Privacy & Cookie Policy

1. What data we collect

Information you give us. This website has no online booking form — reservations and enquiries are made by phone, Instagram message, e-mail, or through our external booking page. When you contact us we receive the data you choose to share: your name, phone number, the details of your request and any message content.

Information collected automatically. When you allow it, we collect device and usage data through cookies and analytics — for example a pseudonymous identifier, pages viewed, approximate location (country/city) and device/browser type. Without your consent no analytics or marketing cookies are set.

Website chat (Sofia assistant). If you use the chat, we process the content of the messages you send and of the replies, the language and address of the page where the chat was opened, and a random conversation identifier. We do not record IP addresses or identifying data. Replies are generated by the DeepSeek artificial-intelligence model. Please do not share personal data in the chat — for reservations, please call or message us.

2. Why we use it, and our legal basis

To answer enquiries and handle reservations — to take steps at your request before and during service (GDPR Art. 6(1)(b)) and our legitimate interest in running the venue (Art. 6(1)(f)).

Analytics and marketing — only on the basis of your consent (Art. 6(1)(a)), which you can withdraw at any time.

Operating and securing the website — our legitimate interest in a working, safe site (Art. 6(1)(f)).

3. Cookies and similar technologies

Cookies are small files stored on your device. We use strictly necessary cookies (which do not require consent) and, only with your consent, analytics and marketing cookies. You choose your preferences in the cookie banner and can change or withdraw them at any time via the "Cookie settings" link in the footer. You can also block or delete cookies in your browser settings. The categories and individual cookies are listed in the table below.

4. Analytics and advertising tools

Google Analytics 4 (Google Ireland Ltd) — helps us understand how the site is used. We use Google Consent Mode and IP anonymisation; the tool loads only after you consent to analytics. You can opt out with the Google Analytics opt-out add-on.

Meta Pixel (Meta Platforms Ireland Ltd) — helps us measure and improve our advertising on Facebook and Instagram. It loads only after you consent to marketing. You can manage ad settings in your Meta account.

5. Who we share data with

We do not sell your data. We share it only with service providers acting on our instructions (processors): website hosting and security (Cloudflare, Inc.), analytics (Google), advertising measurement (Meta) and our reservation/menu backend (ChoiceQR). We may also disclose data where required by law.

If you use the chat, the content of your messages is passed to the provider of the AI model — Hangzhou DeepSeek Artificial Intelligence Co., Ltd. (China). The Google map on the contact page loads only after you click “Show map” — at that point Google Ireland Ltd receives technical data, including your IP address. Music previews on the “Diary” page are played from Apple’s servers only when you start them — at that point Apple receives technical data, including your IP address.

6. International transfers

Some providers (Google, Meta, Cloudflare) may process data outside the European Economic Area, including in the United States. Such transfers are safeguarded by the EU–US Data Privacy Framework and/or the European Commission's Standard Contractual Clauses.

Chat messages are processed by DeepSeek in the People’s Republic of China. There is no European Commission adequacy decision for China, and we do not apply additional safeguards, such as Standard Contractual Clauses, with this provider. This means there is a risk that you will not have rights and legal remedies equivalent to those in the EU. The transfer therefore takes place solely on the basis of your explicit consent (GDPR Art. 49(1)(a)), given by sending a message after reading the notice shown in the chat window. If you do not want your messages to go to China, please contact us by phone, Instagram or e-mail.

7. How long we keep data

Analytics data is retained for a limited period (up to 14 months in Google Analytics). Enquiry and reservation correspondence is kept only as long as needed to handle your request and for the period of any applicable limitation/claims, after which it is deleted.

Chat logs (content, language, page and random identifier) are kept for 90 days and then deleted automatically. The conversation history stored in your browser (localStorage) stops being used 30 days after your last conversation; you can delete it at any time by clearing this site’s data in your browser settings.

8. Your rights

You have the right to access your data, to rectify or erase it, to restrict or object to processing, to data portability, and to withdraw consent at any time (without affecting processing already carried out). To exercise any right, contact us at selection.wro@gmail.com.

You also have the right to lodge a complaint with the Polish supervisory authority: the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl.

9. Children

Children are welcome at Selection. In line with the law, we serve alcohol and tobacco products, including shisha, only to adults (18+). This website is not directed to anyone under 16 and we do not knowingly collect their personal data — bookings and consents (e.g. to cookies) on a child’s behalf are made by a parent or legal guardian. If we learn that we have received a child’s data without such consent, we will delete it promptly.

10. Changes to this policy

We may update this policy from time to time. The current version and its date are always shown at the top of this page.

Cookies we use

Necessary cookies are always active. Analytics and marketing cookies are set only after you consent.

Change cookie settings