Privacy policy

1. Contact about your data

The data controllers are the partners trading as DARIA JANZ, MARYNA ZASLAVSKA SPÓŁKA CYWILNA, tax identification number (NIP) 9562405793, business address: ul. gen. Karola Kniaziewicza 52A/3, 87-100 Toruń, Poland. The Umami Sushi & Food restaurant is at ul. Gen. Andersa 72, 87-100 Toruń.

For data and order enquiries, call the restaurant on +48 513 233 722 or write to the business address above.

2. Data we process

For orders we store your name, phone, email, ordered items, quantities, prices, payment and collection method, requested time and order status. Delivery requires an address; invoices also require a tax identification number (NIP). We store comments entered in the form. Do not include unnecessary sensitive information.

The server may record your IP address, request time, visited page and browser information for diagnostics. The form does not collect card numbers or CVV codes. Sales statistics include the source, amounts and order items; the separate reporting database does not copy customer contact details.

3. Purposes and legal grounds

Processing orders, delivery and related contact are necessary to perform a contract or take steps before entering one (GDPR Article 6(1)(b)). Tax and accounting records are processed to meet legal obligations (point c). Security, handling claims and internal sales analysis serve the controller’s legitimate interests (point f).

Optional Google Analytics visitor statistics run only with consent (point a). Analytics consent is not required to buy from us. We do not make solely automated decisions about customers that produce legal effects.

4. Service providers and data transfers

Authorised staff, hosting and technical service providers, GoPOS and GoOrder where used for the order, delivery providers and accounting support may access data as necessary. Competent authorities may also receive data.

To calculate delivery, the town, street and building number may be sent to Nominatim (OpenStreetMap) to determine coordinates. This request does not include your name, email, phone or apartment number; results are cached for one month.

Google receives technical data after analytics consent or when you explicitly enable the map. Google services may involve processing outside the EEA. For processing locations and transfer safeguards, see https://policies.google.com/privacy. Visiting Wolt, Pyszne or social networks is also subject to the chosen service’s policies.

5. Retention

Retention depends on the purpose: completing an order, handling complaints, mandatory accounting retention periods and limitation periods for claims. Not all data needs the same retention period. Completing an order does not automatically delete its history.

Technical log retention depends on hosting configuration; analytics event retention depends on Google Analytics settings. Contact the restaurant for the period applicable to your data. Browser storage is described in the cookie policy.

6. Your rights and voluntary provision

Under the GDPR you can request access, a copy, rectification, erasure or restriction, and where applicable portability, and object to processing based on legitimate interests. Legal obligations may limit erasure. We may request information needed to verify your identity.

Withdraw analytics consent through “Cookie settings” in the footer. Withdrawal does not affect the lawfulness of earlier processing. You may complain to Poland’s supervisory authority, UODO: https://uodo.gov.pl. Providing order data is voluntary, but we cannot fulfil an order without the required information. You can browse the menu without ordering or consenting to analytics.