Privacy Policy
This privacy policy applies to your use of our site and describes how we collect, use, and disclose your personal data. This service is provided by The Old Mill Bistro, located at 54A ul. Rayko Daskalov, Plovdiv, Plovdiv Province, 4000, Bulgaria. We are committed to protecting your privacy and processing your personal data in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR).
Information We Collect
We collect different types of information in connection with your use of our online platform:
Information you provide to us directly: This includes personal data you give us when using our services, such as when making a reservation, ordering takeaway or delivery, requesting catering or event services, subscribing to a newsletter, or contacting us. This information may include your name, contact details (such as postal address), and details about your service requests.
Information collected automatically: When you visit or use our site, we may automatically collect certain information from your device or browser. This can include information about your visit, your IP address, browser type, operating system, referral source, length of visit, pages viewed, and navigation paths. This data helps us understand how our service is used and improve it. We may use cookies and similar technologies to collect this information.
How We Use Your Information
We use the information we collect for various purposes, based on different legal grounds:
To provide and manage our services: This includes processing your reservations, fulfilling takeaway and delivery orders, managing catering or event services, processing payments, and communicating with you about your requests. This processing is generally necessary for the performance of a contract with you or to take steps at your request before entering into a contract.
To communicate with you: We may use your contact details to respond to your inquiries, send you service-related notifications, or, if you have consented or we have a legitimate interest, send you marketing communications about our services that may be of interest to you.
To improve and maintain our service: We analyze automatically collected data to understand user behavior, troubleshoot issues, and make improvements to the functionality and user experience of our online platform. This is based on our legitimate interest in ensuring our service is effective and reliable.
For legal and compliance purposes: We may process your information when required by law, governmental request, or for fraud prevention and security purposes. This is based on our legal obligations.
Legal Basis for Processing
Our legal basis for collecting and using the personal data described in this policy depends on the specific context in which we collect it. We will collect and process personal data from you only (i) where we have your consent to do so, (ii) where the processing is necessary to perform a contract with you, or (iii) where the processing is in our legitimate interests and not overridden by your data protection interests or fundamental rights and freedoms, or (iv) where we have a legal obligation to collect and process your personal data.
Sharing Your Information
We do not sell your personal data. We may share your information with third parties only in the following circumstances:
Service Providers: We may share information with trusted third-party service providers who perform functions on our behalf, such as payment processing, website hosting, data analysis, and IT services. These third parties are obligated to protect your information and use it only for the purposes for which it was disclosed.
Legal Requirements: We may disclose your information if required to do so by law, in response to a court order, subpoena, or other legal process, or if we believe that disclosure is necessary to protect our rights, property, or safety, or the rights, property, or safety of others.
Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, your personal data may be transferred as part of that transaction.
Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. The criteria used to determine the retention periods include the duration of our relationship with you, legal obligations, and the nature of the data.
Your Data Protection Rights
Under applicable data protection laws, including GDPR, you have certain rights regarding your personal data:
The right to access: You have the right to request access to your personal data that we hold.
The right to rectification: You have the right to request that we correct any inaccurate or incomplete personal data we hold about you.
The right to erasure: You have the right to request the deletion of your personal data under certain circumstances.
The right to restrict processing: You have the right to request that we restrict the processing of your personal data under certain circumstances.
The right to data portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format and transmit it to another controller, where technically feasible.
The right to object to processing: You have the right to object to the processing of your personal data under certain circumstances, particularly when based on legitimate interests or for direct marketing.
The right to withdraw consent: If we are relying on your consent to process your personal data, you have the right to withdraw that consent at any time.
To exercise any of these rights, please contact us in writing using the address provided below.
Security
We implement appropriate technical and organizational measures designed to protect your personal data from unauthorized access, use, disclosure, alteration, or destruction. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.
Third-Party Links
Our online platform may contain links to third-party websites or services that are not operated by us. We are not responsible for the privacy practices or content of these third-party sites. We encourage you to review the privacy policies of any third-party sites you visit.
Children's Privacy
Our service is not directed to individuals under the age of 18. We do not knowingly collect personal data from children without parental consent. If we become aware that a child under 18 has provided us with personal data, we will take steps to delete such information.
Changes to This Privacy Policy
We may update this privacy policy from time to time. We will notify you of any significant changes by posting the new privacy policy on this page. We encourage you to review this privacy policy periodically for any changes.
Contact Us
If you have questions or concerns about this privacy policy or our data processing practices, you can contact us in writing at:
The Old Mill Bistro
54A ul. Rayko Daskalov
Plovdiv, Plovdiv Province
4000, Bulgaria