Privacy policy

The data controller is Ivana Bošnjak, owner of Restoran Infinity, Škulići 2, 23248 Ražanac, Croatia, OIB 31774437281. For any questions regarding data processing contact us at ivana.bosnjak85@gmail.com.

We collect only what is necessary to provide our services or what you voluntarily entrust to us:

Reservations

Name, phone, email, date, time, party size and special notes (allergies, high chair). Legal basis: contract performance (Art. 6(1)(b) GDPR).

Guestbook

Name or alias you enter, message text, timestamp. Legal basis: consent (Art. 6(1)(a)). Entries are only published after manual moderation.

External reviews

Reviews shown from Google Maps / TripAdvisor are pulled via public APIs with author attribution and source. We do not fetch beyond what is publicly shared.

Visit analytics

Vercel Analytics counts visits without personal-identification profiling or cookies. Activated only after your consent.

Server logs

IP address and request timestamp, retained up to 30 days for security and debugging. Legal basis: legitimate interest (Art. 6(1)(f)).

Some features load from external services. We load them only after your consent:

Google Maps

The embedded map on the Contact page loads from maps.google.com. Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Privacy policy: policies.google.com/privacy.

Google Places

Reviews from Google Maps are fetched via the Google Places API with author attribution and source; we do not store reader identifiers.

TripAdvisor

Rating badge and link to the restaurant profile on tripadvisor.com. TripAdvisor LLC, 400 1st Avenue, Needham, MA 02494, USA.

Vercel hosting

The site is hosted by Vercel Inc. (San Francisco, USA). Vercel processes IP addresses solely to deliver traffic. Standard contractual clauses per Art. 46 GDPR.

Neon Postgres

Database hosted by Neon Inc. (USA), region EU-Frankfurt. All data at rest is encrypted.

Resend (email)

Reservation confirmations are sent via Resend, Inc. (Delaware, USA). Emails contain only the fields you entered into the reservation form.

Under the GDPR you have the following rights at any time:

• Right of access (Art. 15)
• Right to rectification (Art. 16)
• Right to erasure ("right to be forgotten", Art. 17)
• Right to restriction of processing (Art. 18)
• Right to data portability (Art. 20)
• Right to object to processing based on legitimate interest (Art. 21)
• Right to withdraw consent at any time (Art. 7(3))

To exercise your rights write to ivana.bosnjak85@gmail.com. We will respond within 30 days.

You have the right to lodge a complaint with the Croatian Personal Data Protection Agency (AZOP), Selska cesta 136, 10000 Zagreb, www.azop.hr, if you believe processing of your data infringes the GDPR.

• Reservations: 12 months from the date of visit
• Guestbook: indefinitely (published with your consent; deletion on request)
• Server logs: 30 days
• Consent settings (cookie banner): 12 months

This policy may change over time. The last-updated date is shown at the top. For material changes we will request fresh consent through the cookie banner.