Privacy Policy

Last updated: December 2024

Data Collection

The data we collect includes personal information such as your name, email address, phone number, and reservation preferences when you make bookings or contact us. We also collect technical information including IP addresses, browser types, and website usage data through cookies and analytics tools. When you visit our restaurant, we may collect additional information for service delivery and payment processing.

How We Use Your Information

We explain how we use your information in this section to ensure transparency about our data processing activities. We use your personal data to process reservations, provide customer service, send booking confirmations, and improve our services. We may also use your information to send promotional communications about our restaurant, special offers, and events, but only with your explicit consent. Your data helps us personalize your dining experience and maintain our service quality.

Legal Basis for Processing (GDPR)

Under the General Data Protection Regulation (GDPR), we process your personal data based on the following legal grounds:

• Contract performance: To fulfill reservation agreements and provide dining services
• Legitimate interests: To improve our services, prevent fraud, and ensure restaurant security
• Consent: For marketing communications and optional services
• Legal obligations: To comply with accounting, tax, and health regulations

Data Sharing

We do not sell your personal information to third parties. We may share your data with trusted service providers who assist us in operating our restaurant, processing payments, or providing customer service. These partners are contractually bound to protect your information and use it only for specified purposes. We may also disclose information when required by law or to protect our legal rights.

Data Retention

We retain your personal information only as long as necessary to fulfill the purposes for which it was collected. Reservation data is typically kept for 3 years for accounting and customer service purposes. Marketing consent records are maintained until you withdraw consent. Technical data and cookies are usually retained for shorter periods as described in our cookie policy.

Your Rights Under GDPR

As a data subject under GDPR, you have the following rights regarding your personal information:

• Right of access: Request copies of your personal data
• Right to rectification: Request correction of inaccurate or incomplete data
• Right to erasure: Request deletion of your personal data
• Right to restrict processing: Request limitation of how we use your data
• Right to data portability: Request transfer of your data to another service
• Right to object: Object to processing based on legitimate interests
• Right to withdraw consent: Withdraw consent for marketing communications

Cookies and Tracking

Our website uses cookies to enhance your browsing experience and analyze website traffic. Essential cookies are necessary for basic website functionality, while analytics and marketing cookies require your consent. You can manage your cookie preferences through our cookie banner or your browser settings. For detailed information about the cookies we use, please see our Cookie Policy.

Data Security

PlayOfCpim implements appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. We use SSL encryption for data transmission, secure servers for data storage, and regular security assessments. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

International Data Transfers

Your personal data is primarily processed within the European Union. If we transfer data outside the EU, we ensure appropriate safeguards are in place, such as adequacy decisions by the European Commission or standard contractual clauses. We will inform you of any such transfers and the safeguards applied.

Children's Privacy

Our services are not directed at children under 16 years of age. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately so we can delete such information.

Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the updated policy on our website and updating the "Last updated" date. We encourage you to review this policy periodically.

Contact Information

If you have any questions about this privacy policy or our data practices, or if you wish to exercise your rights, please contact us at:

Supervisory Authority

You have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) if you believe we have not handled your personal data in accordance with GDPR. You can contact them at autoriteitpersoonsgegevens.nl or by phone at +31 70 888 8500.