Privacy Policy
Effective Date: August 1, 2024
Last Updated: September 2026
Introduction
This Privacy Policy governs the manner in which Berezka Restaurant LLC ("we", "our", "us") collect, use, maintain, and disclose information collected from users ("User" or "Users") of our mobile application and website (https://www.berezka.ae/) ("Service"). This Privacy Policy applies to the Service and all products and services offered by Berezka Restaurant LLC.
1. Company Details
• Entities Covered: Berezka Restaurant LLC
• Address: West Roof Top, Nakheel Mall, Palm Jumeirah, PO 282332
• Contact Information: https://www.berezka.ae
2. Types of Data Collected
We collect various types of personal information from Users, including but not limited to:
• Contact Information: Email address, phone number.
• Identity Information: Name, date of birth, gender.
• Delivery Information: Delivery addresses.
We do not collect sensitive personal data such as health information, financial data, or identification numbers.
3. Methods of Collection
Personal data is collected from Users through:
• Mobile Applications: Information provided through our mobile applications.
• Website Forms: Information provided through forms on our website.
We do not use cookies or other tracking technologies to collect data.
4. Purpose of Data Collection
We collect and use Users' personal information for the following purposes:
• Functionality: To implement the functionality of our mobile application, including delivery services.
• Marketing: To send Users information they agreed to receive about topics we think will be of interest to them.
• Customer Service: To respond to Users' customer service requests and support needs more effectively.
• Order Processing: To process and deliver orders that Users place with us.
• Analytics: To understand how our Users as a group use the services and resources provided on our Site.
5. Data Minimization and Purpose Limitation
We collect only the personal data necessary for the specified purposes and do not process data for any other incompatible purposes without explicit consent.
6. Data Integrity and Accuracy
We take reasonable steps to ensure that the personal data we process is accurate, complete, and current, and we update it as necessary to maintain accuracy.
7. Legal Basis for Processing Personal Data (GDPR Compliance)
Under the General Data Protection Regulation (GDPR), we process personal data based on the following legal grounds:
• Consent: Where Users have provided explicit consent for the processing of their personal data.
• Contractual Necessity: Where processing is necessary for the performance of a contract with the User.
• Legal Obligation: Where processing is necessary for compliance with a legal obligation.
• Legitimate Interests: Where processing is necessary for our legitimate interests and those interests are not overridden by the User's data protection rights.
8. Data Sharing
We share personal data with third parties only in the ways described in this Privacy Policy:
• Syrve: An all-in-one POS & Restaurant Management Software, used to facilitate our services.
• Third-Party Data Processors: We may also work with payment processors, cloud service providers, and other third-party service providers who adhere to data protection standards.
We do not sell personal data to third parties.
9. Data Storage and Retention
• Storage Location: Personal data is stored in cloud storage.
• Retention Period: We retain personal data for the duration of the provision of our services. Once the data is no longer necessary for the purposes for which it was collected, it will be securely deleted.
Users may also delete their account and the personal data associated with it at any time, as described in Section 13 (Account and Data Deletion).
10. Security Measures
We implement several security measures to protect personal data, including:
• Encryption: Encrypting personal data during transmission and storage.
• Access Controls & Authentication: Restricting access to personal data to authorized personnel only.
• Logging & Monitoring: Keeping logs of access to personal data and monitoring for unauthorized access.
• Backups: Regularly backing up data to prevent data loss.
11. User Rights
Users have the following rights regarding their personal data:
• Right to Access: Users can request access to their personal data.
• Right to Rectification: Users can request corrections to inaccurate or incomplete personal data.
• Right to Erasure: Users can request the deletion of their personal data.
• Right to Restrict Processing: Users can request restrictions on how their personal data is processed.
• Right to Data Portability: Users can request a copy of their personal data in a commonly used format.
• Right to Object: Users can object to the processing of their personal data under certain circumstances.
Users can exercise these rights (a) in the mobile application, (b) through the personal account on our website https://www.berezka.ae/, or (c) by sending a request to app@berezka.ae or calling +971521567405. Having the mobile application installed is not required to exercise any of these rights. We aim to respond to requests within 30 days. Account deletion is described in Section 13.
12. Consent and Opt-Out
• User Consent: We obtain user consent for data collection and processing through a mandatory agreement with the service rules and this Privacy Policy at the registration stage.
• Marketing Opt-Out: Users can stop receiving marketing communications at any time without deleting their account: by using the unsubscribe link in any marketing email, by disabling push notifications in their device settings, or by sending a request to app@berezka.ae.
• Withdrawal of Consent: Users who no longer wish us to process their personal data may delete their account as described in Section 13. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
13. Account and Data Deletion
This Section applies to accounts created in the Chalet Berezka Dubai mobile application (available on Google Play at https://play.google.com/store/apps/details?id=berezka.app.rest) and on the website https://www.berezka.ae/, operated by Berezka Restaurant LLC.
You can delete your account and the personal data associated with it at any time, using any of the following methods. You do not need to have the mobile application installed to do so.
1. In the mobile application: open [Profile → Settings → Delete Account] and confirm the deletion.
2. On the website: log in to your personal account at [URL OF PERSONAL ACCOUNT / DELETE ACCOUNT PAGE] and select "Delete Account".
3. By request: email app@berezka.ae with the subject "Account deletion" from the email address linked to your account, or call +971521567405. To protect your account from unauthorized deletion, we may ask you to verify your identity, for example by confirming a one-time code sent to the phone number or email address registered to the account.
We will confirm receipt of your request and complete the deletion within 30 days.
What is deleted: your name, date of birth, gender, phone number, email address, delivery addresses, order and reservation history, loyalty program balance and history, and marketing preferences. Accrued loyalty points and bonuses are forfeited on deletion and cannot be restored. We also instruct the service providers that process this data on our behalf (including Syrve and third-party delivery services) to delete it.
What may be retained: we may keep limited data after deletion where this is required by law or necessary for legitimate purposes: (a) transaction and accounting records relating to your orders, for the period required by applicable UAE tax, accounting and commercial legislation, in a form that no longer identifies you where possible; (b) records necessary to prevent fraud, resolve disputes or comply with legal obligations. Retained data is used only for these purposes, is not used for marketing, and is deleted when the retention period ends.
Deleting data without deleting the account: if you wish to delete specific data (for example, a saved delivery address) while keeping your account, you can do so in the mobile application or personal account, or by contacting us at app@berezka.ae.
14. International Data Transfers
If we transfer personal data to countries outside the European Economic Area (EEA), we ensure that appropriate safeguards are in place to protect the data, such as Standard Contractual Clauses (SCCs) or other legal mechanisms recognized under GDPR.
15. Legal Compliance
• Regulations: We comply with relevant data protection regulations, including GDPR, CCPA, CPRA, and PIPEDA, as well as applicable UAE data protection laws.
• Data Breaches: In the event of a data breach, we will implement our disaster recovery plan and notify affected users promptly upon discovering the breach.
16. Data Breach Notification Process
In the event of a data breach, we will:
• Notify affected users within 72 hours of becoming aware of the breach.
• Provide information on the nature of the breach, the affected data, and the steps taken to mitigate the breach.
• Offer guidance on what users can do to protect themselves.
17. Data Protection Officer (DPO)
If applicable, our Data Protection Officer (DPO) can be contacted at:
• Name: [DPO Name]
• Email: [DPO Email]
18. Children's Privacy
Our services are not directed to individuals under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal information, we will take steps to delete such information. If you are aware that a child has provided us with personal information, please contact us.
19. User Feedback and Complaints
Users can provide feedback or complaints regarding their data privacy by contacting us at:
• Phone: +971521567405
• Email: app@berezka.ae
We will address and resolve user concerns promptly.
20. Policy Review and Update
This policy will be reviewed and updated at least annually or when significant changes occur in data protection laws or company practices. Users are encouraged to review the policy periodically for any changes.
21. Language and Accessibility
This Privacy Policy is drafted in English. If you require the policy in another language or an accessible format, please contact us, and we will do our best to accommodate your needs.
22. Automated Decision-Making and Profiling
If our services use automated decision-making or profiling that significantly affects users, we will provide information about the logic involved and the potential consequences for users.
23. Data Protection Impact Assessments (DPIAs)
We conduct Data Protection Impact Assessments (DPIAs) to identify and mitigate risks related to our data processing activities, ensuring compliance with data protection regulations.
24. Rights of Users Under Specific Laws
Users have specific rights under laws such as the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), including the right to know, the right to delete, the right to opt-out of the sale of personal information, and the right to non-discrimination.
25. Data Anonymization and Pseudonymization
We may anonymize or pseudonymize personal data to enhance privacy and security, ensuring that data cannot be attributed to a specific individual without additional information.
26. Data Retention Policy
We retain different types of data for specified periods, based on the nature of the data and the purpose of its processing. The criteria used to determine retention periods include legal requirements, business needs, and user expectations.
27. Health and Safety Information
We collect necessary health and safety data to ensure the safety of our customers and employees, including compliance with health procedures related to food preparation and delivery.
28. Allergy Information
We provide information about ingredients and allergens in the foods offered. Customers with specific dietary requirements or allergies are encouraged to contact us to verify ingredients.
29. Reservation Information
We collect reservation information to efficiently manage table bookings and provide a personalized experience for customers.
30. Loyalty Programs and Promotions
We collect and use personal data to offer loyalty programs and promotions that customers have agreed to participate in.
31. Third-Party Delivery Services
We may share delivery data with third-party delivery services to facilitate our services. We ensure our partners comply with data protection standards.
Conclusion
We are committed to safeguarding your privacy and ensuring that your personal data is protected. By using our services, you acknowledge that you have read and understood this Privacy Policy. If you have any questions or concerns, please do not hesitate to contact us.