023/1795 of 10 July 2023 (EU-U.S. Data Privacy Framework), or, where that decision does not apply, standard contractual clauses approved by the European Commission.
7. Retention
- Technical data from viewing the Website — for Cloudflare’s log retention period, no longer than needed for security.
- Correspondence — until the matter is closed, then until any claims become time-barred.
- Cookie data — for the periods in section 4 or until you withdraw consent.
8. Your rights
You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), portability (Art. 20), to object to processing based on our legitimate interest (Art. 21), and to withdraw consent at any time (Art. 7(3)).
You may lodge a complaint with the Polish supervisory authority: Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa.
9. Is providing data required
No. You can use the Website without providing any data. Without cookie consent the Website works normally.
10. Automated decisions
We do not make decisions based solely on automated processing that produce legal effects or similarly significantly affect you (Art. 22 GDPR).
11. Changes
We may update this policy, for example when the law or the tools on the Website change. The current version is always on this page.