{"id":1489,"date":"2026-08-06T13:11:30","date_gmt":"2026-08-06T11:11:30","guid":{"rendered":"https:\/\/bombay.hu\/adatkezelesi-tajekoztato\/"},"modified":"2026-08-06T13:11:30","modified_gmt":"2026-08-06T11:11:30","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/bombay.hu\/en\/adatkezelesi-tajekoztato\/","title":{"rendered":"Privacy policy"},"content":{"rendered":"
\n\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\tLegal information<\/span>\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t

Privacy policy<\/h1>\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

In force from 11 August 2026.<\/p>

1. The data controller<\/h2>
Data controller<\/th>ARAASH CATERING Kft.<\/td><\/tr>
Registered office<\/th>1051 Budapest, Okt\u00f3ber 6. utca 17. ground floor<\/td><\/tr>
Tax number<\/th>12271782-2-41<\/td><\/tr>
Represented by<\/th>Manish Jain, managing director<\/td><\/tr>
Email<\/th>araashoffice@bombay.hu<\/a><\/td><\/tr>
Phone<\/th>+36 20 413 0484<\/a><\/td><\/tr><\/tbody><\/table>

No data protection officer has been appointed, as the nature of the processing does not make this mandatory.<\/p>

2. What data do we process, and why?<\/h2>

2.1 Contact<\/h3>

Data processed:<\/strong> name, email address, and any other data given in the message.
Purpose:<\/strong> answering the enquiry.
Legal basis:<\/strong> the consent of the data subject (GDPR Article 6(1)(a)).
Retention period:<\/strong> 1 year from the closing of the enquiry, or until consent is withdrawn.<\/p>

2.2 Table booking<\/h3>

Data processed:<\/strong> name, email address, phone number, the date and time of the booking, number of guests, notes.
Purpose:<\/strong> fulfilling the booking.
Legal basis:<\/strong> performance of a contract (GDPR Article 6(1)(b)).
Data processor:<\/strong> OpenTable; the booking takes place in the OpenTable system, reached by redirection from the website.
Retention period:<\/strong> 12 months from the date of the booking.<\/p>

2.3 Buying a gift voucher<\/h3>

Data processed:<\/strong> name, email address, phone number, billing address, order details, the identifier of the voucher and its redemption status.
Purpose:<\/strong> fulfilling the order, invoicing, validating the voucher.
Legal basis:<\/strong> performance of a contract; in the case of billing data, compliance with a legal obligation.
Data processors:<\/strong> OTP Mobil Kft. (SimplePay): payment; the provider of the invoicing software: invoicing; the hosting provider: hosting.
Retention period:<\/strong> 8 years for accounting documents (Act C of 2000, Section 169(2)).<\/p>

2.4 Requesting an event or catering quote<\/h3>

Data processed:<\/strong> name, company name, email address, phone number, number of guests, date, message.
Purpose:<\/strong> preparing a quote.
Legal basis:<\/strong> steps taken prior to entering into a contract.
Retention period:<\/strong> 1 year from the closing of the enquiry.<\/p>

2.5 Newsletter<\/h3>

Data processed:<\/strong> name, email address, data on the opening of the emails.
Purpose:<\/strong> informing you about the restaurant's news and offers.
Legal basis:<\/strong> the consent of the data subject. Consent may be withdrawn at any time using the unsubscribe link at the bottom of the emails.
Retention period:<\/strong> until consent is withdrawn, but at most 18 months from the last activity.<\/p>

2.6 Job applications<\/h3>

Data processed:<\/strong> the data given in the application, and the CV.
Legal basis:<\/strong> the consent of the data subject.
Retention period:<\/strong> 6 months from the filling of the position, if the applicant consents to their data being kept; otherwise immediate deletion.<\/p>

2.7 Server logs<\/h3>

Data processed:<\/strong> IP address, browser and device data, the time of the visit, the referring page.
Purpose:<\/strong> checking that the service is working, and preventing misuse.
Legal basis:<\/strong> the legitimate interest of the data controller (GDPR Article 6(1)(f)).
Retention period:<\/strong> at most 12 months.<\/p>

2.8 Social media and photographs<\/h3>

Data processing on our Facebook, Instagram and Tripadvisor pages is also governed by the rules of the platform concerned. Photographs taken in the restaurant and at events are published for marketing purposes, on the basis of the legitimate interest of the data controller. If you would rather not appear in a photograph, please tell us on the spot or write to us, and we will remove it.<\/p>

3. Cookies<\/h2>

The website uses cookies. Cookies needed for the site to function may be placed without consent; every other cookie is activated only with your explicit consent. Details on the Cookie settings<\/a> page.<\/p>

4. Data transfers to third countries<\/h2>

Some of our providers (for example OpenTable and the social media platforms) may also transfer data outside the European Economic Area. In these cases the transfer is based on the standard contractual clauses of the European Commission or on an adequacy decision.<\/p>

5. Your rights<\/h2>
  • Access:<\/strong> you may ask whether we process any data about you, and request a copy of it.<\/li>
  • Rectification:<\/strong> you may ask for inaccurate data to be corrected.<\/li>
  • Erasure:<\/strong> you may ask for your data to be deleted if there is no legal basis for processing it.<\/li>
  • Restriction:<\/strong> you may ask for the processing to be restricted.<\/li>
  • Objection:<\/strong> you may object to processing based on legitimate interest.<\/li>
  • Data portability:<\/strong> you may ask for your data to be provided in a machine-readable format.<\/li>
  • Withdrawal of consent:<\/strong> at any time, with effect for the future.<\/li><\/ul>

    You may submit your request at araashoffice@bombay.hu or by post (1051 Budapest, Okt\u00f3ber 6. utca 17. ground floor). We reply to requests within one month at the latest.<\/p>

    6. Remedies<\/h2>

    You may lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (1055 Budapest, Falk Miksa utca 9-11.; postal address: 1363 Budapest, Pf. 9.; ugyfelszolgalat@naih.hu), or turn to the courts. Proceedings may also be brought before the court competent for your place of residence.<\/p>

    7. Data security<\/h2>

    The website runs over an encrypted (HTTPS) connection. Personal data is accessible only to authorised colleagues, each with their own login. Our systems are updated and backed up regularly.<\/p>\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>","protected":false},"excerpt":{"rendered":"","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"elementor_header_footer","meta":{"_acf_changed":false,"footnotes":""},"class_list":["post-1489","page","type-page","status-publish","hentry"],"blocksy_meta":{"styles_descriptor":{"styles":{"desktop":"","tablet":"","mobile":""},"google_fonts":[],"version":7}},"acf":[],"_links":{"self":[{"href":"https:\/\/bombay.hu\/en\/wp-json\/wp\/v2\/pages\/1489","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/bombay.hu\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/bombay.hu\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/bombay.hu\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/bombay.hu\/en\/wp-json\/wp\/v2\/comments?post=1489"}],"version-history":[{"count":0,"href":"https:\/\/bombay.hu\/en\/wp-json\/wp\/v2\/pages\/1489\/revisions"}],"wp:attachment":[{"href":"https:\/\/bombay.hu\/en\/wp-json\/wp\/v2\/media?parent=1489"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}