Privacy policy
We respect your privacy. Below we explain how we process personal data when you use taproom.com.pl, contact us or make a booking. This is a translation for convenience; the Polish version is the binding one.
1. Data controller
The controller of your personal data is SMARTBREW spółka z ograniczoną odpowiedzialnością, registered at ul. Szlachecka 4 lok. 35, 03-259 Warszawa, Poland, entered in the National Court Register (KRS) under number 0001135967, NIP (tax ID) 5243021565, REGON 540049360, which runs Taproom Wilanów.
For anything to do with personal data, you can contact us:
- by email: taproom.pl@gmail.com;
- by phone: +48 519 000 247;
- by post: SMARTBREW sp. z o.o., ul. Szlachecka 4 lok. 35, 03-259 Warszawa.
Taproom Wilanów is at al. Rzeczypospolitej 4, lokal U2, 02-972 Warszawa.
2. What data we process
Depending on how you use our services, we may process:
- your name, email address and phone number;
- the content of your message;
- information needed to handle a booking, such as the date of your visit and the number of guests;
- technical data related to using the website, such as your IP address, browser and device information, and server log entries.
Please do not send sensitive data, such as health information, through the contact form.
3. Purposes and legal bases
We process data in order to:
- Reply to messages and handle enquiries — under Article 6(1)(f) GDPR. Our legitimate interest is corresponding with and assisting people who contact us.
- Handle bookings — under Article 6(1)(b) GDPR, to the extent necessary to take steps at your request before entering into a contract, or to perform a contract.
- Meet legal obligations, in particular tax and accounting ones — under Article 6(1)(c) GDPR, where such obligations apply.
- Keep the website secure and establish, pursue or defend legal claims — under Article 6(1)(f) GDPR. Our legitimate interest is protecting the website and our rights.
Providing data is voluntary. However, without the information needed for contact or a booking, we may not be able to reply to your message or handle your request.
4. Recipients of data
Data may be shared with providers of services needed to run the website and serve customers, in particular hosting, email, IT support and the booking system.
Processors acting on our behalf do so under appropriate agreements and on our instructions. Data may also be disclosed to authorised public bodies where the law requires it.
5. How long we keep data
We keep correspondence for as long as needed to reply and close the matter.
We keep booking data for as long as the booking is being handled. Where necessary to establish, pursue or defend claims, the relevant data may be kept until the applicable limitation period expires.
We keep documents subject to tax or accounting obligations for the period required by law.
6. Your rights
Under the GDPR, you have the right to:
- access your data and receive a copy of it;
- have your data corrected;
- have your data erased;
- restrict processing;
- data portability, where processing is automated and based on consent or a contract;
- object to processing based on legitimate interest.
Where data is processed on the basis of consent, you can withdraw it at any time. Withdrawing consent does not affect the lawfulness of processing carried out before.
To exercise your rights, write to taproom.pl@gmail.com.
You also have the right to lodge a complaint with the President of the Personal Data Protection Office (UODO). Information on how to complain is available at uodo.gov.pl.
7. Cookies and similar technologies
Cookies are small files saved on your device. They may be used to make the website work properly and to remember your settings.
Analytics or marketing technologies, if used, require your prior consent, except where the law provides otherwise.
You can control cookies in your browser settings. Blocking some of them may limit certain features of the website.
8. Bookings and external services
The website links to the booking system at rezerwacja.taproom.com.pl. Information you give when booking is used to handle the booking and to contact you about it.
When you go to external services, please read their privacy policies.
9. Gift vouchers
When you order a gift voucher through the form on the website, we process your name and your email address or phone number, and — if you give them — the recipient's name and the message to be printed on the voucher. You provide the recipient's details; enter only what should appear on the voucher.
We process this data to contact you about the order, take payment, issue the voucher and redeem it at the bar — under Art. 6(1)(b) GDPR — and to meet our accounting and tax obligations — under Art. 6(1)(c) GDPR.
Staff receive a short notification about each new order in the Telegram messenger (name, amount and contact details). We keep order and voucher data for the voucher's validity and settlement, and after that only as long as tax and accounting law requires or until claims become time-barred.
10. Updates to this policy
This policy may be updated following changes to how the website works, the services we use or the law. The current version is always available on this page.
Last updated: 25 October 2026.