Privacy Policy

This Privacy Policy explains what personal data we collect through the Kula restaurant website, for what purposes we use it, how long we store it, and what rights you have regarding the processing of your personal data.

1. Controller of Personal Data

The Controller of Personal Data is:

[Name of Legal Entity / Sole Proprietorship]
Address: [address]
OIB: [OIB]
Email: [email address]
Phone: [phone number]

For all questions related to the processing of personal data, you can contact us via the provided email address or phone number.

2. What Personal Data We Collect

Through the website, we collect only the personal data that you provide to us when submitting a contact inquiry or making a reservation.

Contact Form

Through the contact form, we may collect the following data:

first and last name
phone number
email address
message content

We use this data to respond to your inquiry, provide the requested information, or continue communication related to your request.

Reservation Form

Through the reservation form, we may collect the following data:

first and last name
phone number
reservation date
reservation time
number of guests
any notes you enter

We use this data to receive, process, and confirm your reservation, and, if necessary, to contact you regarding your arrival.

Please do not enter sensitive personal data in the message or notes field, such as health information, document details, financial information, or other data not required to respond to an inquiry or process a reservation.

3. Purposes and Legal Bases of Processing

We process personal data for the following purposes:

Responding to inquiries via the contact form

We process data from the contact form to respond to your inquiry and provide the requested information.

The legal basis for this processing is our legitimate interest in communicating with individuals who contact us through the website.

Processing reservations

We process data from the reservation form to receive and organize your reservation, confirm the time, and contact you if necessary.

The legal basis for this processing is taking steps at your request prior to providing a service, i.e., the performance of the agreed reservation service.

Protection of rights and interests

We may also process certain data if necessary to protect our rights, prove communication, resolve complaints, or act upon requests from competent authorities.

The legal basis for this processing is legitimate interest or compliance with a legal obligation, depending on the specific case.

4. Who Has Access to Personal Data

Access to personal data is limited to individuals who need that data to respond to inquiries, process reservations, or maintain the website.

Personal data may also be accessible to our trusted service providers, such as:

hosting service provider
email communication service provider
website technical maintainer
provider of contact form or reservation processing systems, if used

These service providers process data only to the extent necessary to provide their services and according to our instructions.

We do not sell, rent, or transfer personal data to third parties for marketing purposes.

5. How Long We Store Personal Data

We store data from the contact form for as long as necessary to respond to your inquiry and any further communication, but no longer than 12 months from the end of communication, unless there is a justified reason for longer retention.

We store data from the reservation form for as long as necessary to process and record the reservation, but no longer than 12 months from the reservation date, unless there is a legal obligation or a justified reason for longer retention.

If a business relationship, invoice, order, or other document that must be retained according to special regulations arises from the communication, the data contained in such documents will be stored for the periods prescribed by applicable laws.

6. Cookies and Technical Data

The website may use essential technical cookies that are necessary for the proper functioning of the site.

If analytical, marketing, or other cookies not essential for the site’s operation are used on the website, the user will be informed via a cookie notice and, where necessary, will be able to give or withdraw consent.

When visiting the website, basic technical data, such as IP address, access time, device type, browser, and similar data, may be automatically recorded for security, proper website operation, and technical maintenance purposes.

7. Security of Personal Data

We implement appropriate technical and organizational measures to protect personal data from unauthorized access, loss, misuse, alteration, or destruction.

Access to personal data is limited to individuals and service providers who need this data to perform their tasks.

8. User Rights

In accordance with applicable personal data protection regulations, you have the right to:

request access to your personal data
request correction of inaccurate or incomplete data
request erasure of personal data
request restriction of processing
object to the processing of personal data
request data portability, where applicable
withdraw consent, if processing is based on consent

To exercise your rights, you can contact us via email at: [email address].

We will respond to your request in accordance with applicable personal data protection regulations.

9. Right to Lodge a Complaint with a Supervisory Authority

If you believe that your personal data is being processed contrary to applicable regulations, you have the right to lodge a complaint with the Personal Data Protection Agency.

Personal Data Protection Agency
Selska cesta 136
10000 Zagreb
Web: www.azop.hr

10. Changes to the Privacy Policy

We may periodically amend this Privacy Policy to align it with changes in how personal data is processed, website functionalities, or applicable regulations.

The updated version of the Privacy Policy will be published on this website.

Last modified date: [datum]