Privacy notice
The Czech version prevails.
Who controls your data
The controller is the operator of the venue you contact:
| Venue or website | Controller |
|---|---|
| PARQ | ToKa gastro s.r.o. |
| Soul Bistro, MOLO, Točna, Vodojemy / Soul Coffee Truck, SOUL BOX including catering, and the group website | HoReCa solution s.r.o. |
HoReCa solution s.r.o., Adamcova 1209/7, 635 00 Brno, company ID 29369355, VAT ID CZ29369355, register C 75718, Krajský soud v Brně.
ToKa gastro s.r.o., Mozolky 1839/42, 616 00 Brno, company ID 07752725, VAT ID CZ07752725, register C 110071, Krajský soud v Brně.
Contact: soulbistro.info@gmail.com. Please identify the venue concerned.
What we process and why
Reservations use your name, phone, email, date, party size and optional note. We confirm bookings by SMS or email. Reservations rely on pre-contractual steps and contract performance under GDPR Article 6(1)(b).
SOUL BOX orders and enquiries also use the place, date, delivery address and company or billing details, including company and VAT IDs where relevant. This processing and job applications rely on steps towards a contract or its performance, GDPR Article 6(1)(b). We cannot handle requests without the necessary details.
General correspondence relies on our legitimate interest in responding. Technical logs, including IP addresses, and Turnstile serve our legitimate interest in security, Article 6(1)(f). Accounting records are retained under legal obligations, Article 6(1)(c).
Who receives data
Veldon provides hosting and the Gastro app at gastrosoul.cz as a processor. Our mailbox provider delivers and stores correspondence.
Cloudflare, Inc. protects forms through Turnstile. Transfers to the USA rely on the European Commission's adequacy decision under GDPR Article 45 and Cloudflare's active EU-U.S. Data Privacy Framework participation. See Cloudflare's policy.
Google receives connection data only when you open Google Maps through a link, under Google's policy. Visiting Facebook or Instagram through a link similarly involves processing under that service's policy.
Retention
Gastro defaults anonymise contacts and notes for reservations, orders and catering enquiries 30 days after the scheduled date. Orders also lose the delivery street and free-text delivery note; city and postcode remain for statistics. App billing-party records are deleted 90 days after delivery or invoicing, whichever is later.
Separate statutory retention applies: accounting documents for 5 years after the accounting period ends; VAT documents for 10 years after the relevant VAT period ends.
We retain correspondence and job applications while handling them, or longer for a specific legal claim. Security logs remain only as needed to protect the website and address incidents.
Your rights
Email us to request access, correction, erasure, restriction or portability where the legal conditions apply.
Right to object: You may object to processing based on legitimate interests.
If you consent to optional cookies, you can change or withdraw consent through „Cookie settings" in any footer. Withdrawal does not affect the lawfulness of earlier processing.
You may complain to the Czech Office for Personal Data Protection, pplk. Sochora 27, 170 00 Praha 7.
Effective date
Version for 7 November 2026. The Czech version prevails.