Privacy Policy

Squareone restaurant d.o.o., Trg žrtava fašizma 1, 10000 Zagreb, Hrvatska / Croatia Email: info@squareone.hr

Orders: name, email, phone, address (for delivery), order contents and payment data. Catering: event details, guest count, location and contact data. Newsletter: email address. Technical: IP address, device and access time in server logs.

Contract performance (Art. 6(1)(b) GDPR) for orders and catering, legitimate interest (f) for security and site improvement, consent (a) for newsletter and optional cookies, legal obligation (c) for accounting.

Order data is kept for the period required by tax and accounting law (usually 11 years). Newsletter data until unsubscribe. Server logs up to 30 days.

Service providers processing data on our behalf: hosting, payment provider, email service and, for delivery, the delivery partner. All are bound by data processing agreements. Transfers outside the EU only occur under standard contractual clauses.

For the cart and language preference we use localStorage and a cookie (“squareone-lang”). This data stays on your device and is not used for marketing.

You have the right of access, rectification, erasure, restriction, data portability and objection, and the right to withdraw consent. Requests to info@squareone.hr. Complaints can be filed with the Croatian DPA (AZOP), Selska cesta 136, 10000 Zagreb.