Introduction

Budapest Baristas is committed to protecting the privacy and personal data of our customers in accordance with the General Data Protection Regulation (GDPR). This policy outlines how we collect, process, store, and protect personal data within our coffee shop.

Data Collection

2.1. Types of Data Collected

We may collect the following types of personal data from our customers:

Contact information (e.g., name, email address, phone number)

Preferences and feedback (e.g., coffee preferences, customer surveys)

2.2. Data Collection Methods

We collect personal data through the following methods:

When customers provide information during the order process or when signing up for loyalty programs. Through CCTV cameras for security purposes, prominently notifying customers about their use.

Purpose of Data Collection

We collect personal data for the following purposes:

To process orders, provide services, and fulfill customer requests. To personalize customer experiences, improve services, and communicate special offers. To ensure the safety and security of customers and our premises. To comply with legal obligations, such as financial and tax requirements.

Data Storage and Retention

4.1. Data Storage

We store personal data in secure electronic systems and, if applicable, physical records.

4.2. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes outlined in this policy or as required by law. Once data is no longer needed, it will be securely deleted or destroyed.

Data Sharing and Third Parties

5.1. Third-Party Service Providers

We may share personal data with trusted third-party service providers who assist us in operating our coffee shop. These providers are contractually obligated to handle personal data securely and only for the purposes specified by us.

5.2. Legal Compliance

We may disclose personal data when required to do so by law or in response to valid requests from public authorities.

Data Subject Rights

6.1. Access and Rectification

Customers have the right to access and correct their personal data held by us. Requests for access or rectification should be submitted in writing to our Data Protection Officer.

6.2. Data Portability

Upon request, we will provide customers with their personal data in a structured, commonly used, and machine-readable format, where technically feasible.

6.3. Erasure and Objection

Customers have the right to request the erasure of their personal data or object to its processing under certain circumstances. Requests should be submitted in writing to our Data Protection Officer.

Data Security

We implement appropriate technical and organizational measures to protect personal data from unauthorized access, alteration, disclosure, or destruction. These measures include encryption, access controls, and staff training.

Contact Information

For any questions or concerns regarding this GDPR policy or our data processing practices, please contact:

office@budapestbaristas.hu