1. The administrator of your data is the Restaurant:

Name: 4B Systems Sp. z o.o.

Address: al. Solidarności 117/207, 00-140 Warsaw

NIP: 575-188-70-93

2. The processing of personal data in accordance with the general regulation on data protection, the so-called GDPR, is defined as an operation or a set of operations performed on personal data or sets of personal data that takes place in an automated or non-automated manner.

3.The catalog of activities that mean the processing of personal data includes, inter alia, collecting, recording, organizing, organizing, storing, adapting or modifying, downloading, viewing, using, disclosing by sending, distributing or otherwise sharing, adjusting or combining, limiting, deleting or destroy.

4.The data that will be processed by the Administrator, in particular, the given name, surname, IP address, e-mail address, telephone number, necessary for the proper performance of the Administrator's services and other Administrator's utilities, or to take actions relating to your data, before performing the services provided, such as contacting you for the purpose of executing the Order.

5. The data administrator will process your personal data in accordance with applicable law and for the purpose necessary to perform and provide services offered by the Administrator, as well as to the extent necessary for the Administrator to take action at your request and to the extent necessary for the Administrator to fill in legal obligation - the processing of your personal data takes place on the basis of the law, i.e. art. 6 sec. 1 lit. b) and lit. c), d) and f) of the GDPR, without your consent to the processing of your personal data. In the remaining scope, providing your personal data is voluntary, but refusal to give consent or withdrawal of consent will prevent the Administrator from properly performing and providing services.

6. The administrator of personal data processes personal data for the duration of the purposes for which the data are processed and for a period of 10 years from the date of completion of the purposes for which the data are processed.

7. The processing of personal data is related to the provision of services by the Administrator and its implementation in accordance with art. 6 sec. 1 of the general regulation of the European Parliament of 27/04/2016, in particular to the extent necessary to perform the contract, or to take steps at the request of the data subject, before concluding the contract, necessary to fulfill the legal obligation incumbent on the Administrator and the necessary purposes resulting from from legitimate interests pursued by the Administrator or by a third party, except where these interests are overridden by the interests or fundamental rights and freedoms of the data subject, requiring the protection of personal data, in particular when the data subject, is a child.

8. The recipient of personal data will be natural persons, legal persons, personal companies, public authorities, units or other entities that may receive personal data as part of a specific procedure in accordance with the EU law or the law of a Member State. Personal data will be transferred to provide services to cooperating entities, such as couriers, to provide services, including contact and obtaining additional information.

9. Data protection, including the principles of processing, are set out in applicable law, in particular in the provisions of the general regulation of the European Union, the so-called GDPR, and apply to natural persons who, inter alia, consent to the processing of their personal data for one or more specific purposes, which is voluntary, specific, informed and unambiguous.

10. The legitimacy of processing and collecting your personal data is related to adjusting the content of services to your needs and expectations. Moreover, the legitimacy of the processing and collection of your personal data is related to ensuring the security and improvement of your personal data as well as marketing, including direct marketing of the Administrator's services, which is justified by the Administrator's broadly understood interest. Personal data may also be processed in a situation where they will be necessary to conclude a contract or its implementation.

11. You have the right to lodge a complaint with the competent supervisory authority within the meaning of the GDPR, when you believe that the processing of your personal data violates applicable law, in particular the provisions of the general regulation on the protection of personal data of April 27, 2016, which will apply after May 25, 2016. 2018

12. As a rule, your personal data is not transferred outside the EEA.

13. Your main right is to request access to your personal data, rectification, deletion or limitation of their processing. Rail Your right is to transfer your data, withdraw your consent to the processing of your personal data, as well as raise objections and the right to lodge a complaint with the supervisory authority.

IN ACCORDANCE WITH THE ABOVE, WE INFORM IN DETAIL ABOUT YOUR RIGHTS AND THE RELATED PROCEDURE.

Access to the data

1. Information on personal data is provided to data subjects by submitting an application in writing or in special cases electronically, i.a. in a situation where the data subject has provided his request electronically. The data controller has the right to verify whether a given person is actually a data subject in any form.

2. The administrator replies to the submitted request of the data subject within 1 month from the date of its receipt. The above deadline may be extended up to 2 months in the event of a difficult application or a large number of applications. In this situation, the Administrator is obliged to inform the data subject about the reason for the extension of the 1-month deadline for the fulfillment of the request.

3. The data controller, in the event of failure to act in connection with the request, provides, within 1 month, information about the reasons for not taking action and information about the possibility of lodging a complaint to the supervisory body and about the possibility of using legal remedies before a court.

4. If the requests regarding personal data are unjustified or excessive, the Data Administrator has the right to charge a fee of PLN 50.00, which is related to the cost of providing information, communication or taking the requested actions.

Your rights regarding the processing of your personal data:

In accordance with applicable regulations, you have the right to:

1.access to your data;

2. rectify your data;

3. delete your data ("the right to be forgotten");

4. restrictions on the processing of your data;

5. transfer your data;

6. objection;

7.not to be subject to decisions based solely on automated processing

The right to access data

1. The right to access personal data is a right that the data subject had, i.e. the right to access personal data and information about the processing process, as well as to request information on the personal data being processed.

2. In accordance with applicable law, the right to obtain information regarding your personal data covers the scope related to:

• the purpose of processing personal data;

• the category of personal data processed;

• the planned period of personal data storage, and if this is not possible, the criteria for determining this period;

• recipients of personal data or categories of recipients to whom personal data have been or will be disclosed, in particular about recipients in third countries or international organizations;

• establishing the source of their origin, if the personal data has not been collected from the data subject;

• the assumption regarding automated data processing, and in the case of profiling, also information about the consequences of such processing;

• information on the right to lodge a complaint with a supervisory authority;

• information on the right to request the Data Administrator to rectify, delete or limit the processing of personal data of the data subject and to object to such processing.

The right to rectify personal data

The right to rectify and correct data is a right that allows you to request rectification of your incorrect data at any time. The right to rectify personal data allows you to request that incomplete data be supplemented or updated. In the event of such a request, the Data Administrator corrects the personal data immediately, i.e. without undue delay, taking into account any obstacles.

The right to delete data

In accordance with applicable law, you have the right to request the deletion of your data if:

1.you have withdrawn your consent on the basis of which your data was processed and the Administrator has no other basis allowing for their further processing;

2. you have objected to the processing of your data for direct marketing purposes, which is necessary to perform a task carried out in the public interest, or processing on the basis of a legitimate interest carried out by the Administrator or a third party;

3. Your personal data has been unlawfully processed;

4. Your personal data must be removed in order to comply with the legal obligation provided for in the law of the European Union or the law of the Member State to which the Administrator is subject;

5. Your data was collected in relation to offering information society services to the child.

Right to restriction of processing

In accordance with applicable law, limitation