Privacy policy
Last updated:
1. General information
This privacy policy explains what data we process when you use the website www.piazzanuova.pl (the “Website”), why we do so, and what rights you have in relation to that processing.
The Website is purely informational – it presents the menu and contact details of the Piazza Nuova restaurant. It has no forms, booking system, user accounts or newsletter, and uses no analytics or marketing tools. We therefore process only the minimum amount of data described below.
We process data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR) and the Polish Electronic Communications Act of 12 July 2024 (Prawo komunikacji elektronicznej).
2. Data controller
The controllers of your personal data are Szymon Gąsiorek and Tomasz Gąsiorek, partners in a Polish civil-law partnership (spółka cywilna) trading as “Przedsiębiorstwo Handlowo Usługowe Szymon, Tomasz Gąsiorek spółka cywilna”, who run the Piazza Nuova restaurant (tax identification number (NIP): 5532559265, REGON: 382388034).
Postal address: Plac Wojska Polskiego 5, 43-300 Bielsko-Biała, Poland.
Contact for data protection matters:
e-mail: piazza.nuova.bielsko@gmail.com
phone: +48 798 845 350
3. What data we process, why, and on what legal basis
3.1. Cookies and browser storage
The Website only stores information on your device that it needs in order to work or to remember your settings. It is used to:
- remember that the cookie notice has been acknowledged,
- remember the language selected in the language switcher (Polish, English, Italian),
- remember whether animations on the Website should be paused,
- return keyboard focus to the language switcher after the language is changed.
We do not use analytics, marketing or tracking cookies, or any similar technologies. See section 4 for details.
Legal basis: Art. 6(1)(f) GDPR – our legitimate interest in ensuring the proper functioning of the Website.
3.2. Server logs
Like any website, the Website runs on the servers of a hosting provider, which automatically record technical information about each request: IP address, date and time, the page visited, browser type and operating system. This data is used solely to keep the Website secure and stable and to diagnose errors. We do not combine it with other data or use it to identify users.
Legal basis: Art. 6(1)(f) GDPR – our legitimate interest in keeping the Website secure.
3.3. Contact by e-mail or phone
If you write to us or call us, we process the data you give us (e.g. your name, e-mail address, phone number and the content of your message) to reply to you and deal with your enquiry – for example a question about the menu or allergens, or an order.
Legal basis: Art. 6(1)(f) GDPR – our legitimate interest in communicating with people who contact us. If you contact us about an order, also Art. 6(1)(b) GDPR (steps taken at your request before entering into a contract, or performance of a contract).
4. Cookies and browser storage
The list below shows everything the Website stores on your device.
Cookies and data stored in your browser
- Name
cookie_consent- Type
- cookie
- Purpose
- Remembers that the cookie notice has been acknowledged.
- Retention period:
- 365 days
- Name
NEXT_LOCALE- Type
- cookie
- Purpose
- Remembers the language selected in the language switcher, so the home page opens straight in that language. Set only when you select a language.
- Retention period:
- 365 days
- Name
piazza-nuova:motion- Type
- local storage
- Purpose
- Remembers your choice of “Pause animations” or “Play animations”. Set only when you use that button.
- Retention period:
- until you clear your browser data
- Name
piazza-nuova:focus-language-select- Type
- session storage
- Purpose
- Returns keyboard focus to the language switcher after the language is changed.
- Retention period:
- deleted as soon as the page loads, at the latest when you close the tab
The language version you are viewing is determined by the page address (e.g. www.piazzanuova.pl/en), so no cookie is needed to display it.
Under Art. 399(3) of the Polish Electronic Communications Act (Prawo komunikacji elektronicznej), storing information on your device that is necessary to provide a service you have explicitly requested (e.g. displaying the Website in your chosen language or without animations) does not require your consent.
You can delete stored data or block cookies at any time in your browser settings (usually under “Privacy and security”). This will not prevent you from using the Website, but the cookie notice will be shown on every visit and the Website will not remember your chosen language or animation setting.
5. Recipients of data
We do not sell your data or share it with third parties for marketing purposes.
Access to data is limited to the providers whose services we use to run the Website and communicate with you:
- Website hosting provider: Vercel Inc. (USA),
- e-mail provider: Google Ireland Ltd. (Gmail).
These providers process data on our behalf, under data processing agreements or their own GDPR-compliant terms.
6. Transfers outside the European Economic Area
Some of the providers listed above are established in the United States or use servers outside the European Economic Area. In such cases, data is transferred on the basis of a European Commission adequacy decision (EU-U.S. Data Privacy Framework) or standard contractual clauses approved by the European Commission.
7. Retention periods
- Cookies and browser storage – for the period indicated in section 4 or until you delete them.
- Server logs – for as long as needed to keep the Website secure and stable, in accordance with the hosting provider’s policy.
- Correspondence – for as long as needed to handle your request; longer only where required by law (e.g. accounting) or necessary to establish, exercise or defend legal claims.
8. Your rights
Under the GDPR you have the right to:
- access your data and receive a copy of it (Art. 15 GDPR),
- have your data rectified (Art. 16 GDPR),
- have your data erased (Art. 17 GDPR),
- restrict the processing of your data (Art. 18 GDPR),
- object to processing based on our legitimate interests (Art. 21 GDPR).
To exercise these rights, write to us at piazza.nuova.bielsko@gmail.com. We will respond without undue delay and in any case within one month of receiving your message.
You also have the right to lodge a complaint with a supervisory authority – in Poland this is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warsaw, www.uodo.gov.pl. You may also complain to the supervisory authority in the EU Member State where you live or work.
Providing your data is voluntary. We do not use automated decision-making or profiling.
9. Links to external websites
The Website contains links to external services, e.g. Google (“Rate us on Google!”). When you click such a link, you leave the Website, and any data processing is governed by the privacy policy of that service, over which we have no control.
10. Changes to this policy
We may update this policy, for example when the Website’s features, our list of providers, or the applicable law change. The current version is always available at www.piazzanuova.pl/en/privacy-policy, and the date of the last update is shown at the top of the document.
11. Contact
For any questions about this policy or the processing of your data, please contact us:
e-mail: piazza.nuova.bielsko@gmail.com
phone: +48 798 845 350
address: Plac Wojska Polskiego 5, 43-300 Bielsko-Biała, Poland