Privacy policy

1. Administrator and contact

The administrator of your personal data is VIP EVENTS CATERING with its registered office in Warsaw (ul. Kłobucka 11, 02-699 Warsaw), REGON: 526172136, KRS: 0001054042. All issues related to the protection of personal data can be directed to the e-mail address: info@vipeventscatering.pl or by phone at +48 799 357 905.

2. Purposes and legal basis of data processing

We process your personal data for the following purposes:

Fulfillment of orders and contracts (Art. 6 sec. 1 letter b of the GDPR). We process data to accept and fulfill catering orders, issue invoices, contact regarding the order. This is necessary to fulfill the contract that you conclude with us.
Fulfillment of legal obligations (Art. 6 sec. 1 letter c of the GDPR). We process data because we are required to do so by law, in particular:
Accounting Act;
Tax Ordinance;
Act on Counteracting Money Laundering and Terrorist Financing.
The legitimate interest of the Administrator (Article 6 paragraph 1 letter f of the GDPR), including pursuing claims and defending against claims. We reserve the right to process personal data in an aggregated and anonymized manner to improve our services and website.
Consent (Article 6 paragraph 1 letter a of the GDPR). In some cases, we may ask for consent to process data for a specific purpose, e.g.:
If you subscribe to our newsletter, we will process your e-mail address based on your consent.
Information on special dietary preferences and allergies. This is sensitive data, therefore its processing requires express consent (Article 9 paragraph 2 letter a of the GDPR) and is necessary to fulfill specific order requirements (e.g. gluten-free, vegan diet, information on allergies). This consent may be withdrawn at any time.

3. Categories of personal data.

We process the following categories of data:

Identification data: first name, last name.
Contact data: e-mail address, telephone number, delivery address.
Order data: information about ordered products and services, date and time of delivery, place of delivery, special requests.
Financial data: bank account number, invoice details.
Data regarding dietary preferences and allergies (with consent): information about food allergies, intolerances, dietary preferences (e.g. vegetarianism, veganism).

Data regarding the use of the website: if you use our website, we may collect information contained in cookies.

4. Recipients of data

Your personal data may be shared with:

Processors: companies that provide services to us on the basis of data processing agreements; State authorities (in cases where we are required to do so by law);
Other entities (in exceptional situations).

5. Transfer of data outside the EEA

Your personal data is not transferred outside the European Economic Area (EEA).

6. Data storage period

We store your personal data for the period necessary to achieve the purposes for which they were collected, and then:

For the duration of the contract, and after its termination – for the limitation period for claims (usually 3 or 6 years, depending on the type of claim).
For the period required by law (e.g. invoice data – 5 years from the end of the year in which the invoice was issued).
P: Until an effective objection is filed or the purpose of processing ceases (e.g. completion of statistical analyses).
Until consent is withdrawn.

7. Rights of data subjects.

You have the following rights:

Right to access data (Article 15 of the GDPR). You can obtain information about whether we process your data, what data we process, for what purpose and on what basis, to whom we share it, how long we store it.
Right to rectify data (Article 16 of the GDPR). You can request that incorrect data be corrected or incomplete data be completed.
Right to delete data („right to be forgotten”) (Article 17 of the GDPR). You can request that data be deleted if, for example, the data is no longer necessary for the purposes for which it was collected, you have withdrawn your consent, and there is no other legal basis for processing, the data was processed unlawfully. We cannot always delete data, for example, if we have to store it due to legal regulations.
Right to restrict processing (Article 18 of the GDPR). You may request that processing be restricted, e.g. if you contest the accuracy of the data, the processing is unlawful but you do not want the data to be deleted, or if we no longer need the data but you need it to pursue claims. Right to data portability (Article 20 of the GDPR). You may receive your data that you have provided to us in a structured, commonly used and machine-readable format and transmit it to another controller if the processing is based on

ie consent or contract and in an automated manner.

Right to object (Article 21 of the GDPR). You may object to the processing of data based on our legitimate interest (e.g. direct marketing). In the case of direct marketing, we will always take the objection into account. In other cases, we will consider your objection and inform you of the decision.

Right to withdraw consent (Article 7 paragraph 3 of the GDPR). If we process data based on consent, you may withdraw it at any time. Withdrawal of consent does not affect the lawfulness of the processing carried out before its withdrawal.

8. Right to complain.

If you believe that the processing of your personal data violates the provisions of the GDPR, you have the right to lodge a complaint with the supervisory authority, which in Poland is the President of the Personal Data Protection Office (PUODO).

9. Profiling

We may process your data in an automated manner, including in the form of profiling, to tailor the offer to your preferences. Profiling does not have any legal effects on you or significantly affect you in a similar way. You have the right to object to profiling.

10. Cookie Policy

Our website uses cookies. These are small text files saved on your device (computer, smartphone, tablet) when you visit the website. Cookies are used to:

Ensure the proper operation of the website;
Facilitate the use of the website;
Analyze traffic on the website;
Marketing.

You can manage cookies using your web browser settings. You can block all cookies, accept only some, or receive notifications about each cookie being saved. However, please remember that blocking some cookies may make it difficult or impossible to use some of the website’s functions.

11. Data Security

We use appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, destruction or damage. We regularly update our security procedures.

12. Changes to the Privacy Policy

We reserve the right to change this Privacy Policy. We will inform you about any changes on our website.

13.  Contact

If you would like to learn more about the privacy policy, please contact us:

E-mail: info@vipeventscatering.pl
Phone: +48 799 357 905

Last update date: 27.02.2025