1. General provisions
This privacy policy describes the rules for processing personal data of people using the layla-restobar.pl website and contacting Layla Resto Bar by phone, email or social media in order to make a reservation or arrange an event.
2. Data controller
The controller of personal data is Le Gout Sp. z o.o., VAT ID (NIP): 6751695945, REGON: 382623506, KRS: 0000772982, registered at ul. św. Anny 9, 31-008 Kraków, Poland ("Controller"). Contact for all matters relating to data protection: hello@layla-restobar.pl or by phone: +48 733 231 033.
3. What data we process and why
We do not run an online reservation form - reservations are accepted by phone, email or through Facebook. In connection with this, we process:
- Data provided to book a table or arrange an event (e.g. name, phone number, email address, date, number of guests) - legal basis: Article 6(1)(b) GDPR (taking steps prior to entering into a contract, and its performance).
- Data provided in emails or on social media in order to respond to an inquiry - legal basis: Article 6(1)(f) GDPR (the Controller's legitimate interest in handling correspondence).
- Technical browser data (e.g. the selected light/dark theme) stored locally in the browser solely to display the site correctly - this data is never sent to the Controller or to third parties.
4. Cookies
The layla-restobar.pl website does not use analytics, marketing or tracking cookies. The only data stored locally in the browser (via localStorage/sessionStorage) relates to technical display settings and stays exclusively on the user's device.
5. Data retention period
Data related to a reservation or event is kept for as long as necessary to fulfil it, and afterwards for the period required by law (e.g. tax regulations) or until any potential claims become time-barred. Correspondence is kept no longer than necessary to handle the relevant matter.
6. Recipients of data
Data may be entrusted to entities supporting our business (e.g. website hosting providers, accounting office) solely to the extent necessary for them to perform their tasks, under data processing agreements. We do not transfer data outside the European Economic Area.
7. Rights of the data subject
Every person whose data we process has the right to:
- access their data,
- rectify their data,
- erase their data,
- restrict processing,
- data portability,
- object to processing,
- lodge a complaint with the President of the Personal Data Protection Office (Poland's supervisory authority) if they believe the processing infringes GDPR.
To exercise the rights above, please contact us at: hello@layla-restobar.pl.
8. Voluntariness of providing data
Providing personal data is voluntary, but necessary to make a reservation, respond to an inquiry, or arrange an event.
9. Changes to this privacy policy
We reserve the right to make changes to this privacy policy. The current version is always available on this page.
Last updated: September 16, 2026.