Privacy Policy

This privacy policy describes how Bistro Charlet Oy collects, processes, and protects the personal data of its customers in accordance with the EU General Data Protection Regulation (GDPR) and the Finnish Data Protection Act.

1. Data Controller

  • Company: Bistro Charlet Oy
  • Business ID (Y-tunnus): 3413590-7
  • Contact Person: Magdalena CHARLET
  • Email: contact@bistrocharlet.com

2. Personal Data Collected

We collect only the information strictly necessary to manage your requests through our website:

  • Table Bookings: Name, phone number, email address, date/time, and guest count.
  • Cheese Pre-orders: Name, phone number, email address, order details (quantity/type), and pickup/delivery instructions.
  • Sensitive Data: Any dietary requirements or allergies you voluntarily provide to ensure food safety.
  • Payment Information: If paying online, payment is handled by a secure third-party provider. We do not store credit card numbers ourselves.

3. Purpose and Legal Basis for Processing

We process your data for the following reasons:

  • Contractual Necessity: To fulfill your table reservation or prepare your cheese pre-order.
  • Legal Obligation: To comply with Finnish Accounting and Tax laws (retaining receipt and invoice data).
  • Legitimate Interest: To contact you regarding changes to your booking or order (e.g., if a product is out of stock).
  • Consent: If you explicitly opt-in to receive our newsletter or marketing updates.

4. Data Retention Period

  • Order & Booking History: Retained for 12 months after the event/pickup to handle customer service inquiries.
  • Financial Records: Invoices and transaction records are kept for six (6) years plus the current year, as required by the Finnish Accounting Act.
  • Marketing: Until you unsubscribe.

5. Data Sharing and Transfers

Your data is handled exclusively by the two entrepreneurs of Bistro Charlet Oy.

  • Processors: We use trusted partners for website hosting and payment processing (e.g., Stripe, PayPal, or Zettle).
  • No Selling: We never sell your personal information to third parties.
  • Location: Data is stored within the EU/EEA.

6. Your Rights

You have the right to:

  1. Access: Request a copy of your stored data.
  2. Correction: Ask us to fix incorrect information.
  3. Deletion: Request we delete your data (unless we must keep it for tax/legal reasons).
  4. Withdrawal: Cancel your consent for marketing at any time.

Contact us at: contact@bistrocharlet.com.

7. Data Security

As a business run by two owners, access to your data is strictly limited to us. Our website uses SSL encryption to protect your information during transmission.