PRIVACY POLICY

1. Introduction
This Privacy Policy explains how we collect, use and protect your personal data when you visit our website and use our services (restaurant reservations, contact forms, newsletter sign‑up, event inquiries, etc.).
By using this website, you agree to the practices described in this Privacy Policy.

2. Data Controller
The data controller is:

Molino Pizza & Bar
Nova Ves 17, 10000 Zagreb, Croatia
Email: info@molino.hr
Telephone: 01 4667 370

3. Data we collect

We may collect the following categories of personal data:

Reservation data: name and surname, email address, phone number, date and time of reservation, number of guests, notes (e.g. allergies, special requests).
Contact form data: name, email address, message content and any other information you voluntarily provide.
Newsletter data (if applicable): name, email address, marketing preferences.
Billing data (for events, catering or prepayments): name and surname or company name, address, VAT number, payment details required by law.
Technical data: IP address, browser type, device information, pages visited, date and time of visit, collected via cookies and similar technologies.

4. Purposes and legal bases

We process your personal data for the following purposes:

To manage and confirm your reservations and provide our services (performance of a contract or steps prior to entering into a contract).
To respond to your inquiries sent via contact forms or email (legitimate interest and/or your request).
To send you marketing communications and newsletters, only if you have given us your explicit consent. You can withdraw your consent at any time.
To comply with legal obligations, such as accounting and tax regulations.
To improve our website, analyse traffic and run marketing campaigns, based on your consent for non‑essential cookies.

5. Sharing of personal data

We may share your personal data with:

IT and hosting providers, website and email service providers, booking and reservation systems we use.
Accounting and other service providers who need access to certain data in order to provide their services and comply with legal obligations.
Public authorities, regulators and other parties where required by applicable law.

We do not sell your personal data, and all recipients process data under appropriate contracts and safeguards.

6. International transfers

As a rule, your personal data is processed within the European Union / European Economic Area.
If we use service providers located outside the EU/EEA, we will ensure that appropriate safeguards are in place (such as Standard Contractual Clauses or an adequacy decision) in accordance with applicable data protection laws.

7. Retention periods

We store your personal data only for as long as necessary for the purposes for which it was collected, namely:

Reservation data: for a reasonable period after your visit (for example up to 1 year), unless a longer period is required by law.
Accounting and invoicing data: for the period required by Croatian accounting and tax regulations (normally up to 10 years).
Newsletter data: until you unsubscribe or withdraw your consent.
Technical and cookie‑related data: in accordance with the retention periods indicated in our cookie settings.

8. Your rights

Subject to conditions set out in applicable law, you have the following rights:

Right of access – to obtain confirmation and a copy of your personal data that we process.
Right to rectification – to correct inaccurate or incomplete data.
Right to erasure – to request deletion of your data in certain circumstances.
Right to restriction of processing – to limit how we use your data in certain cases.
Right to data portability – to receive your data in a structured, commonly used and machine‑readable format, where applicable.
Right to object – to processing based on our legitimate interests or to direct marketing.
Right to withdraw consent – where processing is based on your consent, you can withdraw it at any time without affecting the lawfulness of processing before withdrawal.

To exercise these rights, please contact us at info@molino.hr or via the contact details above.
You also have the right to lodge a complaint with the Croatian Personal Data Protection Agency (AZOP) or another competent supervisory authority.

9. Cookies

Our website uses cookies and similar technologies to ensure the proper functioning of the site, to analyse traffic and, where applicable, for marketing and advertising purposes.

Strictly necessary cookies: required for the basic operation and security of the website and cannot be disabled in our systems.
Analytics cookies: help us understand how visitors use our website so we can improve content and user experience.
Marketing cookies: used to deliver personalised advertisements and measure the effectiveness of campaigns.

Non‑essential cookies are used only with your consent, which you can manage via the cookie banner and settings on our website. You can find more details in our Cookie Policy / cookie settings section.

10. Data security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, misuse, alteration or destruction.

11. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be published on this page with an updated “last updated” date.
We encourage you to review this page periodically.

Last updated: 15 March 2026