Privacy policy

1. Data controller

The controller of your personal data is Masurian Farm Sp. z o.o. Sp. k., registered office: ul. Tracka 5, 10-364 Olsztyn, Poland, entered in the National Court Register (KRS) under no. 0000619560, NIP (tax ID) 1231318435, REGON 364534231 - the operator of The Farm restaurant, ul. Mokotowska 8, 00-641 Warsaw.

For anything concerning your personal data, contact us at rezerwacje@the-farm.pl, by phone on +48 725 320 420, or by post at our registered office.

2. Reservation form

When you send the reservation form, you give us your name, phone number, e-mail address, chosen date and time, number of guests and, optionally, a message.

We process this data to consider your reservation request, contact you about it and confirm it (Art. 6(1)(b) GDPR - steps taken at your request before entering into a contract). We send an automatic acknowledgement of receipt to the e-mail address you provide.

Providing the data is voluntary, but without your name, phone number, e-mail address, date and number of guests we cannot handle the reservation. You can also book by phone.

We keep reservation requests for as long as needed to handle the booking and then for no longer than 12 months after the date of the visit, unless keeping them longer is necessary to establish, exercise or defend legal claims.

3. Technical data and security

Every visit is automatically logged by the server with basic technical data: IP address, date and time, the page visited and browser information. We also use the IP address briefly to limit how many requests can be sent from one address and to protect the form from abuse.

The legal basis is our legitimate interest in keeping the site secure and working (Art. 6(1)(f) GDPR). This data is not used to identify or profile you; the request counter is kept in server memory for 10 minutes, and server logs for a short period set by the hosting provider.

4. Cookies

the-farm.pl itself does not store cookies or similar technologies, and uses no analytics or advertising tools.

The contact page can display a Google Maps map. The map only loads after you click “Show map”. From that moment Google LLC may store cookies on your device and process data under its own privacy policy (policies.google.com/privacy). If you prefer not to, use the link that opens the location directly in Google Maps, or the address we give.

5. Recipients

Your data may only be received by companies that help us run the site and handle reservations, acting on our behalf:

• Vercel Inc. - website hosting and form handling,
• Google Ireland Ltd. / Google LLC - the e-mail service that carries reservation requests, and Google Maps (if you choose to display it),
• providers of IT and website services to us.

6. Transfers outside the EEA

Vercel Inc. and Google LLC are based in the United States. Data is transferred on the basis of the European Commission's adequacy decision (EU-U.S. Data Privacy Framework) and, where needed, the Commission's standard contractual clauses.

7. Your rights

You have the right to:

• access your data and receive a copy of it,
• have your data corrected,
• have your data erased,
• restrict processing,
• data portability,
• object to processing based on our legitimate interest,
• lodge a complaint with the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, Poland.

8. Automated decisions

We do not make automated decisions about you and do not profile your data.

9. Changes to this policy

We update this policy when the way the site works or the law changes. The current version is always available on this page.