Privacy policy VIP EVENTS catering

OUR PERSONAL STATEMENT, COOKIES, THIRD-PARTIES

1. Data Administrator and Contact

The administrator of your personal data is VIP EVENTS CATERING, located in Warsaw (ul. Kłobucka 11, 02-699 Warsaw), REGON: 526172136, KRS: 0001054042. For any inquiries regarding data protection, you can contact us via email at info@vipeventscatering.pl or by phone at +48 799 357 905.

2. Purposes and Legal Basis for Data Processing

We process your personal data for the following purposes:

Order and Contract Fulfillment (Art. 6(1)(b) GDPR/RODO). We process data to accept and fulfill catering orders, issue invoices, and contact you regarding your order. This is necessary to fulfill the contract you enter into with us.
Compliance with Legal Obligations (Art. 6(1)(c) GDPR/RODO). We process data as required by legal regulations, including:
- The Accounting Act;
- The Tax Code;
- The Act on Counteracting Money Laundering and Terrorism Financing.
Legitimate Interest of the Administrator (Art. 6(1)(f) GDPR/RODO), including debt collection and defense against claims. We reserve the right to process personal data in an aggregated and anonymized form to improve our services and website.
Consent (Art. 6(1)(a) GDPR/RODO). In some cases, we may request consent to process data for specific purposes, such as:
- If you subscribe to our newsletter, we will process your email address based on your consent.
- Information about special dietary preferences and allergies. This is sensitive data, so processing requires explicit consent (Art. 9(2)(a) GDPR/RODO) and is necessary to fulfill specific order requirements (e.g., gluten-free diet, vegan diet, allergy information). This consent can be withdrawn at any time.

3. Categories of Personal Data.

We process the following categories of data

Dane identyfikacyjne: imię, nazwisko.
Contact details: e-mail address, telephone number, delivery address.
Dane dotyczące zamówienia: informacje o zamówionych produktach i usługach, data i godzina realizacji, miejsce dostawy, specjalne życzenia.
Dane finansowe: numer rachunku bankowego, dane do faktury.
Dane dotyczące preferencji żywieniowych i alergii (za zgodą): informacje o alergiach pokarmowych, nietolerancjach, preferencjach dietetycznych (np. wegetarianizm, weganizm).
Dane dotyczące korzystania ze strony internetowej: jeżeli korzystają Państwo z naszej strony internetowej, możemy zbierać informacje zawarte w plikach cookies.

4. Data Recipients

Your personal data may be shared with:

Processors: companies that provide services to us on the basis of data processing agreements;
Public Authorities: In cases where we are legally required to do so;
Other Entities: In exceptional circumstances.

5. Data Transfer Outside the EEA

Your personal data is not transferred outside the European Economic Area (EEA).

6. Data Retention Period

We retain your personal data for the period necessary to achieve the purposes for which they were collected, and thereafter:

For the duration of the contract, and after its termination, for the statute of limitations (typically 3 or 6 years, depending on the type of claim).
For the period required by law (e.g., invoice data for 5 years from the end of the year in which the invoice was issued).
Until an effective objection is raised or the purpose of processing ceases (e.g., completion of statistical analysis).
Until consent is withdrawn.

7. Data Subject Rights

You have the following rights:

Right of Access (Art. 15 GDPR/RODO). You can obtain information on whether we process your data, what data we process, for what purpose and on what basis, to whom we disclose it, and how long we store it.
Right to Rectification (Art. 16 GDPR/RODO). You can request the correction of inaccurate data or the completion of incomplete data.
Right to Erasure ("Right to Be Forgotten") (Art. 17 GDPR/RODO). You can request data deletion if the data is no longer needed for the purposes for which it was collected, you withdraw your consent, and no other legal basis for processing exists, or the data was processed unlawfully. However, we may not always be able to delete data (e.g., if we must retain it under legal obligations).
Right to Restriction of Processing (Art. 18 GDPR/RODO). You can request processing restriction, e.g., when disputing data accuracy, processing is unlawful but you do not want the data deleted, or the data is no longer needed by us but is needed by you for claims.
Right to Data Portability (Art. 20 GDPR/RODO). You can obtain the data you provided us in a structured, commonly used, machine-readable format and transfer it to another administrator, if processing is based on consent or a contract and is automated.
Right to Object (Art. 21 GDPR/RODO). You can object to data processing based on our legitimate interest (e.g., direct marketing). In the case of direct marketing, we will always consider your objection. In other cases, we will review your objection and inform you of our decision.
Right to Withdraw Consent (Art. 7(3) GDPR/RODO). If we process data based on consent, you can withdraw it at any time. Withdrawal of consent does not affect the legality of processing conducted before the withdrawal.

8. Right to Lodge a Complaint

If you believe that the processing of your personal data violates GDPR/RODO provisions, you have the right to lodge a complaint with the supervisory authority, which in Poland is the President of the Personal Data Protection Office (PUODO).

9. Profiling

We may process your data in an automated manner, including profiling, to tailor offers to your preferences. Profiling does not produce legal effects for you or significantly affect you in a similar way. You have the right to object to profiling.

10. Cookie Policy

Our website uses cookies. These are small text files stored on your device (computer, smartphone, tablet) when you visit our site. Cookies are used for:

Ensuring the proper functioning of the website;
Facilitating website use;
Analyzing website traffic;
Marketing purposes.

You can manage cookies through your web browser settings. You can block all cookies, accept only certain ones, or receive notifications about each saved cookie. However, blocking some cookies may make it difficult or impossible to use certain website features.

11. Data Security

We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, loss, destruction, or damage. We regularly update our security procedures.

12. Changes to the Privacy Policy

We reserve the right to make changes to this Privacy Policy. Any changes will be announced on our website.

13. Contact

If you would like to learn more about our privacy policy, please contact us:

E-mail: info@vipeventscatering.pl
Phone: +48 799 357 905

Last Updated: 27.02.2025 27.02.2025