Privacy policy
Translation for convenience. The legally binding version is the Polish one.
Who processes your data
The data controller is SHEF-POVAR CATERING SP. Z O.O., ul. Cylichowska 84, 04-769 Warszawa, NIP 5213941166 · REGON 520104820 · KRS 0000924592.
For anything concerning personal data, write to biuro@savorthecatering.pl. We have not appointed a data protection officer – we are not required to.
What we collect and where it comes from
We only collect what you give us yourself:
- from the form on this site – event format, date, approximate number of guests, name, phone or email, and your comment;
- from messages you send directly – by email, phone, WhatsApp or Telegram – whatever you include in them.
We do not buy data, we do not pull it from other services, and we do not build profiles.
Why, and on what legal basis
| Purpose | Legal basis |
|---|---|
| Answering your enquiry and preparing an offer | Art. 6(1)(b) GDPR – steps prior to entering a contract |
| Delivering the catering service you ordered | Art. 6(1)(b) GDPR – performance of a contract |
| Invoicing and accounting | Art. 6(1)(c) GDPR – legal obligation |
| Establishing and defending possible claims | Art. 6(1)(f) GDPR – our legitimate interest |
| News and offers, if you consent to them | Art. 6(1)(a) GDPR – consent |
Giving us your data is voluntary, but without a name and a contact we cannot answer your enquiry. Consent to marketing is separate and entirely optional – the form submits without it.
How long we keep it
- Enquiries – up to one year after the event date, or up to one year after the last contact if no event took place.
- Accounting records – 5 years from the end of the tax year in which the tax obligation arose. We cannot shorten this period; it is set by law.
- Marketing consent – until you withdraw it.
We back up the enquiry database daily and keep each backup for no longer than 35 days. That way deletion is real: after that period the data is gone from the backups too.
Who we share it with
The website and the enquiry database run on a server in Warsaw. Data from the form is therefore stored in Poland, inside the European Economic Area.
We do not sell your data and we do not pass it to anyone for their own marketing. It reaches only those without whom we could not operate:
- OVH Sp. z o.o. (OVHcloud) – the website runs and enquiries are stored on its server in Warsaw;
- the company maintaining the website and the server – as far as needed to administer them, under a data processing agreement;
- Telegram – every enquiry sent through the form reaches our account manager as a Telegram notification; messages you write to us in that messenger arrive the same way;
- WhatsApp – if you write to us there;
- Google Ireland Limited – runs our company email, so messages you send us by email go through it;
- our accounting firm – once a contract is signed and an invoice issued;
- subcontractors for a specific event – only to the extent needed to run it.
The site uses no content delivery network and no analytics tools, so traffic on it does not pass through third parties.
Transfers outside the European Economic Area
The website and the enquiry database are in Warsaw, so the form data itself stays inside the EEA. There are, however, three situations in which data leaves that area, and we set them out plainly.
Telegram. An enquiry sent through the form reaches our account manager as a Telegram notification, so its content passes through the services of Telegram FZ-LLC, based in Dubai (United Arab Emirates). This happens with every enquiry, not only when you write to us in that messenger yourself. The European Commission has issued no adequacy decision for the United Arab Emirates; the transfer relies on art. 49(1)(b) GDPR – it is necessary to take steps at your request before entering into a contract, that is, to prepare our reply and offer.
WhatsApp (Meta Platforms Ireland Limited) – if you write to us there.
Company email (Google Ireland Limited) – if you write to us by email. Google transfers data to the United States under the European Commission adequacy decision of 10 July 2023 (EU–US Data Privacy Framework).
If you would rather avoid messengers – call us on +48 576 100 201. We do not pass phone conversations on to anyone.
Your rights
At any time you have the right to:
- access your data and receive a copy;
- correct inaccurate data or complete incomplete data;
- ask us to erase your data;
- ask us to restrict processing;
- port your data to another controller;
- object to processing based on our legitimate interest;
- withdraw marketing consent – without affecting the lawfulness of what we did before you withdrew it.
A message to biuro@savorthecatering.pl is enough.
You also have the right to lodge a complaint with the President of the Polish Personal Data Protection Office (Prezes UODO), ul. Stawki 2, 00-193 Warszawa.
Cookies
This site does not store cookies and uses no analytics or advertising tools – there is no Google Analytics, no Facebook pixel, no counter of any kind. That is why we do not ask for cookie consent: there is nothing to consent to.
If we ever add such tools, a consent request will appear first and this policy will be updated.
Changes to this policy
If we change how we handle data, we will update this page and change the date below. It is worth checking before you send us an enquiry.
Last updated: 08.09.2026
Back to the homepage