1. Who we are
The controller of the personal data processed through this website is Netpromotion Invest Kft. (seat: 1056 Budapest, Duna utca 3. Fsz. 1. ajtó, company registration number: 01-09-269936, tax number: 10907850-2-41), the operator of the Fiamma Pizza d’Arte restaurant at 1052 Budapest, Kristóf tér 8 (the “Operator”, “we”). Contact for data protection matters: info.netpromotion@gmail.com. We process personal data in accordance with Regulation (EU) 2016/679 (GDPR) and Act CXII of 2011 on the right of informational self-determination and on freedom of information (Infotv.).
2. What data we process and why
2.1 Visiting the website
When you open the site, our hosting provider (Vercel Inc.) processes technical data: IP address, date and time, pages requested, browser type and operating system. Purpose: delivering the site and keeping it secure. Legal basis: our legitimate interest (GDPR Art. 6(1)(f)) in operating a secure website. Server logs are kept for a maximum of 30 days.
2.2 Table reservations
Reservations made through the “Book a table” button are handled by our reservation partner Resos (Resos ApS, Denmark) on the Operator’s behalf. Data: name, e-mail address, phone number, date, time, number of guests, any note you add (e.g. allergies). Purpose: handling and confirming your reservation and contacting you about it. Legal basis: performance of a contract / steps prior to a contract (Art. 6(1)(b)). Retention: 2 years after the reservation date, unless an invoice or complaint requires longer. Resos processes the data as our processor under a data-processing agreement; its own notice is available at https://resos.com/privacy.
2.3 Contacting us
If you write to us by e-mail or phone, we process the data you provide (name, contact details, content of your message) to answer you. Legal basis: our legitimate interest in handling enquiries (Art. 6(1)(f)), or performance of a contract where the enquiry concerns a booking or event. Retention: 1 year after the matter is closed.
2.4 Group and event enquiries
For group or event requests we additionally process the name of the organiser or company, the planned date, headcount and budget. Legal basis: steps prior to a contract (Art. 6(1)(b)). Retention: 5 years if a contract is concluded (accounting rules), otherwise 1 year.
2.5 Invoicing
If you request an invoice, we process the name, address and, for companies, the tax number stated on it. Legal basis: legal obligation (Art. 6(1)(c), Hungarian Accounting Act). Retention: 8 years.
2.6 Reviews and social media
If you leave a review on Google, Tripadvisor or a social platform, that platform is the controller of your data; we only read and reply to the review. Our pages on Facebook and Instagram are operated jointly with Meta Platforms Ireland Ltd.; Meta’s notice applies: https://www.facebook.com/privacy/policy.
3. Who receives your data
Our processors: Vercel Inc. (hosting, USA – EU standard contractual clauses and EU-US Data Privacy Framework), Resos ApS (reservations, Denmark), Google Ireland Ltd. (e-mail and office tools) and our accountant (invoicing data only). We do not sell personal data and do not transfer it outside the EU except as described above, with the safeguards of GDPR Chapter V.
4. Cookies
See our Cookie Notice at fiamma-ristorante.hu/cookies.
5. Your rights
You may request access to, rectification or erasure of your personal data, restriction of processing, and data portability, and you may object to processing based on legitimate interest. Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing before withdrawal. Write to info.netpromotion@gmail.com; we answer within one month. You may also lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH, 1055 Budapest, Falk Miksa u. 9–11., ugyfelszolgalat@naih.hu, +36 1 391 1400, www.naih.hu) or bring the matter before a court.
6. Data security
We use HTTPS encryption, access control and up-to-date software, and we require the same from our processors.
7. Changes
We may update this notice; the current version is always published on this page with its effective date.