Privacy policy

Privacy notice

Effective from 8 October 2026 This notice explains how we handle personal data on the sidecafe.hu website and when you book a table online. We process personal data in accordance with the EU General Data Protection Regulation (GDPR, Regulation (EU) 2016/679) and Hungarian Act CXII of 2011 on the Right of Informational Self-Determination and on Freedom of Information (Infotv.).

1. The controller

Name: SIDE. Hungary Korlátolt Felelősségű Társaság (SIDE. Hungary Kft.)
Registered seat: 1134 Budapest, Kassák Lajos utca 67. A. ép. 1. em. 109. ajtó
Café address: Side Cafe ("SIDE Coffee and Wine"), 1134 Budapest, Kassák Lajos utca 67/A
Company registration number: 01-09-456419 (Company Registry Court of the Budapest-Capital Regional Court)
Tax number: 33049571-2-41 (EU VAT number: HU33049571)
Email: side.hungary.kft@gmail.com

For any data protection question, contact us at the email address above.

2. What data we process and why

2.1. Online table booking

Data: name, email address, phone number (optional), party size, date and time of the booking, note (optional).
Purpose: receiving and reviewing your booking request, confirming, changing or cancelling the booking, and contacting you about it.
Legal basis: steps taken prior to entering into a contract and performance of the contract (Article 6(1)(b) GDPR).

After you send a booking, the system emails you to confirm that your request has arrived, and then again to tell you whether we have accepted or declined it. 2.2. Reminder email

Data: name, email address, booking details.
Purpose: sending a reminder 24 hours before the booked time, so that you do not forget the booking or can cancel it in time.
Legal basis: legitimate interest (Article 6(1)(f) GDPR). Our interest is that booked tables do not stay empty, and the reminder also helps you plan. You can object to the reminder at any time at the email address above.

2.3. Special category data in the note If you voluntarily include health information in the note (for example a food allergy), we use it only to serve you, on the basis of your explicit consent (Article 9(2)(a) GDPR), and delete it together with the rest of the booking. Please do not put any other sensitive information in the note. 2.4. Contacting us by email

Data: name, email address and any other data you include in your message.
Purpose: answering your enquiry.
Legal basis: our legitimate interest in answering enquiries (Article 6(1)(f) GDPR) or, where the enquiry concerns a booking, Article 6(1)(b).

2.5. Technical data needed to run the website When you open the website, the hosting provider's server records ordinary log data (for example IP address, time, the page requested). This serves the secure and uninterrupted operation of the website; the legal basis is legitimate interest (Article 6(1)(f) GDPR).

3. How long we keep the data

Booking data: for 1 year after the booked date, after which it is deleted. The same applies to declined or cancelled bookings.
Email enquiries: for 1 year after the matter is closed.
Technical log data: for the hosting provider's short, regularly expiring retention period.

If data is needed for longer to establish or defend legal claims or to meet a legal obligation, we keep it only for as long as that requires.

4. Processors and recipients

We do not sell your data and do not use it for advertising. The following provider processes data on our behalf and on our instructions as a data processor:

Tavilio (tavilio.app) – provider of the website, hosting and online booking system, including sending booking emails (confirmation, reminder). Operated by: Tóth Lóránt e.v., 1134 Budapest, Kassák Lajos utca 67/B; email: support@dopler.app.

According to Tavilio's own public privacy policy, it uses the following sub-processors: Supabase (database and file storage), Vercel (hosting and content delivery), Resend (email delivery). Where any of them processes data outside the European Economic Area, the transfer relies on the European Commission's standard contractual clauses. We disclose data to authorities only where required by law.

5. Cookies and third-party content

The website uses only cookies or browser storage that are strictly necessary or functional (for example to remember your language choice). We do not use analytics or advertising cookies.

Google Maps: the website shows an embedded Google map. When the map loads, Google (Google Ireland Limited) may receive your IP address and other technical data and may set its own cookies. Google's privacy policy applies: https://policies.google.com/privacy
Instagram and Facebook: the website only links to these pages. Meta receives data only if you click a link, after which Meta's privacy rules apply.

6. Data security

Only those who need it to handle bookings have access to the data. The website is served over an encrypted (HTTPS) connection.

7. Your rights

Under the GDPR you may request:

access to the data we hold about you and a copy of it;
rectification of your data;
erasure of your data;
restriction of processing;
portability of your data, i.e. receiving it in a machine-readable format;
you may also object to processing based on legitimate interest (for example the reminder email);
where processing is based on consent, you may withdraw your consent at any time; this does not affect the lawfulness of processing before the withdrawal.

Send your request to side.hungary.kft@gmail.com. We will reply within one month at the latest.

8. Remedies

If you feel that your data is not being handled properly, please contact us first so that we can put it right. You may also lodge a complaint with the supervisory authority: Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH – Hungarian National Authority for Data Protection and Freedom of Information)

Address: 1055 Budapest, Falk Miksa utca 9-11.
Website: www.naih.hu
Email: ugyfelszolgalat@naih.hu

You may also go to court if your rights are infringed. At your choice, proceedings may be brought before the regional court (törvényszék) of your place of residence or stay.

9. Changes

If we change this notice, we will publish the change on this page and update the effective date.

Built with Tavilio