Privacy Policy

This Privacy Policy explains how we collect, use and protect personal data when you visit food-adventure.net or contact us about a culinary experience in the United Kingdom. We keep data collection to the minimum necessary, we do not run advertising trackers, and this website uses no database.

1. Data controller

The controller of your personal data is:

References to "we", "us" and "our" in this policy mean the controller identified above, operating the website food-adventure.net.

2. What data we collect

2.1 Data you give us directly

• Identification and contact data — your name, email address and, if you provide it, telephone number.
• Enquiry data — the venue or experience you are interested in, your preferred dates, the number of guests and any notes you send us.
• Requirements data — dietary requirements, allergies and mobility needs, where you choose to tell us. Allergy information may constitute health data; we process it only to pass it to the restaurant and only with your consent.
• Booking and billing data — where you proceed to a booking: billing address, invoice details and payment reference. We never see or store full card numbers; payments are handled by regulated payment providers.

2.2 Data collected automatically

• Server log data — IP address, date and time of request, requested URL, referrer, browser and operating system. This is generated by the hosting infrastructure for security and diagnostics.
• Essential cookie state — a single local flag recording that you have seen our cookie notice. See section 4.

This website contains no contact form, no user accounts and no database. Enquiries reach us only by email or telephone, which means we receive exactly the data you choose to write to us and nothing more.

3. Purposes and legal bases for processing

4. Cookies and local storage

food-adventure.net uses only strictly necessary cookies and local storage. We run no advertising, profiling, remarketing or analytics cookies, and we do not build user profiles.

• Cookie notice flag — a single entry stored in your browser's local storage recording that you dismissed the cookie notice, so that it is not shown on every page. It contains no identifier and never leaves your device.
• Session and security cookies — set by the server only where technically required to serve the page securely.
• Third-party map frames — restaurant pages and our contact page embed Google Maps. These frames are loaded only when you scroll them into view, and once loaded Google may set its own cookies under its own privacy policy. If you do not scroll to a map, no request to Google is made.

You can delete or block cookies at any time in your browser settings. Blocking essential cookies may prevent parts of the site from working correctly.

5. Recipients of data and international transfers

We share personal data only where it is necessary:

• Restaurants and accommodation providers in the United Kingdom — your name, party size, date and any dietary requirements, in order to make and honour the reservation.
• Hosting and email providers — acting as processors under written data-processing agreements.
• Accountants and payment providers — where required to invoice and record the transaction.
• Public authorities — only where we are legally obliged to disclose.

We never sell personal data and we never share it with advertising networks. Bookings necessarily involve transferring limited data to recipients in the United Kingdom, a country covered by an adequacy decision of the European Commission, so no additional safeguards are required.

6. How long we keep data

• Enquiries that do not lead to a booking — up to 12 months from the last message, then deleted.
• Booking records — for the duration of the contract and then for the period of limitation of claims (generally 6 years).
• Accounting documents — 5 full calendar years from the end of the tax year, as required by law.
• Dietary and allergy information — deleted immediately after the experience takes place.
• Server logs — a maximum of 90 days.

7. Your rights

Under the GDPR you have the right to:

• Access your personal data and receive a copy of it.
• Rectification of inaccurate or incomplete data.
• Erasure ("right to be forgotten"), where no overriding obligation applies.
• Restriction of processing in the circumstances set out in Art. 18.
• Data portability for data processed by consent or under a contract.
• Object to processing based on our legitimate interest.
• Withdraw consent at any time, without affecting the lawfulness of processing before withdrawal.

To exercise any right, write to contact@food-adventure.net. We respond within one month. You also have the right to lodge a complaint with a supervisory authority — in Poland, the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa).

8. Security

We apply technical and organisational measures appropriate to the risk, including encrypted transport (HTTPS) across the whole site, access control on mailboxes, minimisation of stored data, and the deliberate absence of any customer database on this website. Providing your data is voluntary, but without contact details we cannot answer an enquiry or make a reservation on your behalf.

9. Children

This website is not directed at children and we do not knowingly collect data from persons under 16. Where a booking includes a minor, their details are provided by the adult making the reservation and are used solely for that reservation.

10. Changes to this policy

We may update this policy to reflect changes in our services or in the law. The version in force is always the one published here, with the date of the last update shown at the top of the page. Material changes affecting existing clients are communicated by email.

11. Contact

For any question about this policy or about how we handle your data, contact us at contact@food-adventure.net or +48 666 626 704, or write to MIRKOM SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ, ul. Kartuska 320, Gdańsk 080-125.