Privacy policy

Who is responsible for your data

TO BE COMPLETED BY THE OWNER: the legal entity (company/sole trader), company number (EIK), and registered address. This must appear here by law.

The data controller is [the legal entity behind Bistro Blyan — to be filled in], registered at [address]. For any question about your data, email info@bistroblyan.com or call 0883 577 725.

What we collect

We only collect the details you give us through the forms on this site:

• Reservation: name, phone, email, date, number of guests and, if you add them, notes about allergies or dietary needs.
• Private event enquiry: name, phone, email, preferred date, number of guests and a description of the event.
• Newsletter: your email address.
• We do not take payment through the site and do not ask for sensitive data beyond the dietary notes you choose to share.

Why and on what basis we process it

We process reservation and enquiry data to answer your request and prepare your evening — that is processing to perform a contract and to take steps at your request before one (Art. 6(1)(b) GDPR).

We process your newsletter email solely on the basis of your consent (Art. 6(1)(a)), which you can withdraw at any time through the unsubscribe link.

Cookies and analytics

TO CONFIRM: the exact name of the anonymous-analytics tool (e.g. Cloudflare Web Analytics / Plausible) once chosen — see the README.

This site uses no tracking or advertising cookies. For anonymous visit statistics we use a cookieless solution that does not build a profile of you.

We store only a small technical entry in your browser (localStorage) that remembers you have seen this notice, so we don't show it again.

Who we share it with

TO CONFIRM: the names of the real providers (e.g. Cloudflare for hosting, Resend for email) once the accounts are created.

We do not sell or rent your data. We share it only with providers that make the site work and act on our instructions: a hosting provider and a service that sends confirmation emails.

Data may be processed on servers in the EU or in countries with an adequate level of protection under a European Commission decision.

How long we keep it

OWNER DECISION: specific retention periods (e.g. reservation data deleted X months after the event). Enter a period that matches your practice.

We keep reservation data only as long as we need it to run your evening and for reasonable accounting afterwards, and newsletter data until you unsubscribe.

Your rights

Under the GDPR you have the right to:

• access the data we hold about you;
• have inaccurate data corrected;
• erasure (the 'right to be forgotten');
• restrict or object to processing;
• data portability;
• withdraw consent at any time, without affecting the lawfulness of processing before then.

Complaints

If you believe we handle your data unlawfully, you can lodge a complaint with the Commission for Personal Data Protection (CPDP) in Sofia, Bulgaria — kzld.bg. We'd be glad to try to resolve it with you first: email info@bistroblyan.com.

Security and changes

We protect your data with reasonable technical and organisational measures and limit who can access it. We may update this policy; on any material change we'll update the date above.