PRIVACY POLICY

Last updated: September 5, 2026

We care about the privacy of visitors to the Arabia Kebab website and users of our services. Below, we explain what personal data we may process, the purposes for which we use it, and the rights available to users.

1. PERSONAL DATA CONTROLLER

The controller of your personal data is:

GASTRO PASJA SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ

operating the Arabia Kebab restaurant

NIP: 6762676526

E-mail: [email protected]

Restaurant:

Arabia Kebab

Rynek Kleparski 5

31-150 Krakow

For matters related to the protection of personal data, you can contact us using the e-mail address provided above.

2. WHAT DATA MAY WE PROCESS?

Depending on how you use our website, we may process, among other things:

• the e-mail address provided in the sign-up form,

• data voluntarily provided when contacting us,

• IP address,

• information about your device and browser,

• information about how you use the website,

• information about pages visited and actions taken,

• information related to cookies and similar technologies.

We do not require you to provide more data than is necessary for a specific purpose.

3. NEWSLETTER, NEWS AND PROMOTIONS

If you sign up using the form available on our website, we may use the e-mail address you provide to send you information about Arabia Kebab, including in particular:

• menu updates,

• promotions and special offers,

• events,

• new products,

• information about the restaurant,

• other marketing information related to Arabia Kebab.

The legal basis for processing personal data for this purpose is your consent – Article 6(1)(a) of the GDPR.

Providing your e-mail address is voluntary.

You may withdraw your consent at any time by using the unsubscribe link included in an e-mail you receive or by contacting us at:

[email protected]

Withdrawal of consent does not affect the lawfulness of processing carried out before the consent was withdrawn.

4. WEBSITE FORMS

Data provided through forms available on our website is used exclusively for the purposes indicated in connection with the relevant form.

In the case of a form used to sign up for information about news and promotions, the primary purpose is to send marketing information related to Arabia Kebab.

The data will not be used for other purposes inconsistent with the original purpose without an appropriate legal basis.

5. COOKIES AND SIMILAR TECHNOLOGIES

Our website uses cookies and similar technologies.

Cookies are small pieces of information stored on a user's device while using a website.

We may use the following types of cookies and similar technologies:

ESSENTIAL COOKIES

These are necessary for the proper and secure operation of the website and for the use of its basic functions.

ANALYTICS COOKIES

These help us understand how users interact with the website, which pages they visit, and which elements of the website are most useful.

MARKETING COOKIES AND TRACKING TECHNOLOGIES

These help us measure the effectiveness of our advertising campaigns and – depending on the consent provided and the configuration of the relevant provider – conduct advertising activities, measure conversions, and create advertising audiences.

Cookies and technologies that are not necessary for the proper functioning of the website are used in accordance with the choices made by the user in the consent management panel.

Users may change or withdraw their consent regarding cookies.

6. GOOGLE TAG MANAGER

We use Google Tag Manager on our website – a tool used to manage tags and integrations implemented on the website.

Through Google Tag Manager, other analytics or marketing tools may be activated in accordance with the website configuration and the user's cookie preferences.

Google Tag Manager is a solution provided by Google.

Analytics and marketing technologies managed through Google Tag Manager are activated in accordance with the consent provided by the user, where such consent is required.

7. META PIXEL (FACEBOOK PIXEL)

We may use Meta Pixel (Facebook Pixel) on our website, a tool provided by Meta Platforms.

This technology helps us, among other things, to:

• measure the effectiveness of advertising campaigns conducted on Facebook and Instagram,

• analyze actions taken by users on our website after clicking on an advertisement,

• measure conversions,

• better evaluate advertising effectiveness,

• create advertising audiences – where permitted by the relevant settings and the consent provided by the user.

We use Meta Pixel in accordance with the user's preferences regarding marketing technologies.

8. TIKTOK PIXEL

We may also use TikTok Pixel on our website, a tool provided by TikTok.

This technology may help us to:

• measure the effectiveness of advertising campaigns conducted on TikTok,

• analyze actions taken by users on our website after interacting with an advertisement,

• measure conversions,

• optimize advertising campaigns,

• create advertising audiences – where permitted by the relevant settings and the consent provided by the user.

We use TikTok Pixel in accordance with the user's preferences regarding marketing technologies.

9. RECIPIENTS OF DATA

In connection with operating the website, communicating with users, and carrying out marketing activities, data may be processed by entities that provide services necessary for the operation of our website.

These may include, in particular, providers of:

• hosting and internet infrastructure,

• website management systems,

• form management systems,

• e-mail and newsletter services,

• analytics services,

• marketing tools,

• advertising platforms,

• IT services.

Depending on the services we use, these providers may include, among others, Google, Meta and TikTok.

We disclose data only to the extent necessary to achieve a specific purpose and in accordance with applicable law.

10. TRANSFERS OF DATA OUTSIDE THE EUROPEAN ECONOMIC AREA

Some technology providers used by our website may process data outside the European Economic Area (EEA).

Where such a transfer takes place, it is carried out using mechanisms provided for under applicable data protection laws, in particular on the basis of an appropriate European Commission decision or other appropriate safeguards provided for under the GDPR.

11. HOW LONG DO WE RETAIN DATA?

Personal data processed on the basis of consent is generally retained until the consent is withdrawn or until the data is no longer necessary for the purpose for which it was collected.

Data related to sending information about promotions and news may be processed until you unsubscribe from receiving such messages.

The retention period for information collected through cookies and analytics or marketing technologies may depend on the type of technology used and the settings of the relevant provider.

We may retain certain data for longer where required by applicable law or where necessary for the establishment, exercise or defense of legal claims.

12. YOUR RIGHTS

Under the GDPR, depending on the legal basis and circumstances of the processing, you may have the right to:

• access your personal data,

• receive a copy of your data,

• rectify inaccurate data,

• request the deletion of your data,

• request restriction of processing,

• data portability,

• object to processing – where applicable,

• withdraw your consent at any time where your data is processed on the basis of consent.

To exercise your rights, you can contact us at:

[email protected]

You also have the right to lodge a complaint with the competent supervisory authority – the President of the Personal Data Protection Office (UODO) in Poland.

13. MANAGING COOKIE CONSENT

During your first visit to the website, you can make choices regarding the use of optional cookies and similar technologies.

You may accept all available categories or limit your consent to selected categories.

Rejecting optional cookies does not prevent you from using the basic functions of the website.

Cookies and similar technologies that are not necessary for the proper functioning of the website are used after the user has made the appropriate choice, where applicable law requires consent.

You may subsequently change or withdraw your consent using the consent management mechanism available on the website.

14. DATA SECURITY

We implement appropriate technical and organizational measures designed to protect personal data against unauthorized access, accidental loss, destruction, alteration or unauthorized disclosure.

Access to personal data is granted only to persons and entities for whom such access is necessary to perform specific tasks.

15. LINKS TO EXTERNAL SERVICES

Our website may contain links to external websites and platforms, including social media services.

Once you visit an external service, the processing of personal data is governed by the policies of the operator of that service.

We encourage you to review the privacy policy of the relevant service before using it.

16. CHANGES TO THIS PRIVACY POLICY

This Privacy Policy may be updated periodically, particularly in the event of changes to applicable law, website functionality, or the technologies we use.

The current version of the Privacy Policy is always available on our website.