Privacy policy

Data controller

The controller of your personal data is RoyalPub Marek Rudnik, ul. Święty Marcin 71, 61-803 Poznań, Poland, NIP (Polish tax ID) 5641154159, REGON (Polish business registry no.) 542431832.

For any matters concerning personal data, contact us:

• by e-mail: royalpubpoznan@gmail.com
• by phone: 575 775 490
• in person or by post at the pub's address

We have not appointed a data protection officer — we are not required to.

What data we collect and why

Table booking form. When you book a table through our website, we ask for:

• your name — so we know whose table to reserve
• phone number — to confirm the booking and reach you if anything needs sorting out
• e-mail address — optional, if you prefer written confirmation
• date, time and number of guests — so we can get the table ready
• notes — if you'd like to tell us something, for example about an allergy or an occasion you're celebrating

Providing this data is voluntary, but without your name, phone number, date, time and number of guests we cannot accept the booking.

Contact by e-mail or phone. If you write to us or call, we process the data you give us yourself — usually your name, contact details and the substance of your enquiry.

Legal basis

We process the data from the booking form on the basis of Article 6(1)(b) GDPR — it is necessary to take steps at your request before entering into a contract and to perform it. Booking a table is precisely such a contract.

The content of your notes, if you enter any, along with correspondence and phone conversations, we process on the basis of Article 6(1)(f) GDPR — our legitimate interest in serving our guest properly and responding to enquiries.

If in the notes you provide information about an allergy or food intolerance, this will be data concerning health. We process it solely in order to prepare your dish safely, on the basis of Article 9(2)(a) GDPR — your explicit consent expressed by providing this information itself. You do not have to provide it; you can also tell our staff about it on site.

The data collected by the Meta pixel we process on the basis of Article 6(1)(a) GDPR — your consent, which you give in the cookie banner. You can withdraw it at any time using the button in the Cookie Policy, without affecting the lawfulness of processing before withdrawal.

Who we share data with

Web3Forms (Web3Creative, India) — the provider that handles delivery of the booking form. The data entered in the form passes through its servers before reaching our mailbox. Web3Forms acts as a processor under a data processing agreement. In doing so it uses its own sub-processors: Amazon Web Services (hosting, database and mail delivery), Cloudflare and Hetzner.

CleanTalk and Akismet — spam-filtering services used by Web3Forms. The IP address and e-mail address of the person submitting the form are passed to them, solely to distinguish submissions from automated spam.

Google — the provider of the mailbox that receives form submissions, and the map provider. The map loads only after you click on it (details in the Cookie Policy).

Cloudflare — the provider of the hosting and content delivery network on which our website runs.

Meta Platforms Ireland Limited — the provider of the pixel we use to measure how our ads on Facebook and Instagram perform. Data reaches Meta only if you consent, and covers the fact of your visit to the site and of submitting the booking form. Without your consent the pixel does not load at all.

Beyond that, data may be disclosed to entities authorised under the law.

We do not sell your data. Apart from the Meta pixel described above, which runs only with your consent, we do not share data for marketing purposes.

Transfers outside the European Economic Area (EEA)

Some of our providers process data outside the EEA — Web3Forms operates from India, while Google, Cloudflare and (as regards the transfer to its US parent company) Meta are US entities. Transfers take place on the basis of the safeguards provided for in Chapter V GDPR: Standard Contractual Clauses (Web3Forms) and adequacy decisions under the Data Privacy Framework (Google, Cloudflare, Meta).

How long we keep your data

We keep booking data for 3 years from the booking date — a period matching the limitation of any claims connected with the visit. After that time we delete it from our mailbox.

Independently of this, Web3Forms deletes form data from its servers automatically after a maximum of three years from submission.

We keep e-mail correspondence for as long as needed to handle the matter and for the period of limitation of claims.

Your rights

You have the right to:

• access your data and obtain a copy of it
• rectification of inaccurate data or completion of incomplete data
• erasure of data if we have no basis to process it further
• restriction of processing in the cases set out in the GDPR
• objection to processing based on our legitimate interest
• portability of data processed on the basis of a contract
• withdrawal of consent at any time, where processing is based on it — without affecting the lawfulness of processing carried out before withdrawal

To exercise any of these rights, write to royalpubpoznan@gmail.com or call 575 775 490.

You also have the right to lodge a complaint with the supervisory authority — the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warszawa.

Profiling and automated decisions

We do not profile you and we do not make decisions about you by automated means.

Changes to this policy

If we change how we process data, we will update this policy and change the date below.

Last updated: 9 August 2026