Privacy policy
Last updated: 2026-07-23
The Polish version of this privacy policy is the legally binding original. This English version is provided for convenience.
We care about your privacy. Below we explain what data we collect on pieno.pizza, why and on what basis, and what rights you have.
Data controller
The controller of your personal data is Harvest Koprowski spółka jawna, registered at Sukiennice 9a, 50-107 Wrocław, Poland, tax ID (NIP) 8971850314, operating the PIENO restaurant at Vespucciego 18d, 51-505 Wrocław.
Contact: email info@pieno.pizza, phone 695 100 645.
We have not appointed a Data Protection Officer. All data-protection matters should be addressed directly to the controller above.
Handling enquiries and reservations (forms)
Purpose: answering enquiries sent via the contact or events/catering form, handling table reservations, arranging events, catering or the mobile oven, preparing offers.
Legal basis: Art. 6(1)(b) GDPR (steps to enter into a contract) or Art. 6(1)(f) GDPR (legitimate interest of the controller — answering enquiries directed to the business).
Scope: name, email, phone number, message content and enquiry details (e.g. event type, date, number of guests, budget, location), plus technical data: IP, browser, entry page.
Retention: until the end of the correspondence or the reservation date + 12 months for potential complaints.
Analytics
Purpose: measuring page views, traffic sources and campaign performance.
Legal basis: Art. 6(1)(a) GDPR (your consent in the cookie banner — “Analytics” category).
Scope: cookie IDs, anonymised IP, device, browser, click path.
Retention: per Google Analytics 4 settings (up to 14 months).
Marketing and remarketing
Purpose: showing personalised PIENO ads on Google Ads and Meta Ads to people who visited the site.
Legal basis: Art. 6(1)(a) GDPR (your consent in the cookie banner — “Marketing” category).
Scope: advertising cookie IDs, fact of visit, pages viewed.
Retention: up to 90 days for remarketing lists.
Data recipients — tools we use
We use the following trusted providers (processors) under data processing agreements: the site's hosting provider; Resend, Inc. — sending emails from the forms (US); Google Ireland Ltd. — Google Tag Manager, Google Analytics 4, Google Ads, Maps (Ireland / EEA, US); Meta Platforms Ireland Ltd. — Meta Pixel / Conversions API (Ireland / EEA, US); zjedz.my — online table reservation system (Poland).
Some of these providers (Resend, Google, Meta) are based in or process data in the US. Transfers to the US are based on the Standard Contractual Clauses of the European Commission and the EU-US Data Privacy Framework (Commission Decision 2023/1795).
We do not sell or share your data with third parties for marketing purposes beyond those listed above.
Your rights
Under data protection law you have the right to: access your data (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17) — except data the law requires us to retain, restriction of processing (Art. 18), data portability (Art. 20), objection (Art. 21), and to withdraw consent at any time — without affecting processing done before withdrawal.
You also have the right to lodge a complaint with the Polish DPA (uodo.gov.pl).
To exercise any of these rights, write to info@pieno.pizza. We respond within 30 days.
Providing data is voluntary but necessary to handle your enquiry or reservation. We do not make solely automated decisions or profiling with legal effects.
Cookies and similar technologies
The site pieno.pizza uses cookies in three categories: essential (always on), analytics (consent required) and marketing (consent required). We remember your choice for 12 months. You can change your consent at any time — click “Manage cookies” in the footer.
By default (before consent) we operate in Google Consent Mode v2 with all signals set to “denied” — no advertising IDs are stored, no user profile is built.
Server logs
Every visit generates a technical log (IP, time, URL path, browser). Logs are retained for up to 30 days and are not linked to other personal data.
External links
Some links take you to external services (zjedz.my, Glovo, Google Maps, Instagram, Facebook). Once you leave our site we are not responsible for how those parties process your data — e.g. details you enter when booking on zjedz.my or ordering on Glovo are processed by their operators under their own privacy policies.
Policy updates
This privacy policy may be updated. Each version is dated at the top of this page. We notify about material changes via a banner on the site.