Privacy Policy

1. Controller Information

2. Information We Collect

2.1 Personal Information

We collect personal information that you voluntarily provide to us when:

• Making restaurant reservations
• Placing orders for delivery or takeaway
• Requesting catering services
• Contacting us through our website or phone
• Signing up for newsletters or promotional communications
• Participating in surveys or feedback forms

This information may include:

• Name and contact details (email address, phone number)
• Billing and delivery addresses
• Dietary preferences and restrictions
• Special occasion information
• Payment information (processed securely by third-party payment processors)
• Communication preferences

2.2 Automatically Collected Information

When you visit our website, we may automatically collect:

• IP address and browser information
• Device and operating system information
• Website usage patterns and preferences
• Referring website information
• Date and time of visits
• Cookies and similar tracking technologies (see our Cookie Policy)

3. How We Use Your Information

We process your personal data for the following purposes:

3.1 Service Provision (Legal Basis: Contract Performance)

• Processing and confirming restaurant reservations
• Fulfilling food orders and delivery services
• Providing catering services for events
• Processing payments and managing billing
• Communicating about your orders and reservations
• Accommodating dietary restrictions and special requests

3.2 Customer Service (Legal Basis: Legitimate Interest)

• Responding to customer inquiries and feedback
• Resolving complaints and service issues
• Providing customer support
• Improving our service quality

3.3 Marketing and Communications (Legal Basis: Consent)

• Sending newsletters and promotional offers
• Informing you about new menu items and services
• Sharing information about special events and seasonal offerings
• Conducting customer satisfaction surveys

3.4 Legal Compliance (Legal Basis: Legal Obligation)

• Maintaining records for tax and accounting purposes
• Complying with food safety regulations
• Meeting health and safety requirements
• Responding to legal requests and court orders

4. Information Sharing and Disclosure

We may share your personal information in the following circumstances:

4.1 Service Providers

We work with trusted third-party service providers who assist us in:

• Payment processing and financial transactions
• Food delivery services
• Website hosting and maintenance
• Email marketing and communication services
• Customer support systems
• Analytics and website optimization

4.2 Legal Requirements

We may disclose your information when required by law, including:

• Compliance with legal processes and court orders
• Cooperation with law enforcement investigations
• Protection of our rights and property
• Response to health and safety emergencies

4.3 Business Transfers

In the event of a merger, acquisition, or sale of business assets, customer information may be transferred as part of the transaction, subject to appropriate data protection safeguards.

5. Data Security

We implement appropriate technical and organizational security measures to protect your personal data:

• Encryption of sensitive data in transit and at rest
• Secure payment processing through PCI DSS compliant providers
• Regular security assessments and updates
• Access controls and staff training on data protection
• Secure backup and recovery procedures
• Network security and firewall protection

While we strive to protect your personal information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security but are committed to protecting your data using industry best practices.

6. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this policy:

• Customer records: 7 years from last interaction (for tax and legal compliance)
• Reservation data: 2 years from reservation date
• Marketing communications: Until you unsubscribe or withdraw consent
• Website analytics: 26 months from collection
• Payment information: As required by payment processors and financial regulations
• CCTV footage: 30 days (for security purposes)

When the retention period expires, we will securely delete or anonymize your personal data unless we are required to retain it for legal or regulatory purposes.

7. Your Rights Under GDPR

As a data subject under the General Data Protection Regulation (GDPR), you have the following rights:

7.1 Right of Access

You have the right to request access to your personal data and receive information about how we process it.

7.2 Right to Rectification

You can request correction of inaccurate or incomplete personal data.

7.3 Right to Erasure ("Right to be Forgotten")

You can request deletion of your personal data under certain circumstances.

7.4 Right to Restrict Processing

You can request limitation of processing of your personal data in specific situations.

7.5 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used format and transfer it to another controller.

7.6 Right to Object

You can object to processing of your personal data for direct marketing or other legitimate interest purposes.

7.7 Right to Withdraw Consent

Where processing is based on consent, you can withdraw it at any time without affecting the lawfulness of processing based on consent before its withdrawal.

8. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience and analyze website usage. For detailed information about our use of cookies, please refer to our Cookie Policy.

You can manage your cookie preferences through our cookie consent banner or by adjusting your browser settings.

9. International Data Transfers

Your personal data is primarily processed within the European Union. If we transfer data to countries outside the EU/EEA, we ensure appropriate safeguards are in place:

• Adequacy decisions by the European Commission
• Standard Contractual Clauses approved by the European Commission
• Binding Corporate Rules for multinational corporations
• Certification schemes and codes of conduct

10. Children's Privacy

Our services are not directed to children under 16 years of age. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal data from a child under 16 without parental consent, we will take steps to delete such information promptly.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes:

• We will update the "Last updated" date at the top of this policy
• We will notify you of material changes via email or website notice
• We will obtain your consent for changes that materially affect your rights

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

12. Complaints and Supervisory Authority

If you have concerns about our data processing practices, please contact us first at privacy@discovpbms.life. We are committed to resolving any privacy concerns promptly and fairly.

You also have the right to lodge a complaint with the relevant data protection supervisory authority:

13. Contact Information

For any questions, concerns, or requests related to this Privacy Policy or our data processing practices, please contact us: