Privacy and cookie policy
Last updated: October 18, 2026
Here we explain what data the amarone.zgora.pl website collects, why, and who we share it with. We keep it simple, without legal jargon.
Who is the data controller
The data controller is KARIBA Sp. z o.o. Sp. k., NIP 9292019671, which runs the Amarone Italian Food & Steak restaurant, ul. Stefana Żeromskiego 16, 65-066 Zielona Góra.
For any questions about personal data, write to kontakt@amarone.zgora.pl or call +48 68 327 01 67.
The “Ask about dates” form
When you send an enquiry about a party or a meeting, we collect the data from the form: your full name or company name, phone number, e-mail, type of event, date, number of guests and your message. The configurator also records menu choices, quantities, extras, an estimated price and an optional song description. No audio file is generated at this stage.
We use this data only to reply to your enquiry and prepare an offer. Legal basis: steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR). Providing the data is voluntary, but without it we cannot reply.
We keep the data for up to 12 months from our last contact. If we enter into a contract, we keep it for as long as required by tax law and the rules on limitation of claims. Data awaiting phone verification and code records are removed within 25 hours. The confirmed configuration and song description are kept with the inquiry under the retention rules above.
To protect against spam, we store a hash of your IP address (not the address itself) to limit the number of submissions from one place.
Google Analytics (only with your consent)
If you click “Accept” in the cookie banner, Google Analytics 4 stores cookies (_ga, _ga_…, valid for up to 2 years) and measures how you use the website: the pages you visit and clicks on booking, phone or directions. This tells us what our guests find useful.
Legal basis: your consent (Art. 6(1)(a) GDPR). Without your consent, Google does not store cookies and receives only anonymous signals without identifiers (Google Consent Mode).
You can change your consent at any time using the “Cookie settings” link at the bottom of the page. The provider is Google Ireland Ltd; data may be transferred to the USA under the EU-US Data Privacy Framework.
Statistics without cookies
We also measure website traffic with Vercel Web Analytics. It does not use cookies and does not identify individual people; it only shows aggregate visit numbers. Legal basis: our legitimate interest in keeping the website running properly (Art. 6(1)(f) GDPR).
Data stored in your browser
The website also stores two pieces of information it needs to work: the lang cookie with your chosen language and your cookie choice (in the browser’s storage). They are not used for tracking and do not require consent.
Who we share data with
We use trusted providers who process data on our behalf and only for the purposes described above:
- Vercel Inc. (USA): website hosting and server logs containing IP addresses, kept briefly for security reasons;
- Supabase (servers in the EU, Paris): storing enquiries from the form;
- SMSAPI (Poland): phone verification by SMS code, a customer thank-you and staff notifications after the inquiry is verified;
- Resend (USA) and Google (e-mail): sending the enquiry to the restaurant’s inbox;
- Google Ireland Ltd: Google Analytics, only after your consent.
Transfers of data outside Europe
Some providers are based in the USA. Data is transferred there under the EU-US Data Privacy Framework or standard contractual clauses approved by the European Commission.
Bookings and external links
Table booking runs on Tableo, and the steak menu on steQr. Links also lead to Google Maps, Instagram and Facebook. These services have their own privacy policies; they process the data you provide there on their own terms.
Your rights
You have the right to:
- access your data and receive a copy of it;
- have incorrect data corrected;
- have your data erased or its processing restricted;
- data portability;
- object to processing based on legitimate interest;
- withdraw your consent at any time, without affecting earlier processing;
- lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, UODO), ul. Stawki 2, 00-193 Warszawa.
Changes to this policy
We do not make automated decisions and do not profile our guests. If we change how we use data, we will update this page and the date at the top.