Privacy Policy

Privacy Policy

Smak Curry, operating under ENESSO SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ, respects the privacy of visitors to its website and customers using its online ordering and reservation services.

This Privacy Policy explains how we collect, use, store, and protect personal data when you use the website: https://smakcurry.pl/ and https://order.smakcurry.pl/

The processing of personal data is carried out in accordance with the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR/RODO) and applicable Polish data protection legislation. The GDPR requires organisations to explain who processes personal data, why it is processed, the legal basis, retention periods and the rights available to individuals.

1. Data Controller

The controller of your personal data is:

ENESSO SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ
NIP: 9512633173
REGON: 543106005
KRS: 0001202377
ul. Wawrzyńca Surowieckiego 8, lok. 801
02-785 Warszawa
Poland

The company operates the Smak Curry – Kuchnia Indyjska restaurant and its online services.

The company is registered as a limited liability company (spółka z ograniczoną odpowiedzialnością). The KRS extract records the company’s registration in the National Court Register and its registered office in Warsaw.

For privacy-related matters, you may contact us using the contact details provided on our website.

Restaurant telephone: +48 452 670 585

2. What Personal Data We Collect

Depending on how you use our website and services, we may collect the following categories of personal data:

Contact information

  • First and last name
  • Telephone number
  • Email address
  • Other contact information you voluntarily provide

Online orders

When you place an order through our website, we may process:

  • First and last name
  • Telephone number
  • Email address
  • Billing information
  • Delivery address, where delivery is selected
  • Company name and NIP, where provided
  • Order details
  • Products purchased
  • Quantity and price of products
  • Order notes or special instructions
  • Selected delivery or pickup method
  • Payment status and transaction information

Restaurant reservations

When you make a table reservation, we may process:

  • Name
  • Telephone number
  • Email address, where provided
  • Reservation date and time
  • Number of guests
  • Additional information or requests provided by you

Contact forms

If you contact us through a contact form, email or another communication channel, we may process the information you provide in order to respond to your enquiry.

Technical information

When you visit our website, certain technical information may be automatically collected, such as:

  • IP address
  • Browser type and version
  • Device type
  • Operating system
  • Date and time of access
  • Pages visited
  • Basic technical information concerning your interaction with the website

The exact information collected depends on the technical configuration of the website, WordPress, WooCommerce, FoodOrd and other services used by the website.

3. How We Use Your Personal Data

We may use your personal data for the following purposes:

Processing and fulfilling online orders

We use your information to:

  • Receive and process your order
  • Prepare your food order
  • Arrange delivery or pickup
  • Contact you regarding your order
  • Send order confirmations and updates
  • Process refunds, cancellations or complaints
  • Maintain records of transactions

Restaurant reservations

We use reservation information to:

  • Accept and manage reservations
  • Confirm reservation details
  • Contact you if there is an issue with your reservation
  • Manage the restaurant’s seating and reservation schedule

Customer communication

We may use your information to respond to:

  • Questions
  • Contact requests
  • Complaints
  • Requests concerning orders or reservations
  • Other enquiries sent to us

Legal and accounting obligations

We may process personal data where necessary to:

  • Comply with applicable laws
  • Maintain accounting and tax records
  • Respond to lawful requests from public authorities
  • Establish, exercise or defend legal claims
  • Prevent fraud and misuse of our services

Website operation and security

We may process technical information to:

  • Maintain and operate the website
  • Detect technical problems
  • Protect the website against fraudulent or malicious activity
  • Improve website security and reliability

Marketing

Where required by law, we may use your personal data for marketing communications only where we have an appropriate legal basis, including your consent where consent is required.

You may withdraw your consent to marketing communications at any time.

4. Legal Basis for Processing

Depending on the circumstances, we process personal data on the following legal bases under Article 6(1) GDPR:

Performance of a contract – Article 6(1)(b)

This applies where processing is necessary to:

  • Process your online order
  • Arrange delivery or pickup
  • Manage a reservation
  • Communicate with you regarding an order or reservation
  • Provide services requested by you

Legal obligation – Article 6(1)(c)

This applies where we are required to process information to comply with legal obligations, including accounting, tax and other statutory requirements.

Legitimate interests – Article 6(1)(f)

We may process data where necessary for our legitimate interests, such as:

  • Website security
  • Fraud prevention
  • Handling complaints
  • Protecting our legal rights
  • Maintaining business records
  • Improving our services
  • Managing and defending legal claims

We will balance these interests against your rights and freedoms.

Consent – Article 6(1)(a)

Where consent is required, we will ask for your consent before processing your personal data for the relevant purpose.

You may withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

These legal bases correspond to the lawful processing grounds recognised under the GDPR.

5. Online Payments

If you choose to pay for your order online, payment processing may be provided by PayU S.A.

Payment information required to process a transaction may be transferred to PayU for payment processing, transaction verification, fraud prevention and related payment services.

PayU states that, for payment transactions in Poland, PayU S.A. is the controller of personal data processed by PayU for the relevant payment transaction.

We do not intend to store your complete payment card details on our website.

Payment information is handled through the payment provider’s systems according to its applicable security and privacy policies.

You should also review PayU’s privacy information when using its payment services.

PayU Poland

6. Online Ordering Platform

Our website uses an online ordering system to allow customers to browse our menu and place food orders.

The ordering system may process information necessary to:

  • Maintain your shopping cart
  • Process your order
  • Calculate the order total
  • Manage pickup or delivery
  • Communicate order information
  • Maintain order records

Where WooCommerce or related extensions are used, customer information such as name, email address, telephone number, billing information, order information and payment-related information may be stored in the website’s database according to the configuration of the website.

7. Restaurant Reservations

If you use our reservation service, the information you provide will be used to manage your table reservation.

This may include:

  • Your name
  • Telephone number
  • Email address
  • Number of guests
  • Reservation date and time
  • Additional reservation requests

We may contact you when necessary to confirm, modify or clarify your reservation.

Reservation information will not be used for unrelated marketing purposes unless we have an appropriate legal basis to do so.

8. Who May Receive Your Personal Data

We may share personal data with trusted service providers where this is necessary to operate our business and provide our services.

Depending on the services you use, recipients may include:

  • Website hosting providers
  • Website and IT service providers
  • WooCommerce and related service providers
  • Food ordering system providers
  • Payment service providers, including PayU
  • Accounting and financial service providers
  • Delivery service providers, where applicable
  • Email and communication service providers
  • Professional advisers, where necessary
  • Public authorities where disclosure is legally required

We only provide third parties with the information necessary for the relevant service or legal purpose.

WooCommerce also notes that payment gateways may receive information necessary to process transactions, which can include customer and billing information.

9. International Transfers

Some technical service providers used by websites may process personal data outside the European Economic Area.

Where personal data is transferred outside the European Economic Area, we will take appropriate measures required by applicable data protection legislation, such as using an adequacy decision or appropriate contractual safeguards where applicable.

10. How Long We Keep Personal Data

We retain personal data only for as long as necessary for the purposes for which it was collected, unless a longer period is required by law.

For example:

Orders and transaction records

Order and accounting information may be retained for the period required by applicable tax and accounting legislation.

Reservations

Reservation information may generally be retained for as long as reasonably necessary to manage the reservation and related business records.

Contact enquiries

Contact information may be retained for as long as necessary to respond to the enquiry and handle any related matter.

Marketing

Where processing is based on consent, marketing data will be retained until you withdraw your consent, unless another lawful basis applies.

Legal claims

Certain information may be retained for the period necessary to establish, exercise or defend legal claims.

11. Your Rights Under GDPR

Subject to applicable legal conditions and limitations, you have the right to:

  • Access your personal data
  • Obtain a copy of your personal data
  • Correct inaccurate or incomplete personal data
  • Request deletion of your personal data
  • Request restriction of processing
  • Object to certain processing
  • Receive your personal data in a structured, commonly used and machine-readable format where the right to data portability applies
  • Withdraw consent where processing is based on consent
  • Object to direct marketing
  • Lodge a complaint with the supervisory authority

The Polish supervisory authority is:

President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych)
ul. Stanisława Moniuszki 1A
00-014 Warszawa
Poland

UODO confirms the rights of individuals to access, rectify, erase, restrict or object to processing where applicable, as well as the right to lodge a complaint with the supervisory authority.

12. How to Exercise Your Rights

To exercise your privacy rights, please contact us using the contact details available on our website or contact us at the restaurant telephone number: +48 452 670 585

When submitting a request, please provide enough information for us to identify the relevant request.

We may need to verify your identity before fulfilling certain requests in order to protect your personal data from unauthorised disclosure.

We will respond to requests within the time period required by applicable data protection legislation.

13. Cookies

Our website uses cookies and similar technologies.

Cookies may be used for purposes such as:

  • Ensuring that the website functions correctly
  • Maintaining your shopping cart
  • Remembering your preferences
  • Supporting the ordering process
  • Maintaining user sessions
  • Improving website performance and security
  • Measuring website usage, where applicable
  • Supporting other website functionality

Some cookies are necessary for the operation of the website and cannot be disabled through normal website settings.

Where consent is required for optional cookies or similar technologies, we will request your consent before using them.

Where applicable, you can change or withdraw your cookie preferences through the cookie settings available on the website.

The EDPB states that where consent is required, it must involve an affirmative action and users must be able to withdraw consent as easily as they gave it.

14. Shopping Cart and Technical Cookies

Our online ordering system may use cookies or similar technologies to remember information such as:

  • Items added to your cart
  • Your ordering session
  • Selected ordering preferences
  • Information necessary to complete the checkout process

Without certain necessary cookies, parts of the online ordering service may not function correctly.

15. Data Security

We take reasonable technical and organisational measures to protect personal data against:

  • Unauthorised access
  • Accidental loss
  • Destruction
  • Alteration
  • Unauthorised disclosure
  • Other unlawful processing

However, no method of transmission or electronic storage can be guaranteed to be completely secure.

16. Children’s Privacy

Our website and services are intended primarily for adults.

We do not knowingly collect personal data from children for purposes that are not permitted under applicable law.

If you believe that a child has provided us with personal data without appropriate authorisation, please contact us so that we can investigate and take appropriate action.

17. Allergies and Intolerances

Food allergy and intolerance information is important for customer safety.

If you have a food allergy or intolerance, or you are ordering for someone who does, please contact the restaurant directly before placing an order.

Restaurant telephone: +48 452 670 585

Do not place an order if you cannot obtain the allergy information you require.

Please avoid entering unnecessary health or other sensitive personal information into website forms or order notes.

18. Third-Party Websites

Our website may contain links to third-party websites or services.

We are not responsible for the privacy practices, security or content of third-party websites.

When you visit a third-party website, you should review its privacy policy before providing personal information.

19. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:

  • Changes to our services
  • Changes to the website
  • Changes to the technology we use
  • Changes to applicable legislation
  • Changes to our data processing practices

The latest version will always be published on this page.

The date at the top of this Privacy Policy indicates when it was last updated.

20. Contact

If you have any questions about this Privacy Policy or how we process your personal data, please contact us.

ENESSO SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ
Smak Curry – Kuchnia Indyjska
NIP: 9512633173
KRS: 0001202377
ul. Wawrzyńca Surowieckiego 8, lok. 801
02-785 Warszawa
Poland

Telephone: +48 452 670 585