GDPR + cookies
Política de privacidad
Last updated: 7 May 2026
The Polish version of this privacy policy is the legally binding original. This English version is provided for convenience.
Data controller
The controller of your personal data is Harvest Koprowski sp. j., registered at Sukiennice 9a, 50-107 Wrocław, tax ID 8971850314, operating the Pod Papugami restaurant at the same address.
Contact: email info@podpapugami.com.pl, phone +48 695 102 939.
We have not appointed a Data Protection Officer. All data-protection matters should be addressed directly to the controller above.
Purposes and legal bases
We process your data for the following purposes:
a) Handling inquiries via the contact form
- Purpose: answering inquiries, arranging meetings, events, catering or preparing offers
- Legal basis: Art. 6(1)(b) GDPR (steps to enter into a contract) or Art. 6(1)(f) GDPR (legitimate interest of the controller — answering inquiries directed to the business)
- Scope: name, email, phone (optional), message content, IP, browser, entry page
- Retention: until the end of the correspondence + 12 months for potential complaints
b) Voucher sales and fulfilment
- Purpose: fulfilling voucher orders, delivering codes, handling complaints, accounting
- Legal basis: Art. 6(1)(b) GDPR (contract performance) and Art. 6(1)(c) GDPR (legal obligation — tax and accounting law)
- Scope: buyer name, email, optional recipient name, dedication, payment data passed to Tpay (we do not see or store card numbers)
- Retention: 5 years from the end of the tax year (accounting law); voucher does not expire
c) Analytics
- Purpose: measuring page views, traffic sources, campaign performance
- Legal basis: Art. 6(1)(a) GDPR (your consent in the cookie banner)
- Scope: cookie IDs, anonymised IP, device, browser, click path
- Retention: per Google Analytics 4 settings (up to 14 months)
d) Marketing and remarketing
- Purpose: showing personalised Pod Papugami ads on Google Ads and Meta Ads to people who visited the site
- Legal basis: Art. 6(1)(a) GDPR (your consent in the cookie banner — "Marketing" category)
- Scope: advertising cookie IDs, fact of visit, pages viewed
- Retention: up to 90 days for remarketing lists
Data recipients — tools we use
We use the following trusted providers (processors) under data processing agreements:
- Vercel Inc. — hosting and database (US / EEA)
- Krajowy Integrator Płatności S.A. (Tpay) — voucher payments (Poland / EEA)
- Resend, Inc. — transactional emails (US)
- Google Ireland Ltd. — Google Tag Manager, Google Analytics 4, Google Ads, Maps, Street View (Ireland / EEA, US)
- zjedz.my — online table reservation system (Poland)
Some of these providers (Vercel, Resend, Google) are based in or process data in the US. Transfers to the US are based on Standard Contractual Clauses of the European Commission and the EU-US Data Privacy Framework (Commission Decision 2023/1795).
We do not sell or share your data with third parties for marketing purposes beyond those listed above.
Your rights
Under data protection law you have the right to:
- Access your data (Art. 15 GDPR)
- Rectification (Art. 16 GDPR)
- Erasure (Art. 17 GDPR) — except data the law requires us to retain
- Restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Object to processing (Art. 21 GDPR)
- Withdraw consent at any time
- Lodge a complaint with the Polish DPA (uodo.gov.pl)
To exercise any of these rights, write to info@podpapugami.com.pl. We respond within 30 days.
Cookies and similar technologies
The site podpapugami.com.pl uses cookies in three categories: essential (always on), analytics (consent required) and marketing (consent required). We remember your choice for 12 months. You can change your consent at any time — click „cookie settings” in the footer.
By default (before consent) we operate in Google Consent Mode v2 with all signals set to "denied" — no advertising IDs are stored, no user profile is built.
Server logs
Every visit generates a technical log (IP, time, URL path, browser). Logs are retained for up to 30 days and are not linked to other personal data.
External links
Some links take you to external services (zjedz.my, Google Maps, Instagram, Facebook, TikTok, LinkedIn). Once you leave our site we are not responsible for how those parties process your data.
Policy updates
This privacy policy may be updated. Each version is dated at the top of this page. We notify about material changes via a banner on the site or by email.
Questions, concerns, request to delete your data? info@podpapugami.com.pl · +48 695 102 939