.png)
PRIVACY AND COOKIES POLICY
The Slavic Social sp. z o.o.
Last updated: 20 August 2026
1. General Information
This Privacy and Cookies Policy sets out the rules for the processing of personal data of persons using The Slavic Social website available at www.theslavicsocial.com, as well as persons making reservations, contacting The Slavic Social, using the restaurant and cocktail bar services, and persons interested in or using membership in The Slavic Social Business Club.
The controller of personal data is:
THE SLAVIC SOCIAL SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ
KRS: 0001163250
NIP: 9462751774
REGON: 541238464
registered office: ul. Juliusza Słowackiego 25, 20-461 Lublin, Poland
hereinafter referred to as the “Controller” or “The Slavic Social”.
The Slavic Social conducts business activities including, in particular, food and beverage services, a restaurant and cocktail bar, as well as activities related to a private business club.
The Controller processes personal data in accordance with applicable laws, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council (“GDPR”)
2. Personal Data We May Process
Depending on how you use the Website or The Slavic Social services, we may process, in particular:
-
first and last name;
-
email address;
-
telephone number;
-
reservation details;
-
information provided when contacting The Slavic Social;
-
Business Club membership data;
-
data relating to purchased services, events or benefits;
-
data necessary for payment processing;
-
IP address;
-
information about your device and web browser;
-
data concerning your use of the Website;
-
data stored in cookies and similar technologies.
In the case of online payments, certain data may be transferred to the payment service provider to the extent necessary to execute and process the transaction.
3. Purposes of Personal Data Processing
Personal data may be processed for the purpose of:
-
handling table reservations at the restaurant and cocktail bar;
-
contacting persons making reservations or submitting enquiries;
-
providing food and beverage services and other services offered by The Slavic Social;
-
managing membership in The Slavic Social Business Club;
-
handling membership applications and enquiries;
-
organising events, business meetings, networking events and other events organised by The Slavic Social;
-
performing contracts and taking steps at the request of a person prior to entering into a contract;
-
processing online payments;
-
issuing and retaining accounting documents;
-
complying with legal obligations;
-
establishing, pursuing and defending claims;
-
ensuring the security of the Website and services;
-
conducting statistics and analyses regarding use of the Website;
-
ensuring the proper functioning of the Website;
-
conducting marketing activities, insofar as they are carried out in accordance with applicable laws;
-
sending commercial information or newsletters where the user has provided the required consent;
-
improving the quality of services, Website functionality and user experience.
4. Legal Bases for Processing
Personal data may be processed on the basis of:
-
Article 6(1)(a) GDPR – the consent of the data subject;
-
Article 6(1)(b) GDPR – where processing is necessary for the performance of a contract or in order to take steps prior to entering into a contract;
-
Article 6(1)(c) GDPR – where processing is necessary for compliance with a legal obligation to which the Controller is subject;
-
Article 6(1)(f) GDPR – the legitimate interests pursued by the Controller.
The Controller’s legitimate interests may include, in particular, ensuring the security of services, protection against abuse, pursuing and defending claims, conducting service-related communications, and analysing and developing the business.
5. Restaurant and Cocktail Bar Reservations
When a reservation is made, we may process the data necessary to accept, confirm, modify or cancel the reservation, in particular your first and last name, telephone number, email address and reservation details.
Such data may also be used to contact the guest regarding matters directly related to the reservation.
The Slavic Social operates a restaurant and cocktail bar at Hilton Warsaw City, ul. Grzybowska 63, 00-844 Warsaw.
6. Membership in The Slavic Social Business Club
In connection with applying for or using membership in The Slavic Social Business Club, the Controller may process data necessary to:
-
review a membership application;
-
contact a candidate or member;
-
manage membership;
-
organise events and meetings for members;
-
provide access to membership benefits;
-
process membership-related payments;
-
communicate regarding the operation of the club.
The Slavic Social describes the club as a private business club for entrepreneurs, investors, executives and leaders from Central and Eastern Europe.
7. Online Payments – Przelewy24
If payment via Przelewy24 is selected, the data necessary to process the payment may be transferred to the payment service provider.
The operator of the Przelewy24 system is PayPro S.A., with its registered office at ul. Pastelowa 8, 60-198 Poznań.
Przelewy24 states in its current terms and conditions that it is the controller of payers’ personal data with regard to processing performed for the purposes of providing payment services. In connection with payment processing, the Merchant may provide Przelewy24 with, among other things, an email address and, depending on the circumstances, also the first name, last name and address.
Accordingly, Przelewy24 is an independent data controller with respect to its own purposes and processing activities relating to the provision of payment services.
Detailed information concerning the processing of data by Przelewy24 is available in the payment operator’s information documents.
8. Recipients of Personal Data
Personal data may be disclosed to entities cooperating with the Controller where this is necessary to achieve specific processing purposes, in particular to:
-
hosting and IT service providers;
-
reservation system providers;
-
providers of IT systems used to operate the club;
-
payment service providers, including Przelewy24;
-
accounting and legal service providers;
-
marketing and communication service providers;
-
analytics tool providers, where such tools are used on the Website;
-
entities providing event organisation services;
-
public authorities and other entities authorised under applicable law.
The scope of data disclosed is limited to the data necessary for the relevant purpose.
9. Transfers of Data Outside the European Economic Area
Where the Controller uses service providers established outside the European Economic Area, personal data may be transferred outside the EEA only in compliance with the requirements set out in the GDPR.
Depending on the specific provider, the legal basis for such a transfer may include, in particular, a European Commission adequacy decision, Standard Contractual Clauses or another mechanism provided for under the GDPR.
10. Data Retention Period
We retain personal data for the period necessary to fulfil the purpose for which it was collected.
In particular:
-
data relating to the performance of a contract – for the duration of the contract and for the period necessary to handle any potential claims;
-
data relating to accounting and tax obligations – for the period required by law;
-
data processed on the basis of consent – until consent is withdrawn, unless another legal basis exists for continued processing;
-
data processed for marketing purposes on the basis of legitimate interests – until an effective objection is raised or the legal basis for processing ceases to exist.
11. Rights of Data Subjects
Subject to the conditions set out in the GDPR, a data subject has the right to:
-
access their personal data;
-
rectify their personal data;
-
erase their personal data;
-
restrict processing;
-
data portability;
-
object to processing;
-
withdraw consent at any time where processing is based on consent.
Withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal.
A data subject also has the right to lodge a complaint with the President of the Personal Data Protection Office in Poland.
12. Right to Object to Processing
Where data is processed on the basis of Article 6(1)(f) GDPR, the data subject may, on grounds relating to their particular situation, object to such processing.
Where personal data is processed for direct marketing purposes, the data subject may object to such processing at any time.
13. Data Security
The Controller applies appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.
Access to personal data is limited to authorised persons and entities that require such access in connection with the performance of their assigned duties.
14. Cookies
The Slavic Social Website uses cookies and similar technologies.
Cookies are small text files stored on a user’s device when using the Website.
Cookies may be used, in particular, to:
-
ensure the proper functioning of the Website;
-
maintain Website functionality;
-
remember selected settings and preferences;
-
ensure security;
-
conduct statistics and analyses where appropriate analytics tools are used;
-
conduct marketing or remarketing activities where appropriate tools have been implemented and the user has provided the required consent.
15. Types of Cookies
The Website may use:
Strictly Necessary Cookies – cookies required for the proper functioning of the Website’s basic features.
Functional Cookies – cookies enabling the Website to remember user settings and preferences.
Analytics Cookies – cookies used to collect information about how the Website is used and to create statistics.
Marketing Cookies – cookies used for advertising and remarketing purposes where such tools are used on the Website.
16. Managing Cookies
Users may manage cookies through their web browser settings.
Depending on the browser configuration, users may, among other things, block cookies, delete stored cookies or receive notifications when cookies are about to be stored.
Restricting the use of cookies may affect the operation of certain Website features.
If a consent management panel is available on the Website, users may also change their cookie preferences through that panel.
17. Changes to the Privacy and Cookies Policy
The Controller may update this Privacy and Cookies Policy, in particular in the event of:
-
changes in applicable law;
-
changes to the way the Website operates;
-
introduction of new services or functionalities;
-
changes in service providers;
-
changes in the way personal data or cookies are used.
The current version of the Policy is published on the Website.
18. Contact
For matters concerning the processing of personal data or the exercise of rights under the GDPR, you may contact The Slavic Social:
THE SLAVIC SOCIAL SP. Z O.O.
ul. Juliusza Słowackiego 25
20-461 Lublin
Poland
Contact regarding the restaurant and cocktail bar:
reservationspl@theslavicsocial.com
19. Final Provisions
This Privacy and Cookies Policy provides information on the rules governing the processing of personal data in connection with the use of the Website and The Slavic Social services.
With regard to the processing of data by external service providers, including payment service providers, their own privacy policies and personal data processing notices may also apply.