Privacy policy

Here we explain what data we collect on portjatki.pl and in the booking form, why, and how long we keep it. The website uses no cookies, no analytics and no advertising.

Data controller

The controller of your personal data is Shrimp Bistro sp. z o.o., with its registered office in Bydgoszcz, ul. Jatki 9, 85-110 Bydgoszcz. It is entered in the register of entrepreneurs (KRS, the Polish company register) under number 0001239520 by Sąd Rejonowy w Bydgoszczy, XIII Wydział Gospodarczy KRS (the District Court in Bydgoszcz, 13th Commercial Division of the National Court Register), NIP (Polish tax ID) 9532818898, REGON (Polish business register number) 544652773, share capital PLN 5,000. The company runs the restaurant Port Jatki - Fish & Wine at ul. Jatki 6 in Bydgoszcz.

Contact for personal data matters: portjatki@gmail.com, tel. +48 574 089 294.

Table booking through the form

When you send the booking form, we process your first and last name, phone number, date and time, number of guests, chosen seating area, the text of your notes and the language of the website. We use them only to accept your booking, call you with a confirmation and prepare your table.

The legal basis is taking steps at your request before entering into a contract and performing that contract (art. 6(1)(b) GDPR). Providing the data is voluntary, but without a name, phone number and date we cannot accept a booking. You can also phone us instead of using the form.

Please do not write health information, such as allergies, in the notes. We will ask about allergies when we call to confirm your booking. What you tell us will be used only to prepare your meal safely.

How long we keep your data

We delete booking requests no later than 30 days after the booking date, from the form and from our mailbox.

We keep e-mail correspondence until the matter is closed, and then for up to 3 years in case of claims (art. 118 of the Polish Civil Code). We keep accounting documents, such as invoices, for as long as tax law requires (5 years from the end of the year). Server logs are kept by the hosting provider for a short time, according to its own settings.

Contact by e-mail and phone

When you write to us or call us, we process the data needed to reply (for example your name, e-mail address, phone number and the content of your message). The basis is our legitimate interest in replying to people who contact us (art. 6(1)(f) GDPR), and where the matter concerns a booking or an order, art. 6(1)(b) GDPR.

Hosting and server logs

The website and the booking form are run by Netlify, Inc. (USA). We store photos in Supabase (Supabase, Inc.), but your browser downloads them through the Netlify server, so it connects only to Netlify. When a page is displayed, the server automatically records technical data: IP address, date and time, page address, and browser and system type. We do this so that the website works, stays secure and so that we can detect abuse. This is our legitimate interest (art. 6(1)(f) GDPR).

Who we share data with

On our behalf, as processors, your data is processed by: Netlify, Inc. (website hosting and booking form), Supabase (storage of photos and website content), Google (the e-mail inbox that receives booking notifications) and an accounting firm, where the matter concerns accounts. We do not sell data and we do not use it for advertising.

Transfers outside the EEA

Netlify, Google and Supabase may process data outside the European Economic Area, including in the USA. For Netlify and Google, the basis is the European Commission decision on the EU-U.S. Data Privacy Framework (the companies are certified), supported by standard contractual clauses. For Supabase, the basis is the standard contractual clauses approved by the European Commission (decision 2021/914). You can get a copy of these safeguards by writing to the address given above.

Cookies and browser storage

The website does not store cookies and does not use analytics, advertising pixels or fonts from external servers. The only information we save in your browser storage (localStorage) is your choice of light or dark theme, when you change it yourself. It is needed for a function you ask for, so it does not require consent (art. 399(3) of the Polish Electronic Communications Law). You can delete it by clearing the site data in your browser.

The “Open in maps” link leads to Google Maps. No map is loaded on our website. After you click the link, you use Google’s service on its terms (Google Privacy Policy).

Your rights

You have the right to access your data, to have it corrected or deleted, to restrict its processing and to data portability. To use these rights, write to portjatki@gmail.com. You also have the right to lodge a complaint with the President of the Personal Data Protection Office (UODO) (ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl).

Right to object

You may object at any time to the processing of data based on our legitimate interest (art. 6(1)(f) GDPR), on grounds relating to your particular situation. We will then stop processing that data, unless we show compelling legitimate grounds that override your interests, or the data is needed to establish, pursue or defend legal claims. Send your objection to portjatki@gmail.com.

Other information

We do not make decisions based solely on automated processing, including profiling (art. 22 GDPR). We have not appointed a data protection officer because we are not required to. The content of the website (texts, photos, menu) is for information only. Prices and the composition of dishes may change. Current information is given by the staff at the restaurant.