Information of the personal data processing by Stary Młyn Dumpling.

“Your personal data is processed by Restaurators sp.z o.o. based in Toruń (87-100) at Wielkie Garbary Street 15/6, entered into the National Court Register kept by the District Court in Toruń, 7th Commercial Division of the National Court Register under KRS number: 0000710746, NIP: 5252733897 and REGON: 369044856,
with a share capital in the amount of PLN 5,000.00, which acts as the personal data administrator in the scope described below (hereinafter referred to as the “”Administrator””). The administrator processes your personal data in accordance with the requirements of the EU Regulation of the European Parliament and of the Council (EU) 2016/679, known as the general regulation on the protection of personal data (“”GDPR””). The following information is provided for information purposes only and does not require any action on your side.

Purposes, scope and legal grounds for processing your personal data:

The administrator processes your personal data, i.e. name, telephone number, e-mail address, etc., necessary in the first place
in order to perform the contract that connects him with you, to provide you with services or to take actions necessary to conclude a contract or start providing such services (pursuant to Article 6 (1) (b) of the GDPR), including for the purpose of correspondence, preparation of lists waiting, booking, fulfillment of catering orders, take-away orders or answers to asked questions).

In addition, the Administrator may also process your personal data based on your consent, pursuant to art. 6 sec. 1 lit. a GDPR (e.g. in terms of processing your image).

The administrator may also process your data
personal, e.g. name, telephone number, image, other special features, etc. due to purposes related to its legitimate interests, other than the performance of the contract and the provision of services
(based on Article 6 (1) (f) of the GDPR), i.e. in order to:

a) ensuring safety in the restaurant area (monitoring),

b) booking a table in a restaurant,

c) conducting litigation.

The administrator processes the collected personal data only to the extent necessary to achieve the purposes listed here.

Their provision is voluntary, however, failure to provide personal data by you may constitute an obstacle or prevent the conclusion of a contract or the provision of services to you by the Administrator.

The consent granted may be withdrawn at any time. Withdrawal of consent does not affect the lawfulness of the data processing processes that were made on its basis until its withdrawal. The consent should be given each time on a separate form.


Recipients of personal data:

In the course of the normal course of business, the Administrator may transfer your personal data to external recipients when it is necessary in business processes, ensuring high-quality services, as well as fulfilling the legal obligations incumbent on the Administrator.

The above includes, in particular, the Administrator’s partners and suppliers – providers of courier, postal, accounting, legal and ICT services.


Time of data processing

Your data is processed for the period necessary to fulfill the purposes described above, i.e. for the duration of the contract connecting you with the Administrator or the Administrator providing services to you,
and after its expiry / termination of the provision of services for the period required by law or necessary to implement the legitimate interests of the Administrator, including limitation
civil law claims.

If the basis for the processing of personal data is consent, the data will be processed until the consent is withdrawn or when the legitimate interest of the Administrator no longer requires their processing.


Processes of data transfer outside the EOG to international organizations

Your data will not be transferred to entities based outside the European Economic Area.


Your rights

In connection with the protection of personal data, you have a number of rights under the provisions of the GDPR. Belong to them:

1.The right to rectify data if it turns out that the processed data is incorrect,
2.The right to access your data, understood as the right to obtain information about the personal data being processed and the right to obtain a copy of it,
3.The right to request the deletion of personal data,
in cases specified in the provisions of the GDPR,
4.The right to request restriction of data processing,
5. The right to transfer the data that you have provided to the Administrator,
6. The right to object to the processing of data for purposes arising from the legitimate interests of the Administrator – after receiving the objection, the Administrator will not be entitled to process the personal data covered by the objection, unless:

1) demonstrates the existence of a valid, legally justified basis for data processing, which according to the law is considered superior to the interests, rights and freedoms of the data subjects,

2) the data will be necessary to establish, assert or defend claims.

They also have the right to lodge a complaint with the competent supervisory authority (the President of the Personal Data Protection Office) if they find that the processing of personal data by the Administrator violates the law.

In case of any questions or doubts related to the processing of your personal data, contact with the Administrator is possible at the following e-mail address: or by post to the following address: ul. Wielkie Garbary 15/6, 87-100 Toruń.