I. Introduction
The company operating Nosh cafés, Bárd Bisztró Limited Liability Company (hereinafter: Data Controller), is committed to the protection of personal data and compliance with the General Data Protection Regulation (GDPR). This Privacy Notice provides information regarding the processing of personal data in connection with the website noshcoffee.hu.
The purpose of this Privacy Notice (hereinafter: Notice) is to record – in compliance with applicable legislation – the purposes, legal bases, duration and methods of processing personal data, as well as the rights and remedies available to data subjects.
If you have any questions regarding the processing of your data, please contact the Data Controller via the contact details provided.
II. Definitions
Personal Data: any information relating to an identified or identifiable natural person.
Processing: any operation performed on personal data, including collection, storage, use, disclosure, deletion or destruction.
Data Controller: the entity determining the purposes and means of processing. In this Notice: Bárd Bisztró LLC.
Data Processor: a natural or legal person processing personal data on behalf of the Data Controller.
Data Subject: an identified or identifiable natural person.
Supervisory Authority: Hungarian National Authority for Data Protection and Freedom of Information (NAIH).
Website: https://noshcoffee.hu/
III. Data Controller and Representative
Company name: Bárd Bisztró Limited Liability Company
Company registration number: 01-09-345230
Registered seat: 1139 Budapest, Teve utca 33-41. C building 1 door
Email: info@noshcoffee.hu
Phone: +36-30-334-2616
Representative: Yaar Bach, Managing Director
IV. Principles of Data Processing
Lawfulness, fairness and transparency
Purpose limitation
Storage limitation
Data minimisation
Accuracy
Integrity and confidentiality
Accountability
V. Data Processing Activities
V.1. Online Lunch Orders
Purpose: processing and fulfilling lunch orders placed via the Website.
Data processed: name, address, email address, phone number.
Legal basis: performance of a contract (Article 6(1)(b) GDPR).
Retention period: 2 months after order completion.
V.2. Invoicing
Purpose: issuing invoices related to orders.
Data processed: name, address, email address.
Legal basis: compliance with legal obligation (Article 6(1)(c) GDPR).
Retention period: 8 years in accordance with accounting legislation.
V.3. Table Reservation
Purpose: managing reservations via OpenTable.
Data processed: name, email address, phone number.
Legal basis: consent (Article 6(1)(a) GDPR).
Retention period: until withdrawal of consent or completion of reservation.
V.4. Contact and Enquiries
Purpose: responding to enquiries.
Data processed: name, email address, phone number, message.
Legal basis: consent (Article 6(1)(a) GDPR).
Retention period: until withdrawal of consent, but maximum 6 months.
V.5. Newsletter and Direct Marketing
Purpose: sending marketing communications and newsletters.
Data processed: name, email address, subscription date.
Legal basis: consent (Article 6(1)(a) GDPR).
Retention period: until withdrawal of consent.
V.6. Social Media
Purpose: promotion of Nosh cafés on Facebook, Instagram and TikTok.
Data processed: name, comments, likes, follows, messages.
Legal basis: consent (Article 6(1)(a) GDPR).
Retention period: until activity is withdrawn or deleted.
V.7. Cookies
The Website uses cookies. Cookies are small data files stored on your device when visiting a website. Browser settings allow you to enable or disable cookies.
VI. Data Processors
Hosting and development: PROMABIT Kft.
Invoicing system: Számlázz.hu (KBOSS.hu Kft.)
Payment processing: WooPayments (WooCommerce Ireland Ltd.)
Apple Pay: Apple Distribution International Limited
Google Pay: Google payment services
Table reservations: OpenTable International Limited
VII. Rights and Remedies
Right of access
Right to rectification
Right to erasure
Right to restriction of processing
Right to object
Right to data portability
Right to lodge a complaint with the Supervisory Authority
Right to judicial remedy and compensation
VIII. Final Provisions
The Data Controller reserves the right to unilaterally amend this Notice at any time. The current version is always published on the Website.
This Notice is governed by Hungarian law and the GDPR.
Budapest, 01 February 2026
Bárd Bisztró Limited Liability Company