Privacy Policy

Last updated: 12 July 2026

This Privacy Policy explains how Berlin Express Kebab ("we", "us", or "our"), located at Trzebiatowska 27, 78-100 Kołobrzeg, Poland, collects, uses, and protects information in connection with our restaurant, this website, and our business listings on third-party platforms such as Google. We are committed to protecting your privacy and handling your personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable Polish law.

1. Who we are

Berlin Express Kebab is a restaurant business operating in Kołobrzeg, Poland. For any questions about this policy or your personal data, you can contact us using the details in the "Contact us" section below. For the purposes of the GDPR, Berlin Express Kebab is the data controller of the personal data described in this policy.

2. Information we collect

We keep data collection to a minimum. Depending on how you interact with us, we may collect:

• Contact details you provide voluntarily — such as your name and phone number when you call us to place an order, make a reservation, or ask a question.
• Order information — details of the items you order and any preferences or special requests, so we can prepare and fulfil your order.
• Reviews and public feedback — if you leave a review or rating on our Google Business Profile or other public platforms, that information is governed by the platform's own privacy policy as well as this one.
• Website usage data — this website is a static informational site. We do not use tracking cookies or advertising cookies. Our hosting provider (e.g. GitHub Pages or Netlify) may automatically log standard technical data such as IP address, browser type, and pages requested for security and reliability purposes.
• Map and embedded content — our contact page embeds a Google Maps view. When it loads, Google may receive technical information about your device in accordance with Google's privacy policy.

3. How we use your information

We use the information we collect only for legitimate business purposes, including to:

• Take, prepare, and fulfil food orders and reservations;
• Respond to your enquiries and provide customer service;
• Manage our business listings and respond to reviews;
• Maintain, secure, and improve our website;
• Comply with legal, accounting, and regulatory obligations.

4. Legal basis for processing

Under the GDPR, we rely on the following legal bases:

• Performance of a contract — to process and fulfil the orders and reservations you request;
• Legitimate interests — to operate, secure, and promote our restaurant, and to respond to enquiries and reviews;
• Consent — where you voluntarily provide information or contact us, which you may withdraw at any time;
• Legal obligation — where we are required to retain records by law.

5. Google Business Profile and third-party platforms

We maintain a business listing on Google (Google Business Profile) and may use the Google Business Profile API to manage our business information, respond to customer reviews, and keep details such as our address, opening hours, and phone number accurate. When you interact with our Google listing — for example by viewing it, calling us, requesting directions, or leaving a review — Google collects and processes that information under Google's Privacy Policy. We access only the business information and customer interactions that Google makes available to us as the verified business owner, and we use it solely to operate and improve our restaurant's service. We do not sell this data or use it for any purpose incompatible with this policy.

6. How we share information

We do not sell or rent your personal data. We may share limited information with trusted third parties only where necessary, including:

• Service providers who host our website or help us operate our business;
• Platform providers such as Google, where you interact with our listings;
• Authorities or advisors where required by law or to protect our legal rights.

7. Data retention

We keep personal data only for as long as necessary for the purposes described above, or as required to meet legal and accounting obligations. Order-related enquiries handled by phone are generally not stored beyond what is needed to fulfil the order.

8. Your rights

Under the GDPR, you have the right to:

• Access the personal data we hold about you;
• Request correction of inaccurate or incomplete data;
• Request deletion of your data ("right to be forgotten");
• Object to or restrict certain processing;
• Withdraw consent at any time, where processing is based on consent;
• Lodge a complaint with the Polish supervisory authority, the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, UODO).

To exercise any of these rights, please contact us using the details below.

9. Data security

We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, or misuse. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

10. Children's privacy

Our website and services are not directed at children, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can remove it.

11. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. We encourage you to review this page periodically.

12. Contact us

If you have any questions about this Privacy Policy or your personal data, please contact us:

• Berlin Express Kebab
• Trzebiatowska 27, 78-100 Kołobrzeg, Poland
• Phone: 788 575 545