Privacy Policy

This Privacy Policy explains what personal data may be processed when you visit cafelunebudapest.com, contact Café Lune, request a reservation, interact with third-party content displayed on the website, or change your cookie preferences.

The website is an informational and promotional website for Café Lune, a café, bar and restaurant located in Budapest. It provides information about food, coffee, brunch, desserts, alcoholic and non-alcoholic drinks, cocktails, events, opening hours, location, customer reviews and social media activity.

The website does not operate an online shop, does not process online purchases and does not accept payments through the website.

Data Controller

The controller responsible for personal data processed in connection with this website is:

Purpose of the Website

The website is primarily intended to provide information about Café Lune and its services, including its menu, food, coffee, brunch, desserts, alcoholic and non-alcoholic drinks, cocktails, opening hours, events, location, reservations, social-media activity and customer reviews.

No user account is required to browse the website.

Café Lune does not use the website to sell products directly online and does not collect payment-card or online-payment information through the website.

Personal Data Processed When You Visit the Website

When a visitor accesses the website, certain technical information may automatically be processed by the web server, hosting provider, security systems and website software.

This information may include:

• IP address;
• date and time of access;
• requested page or resource;
• referring website or page;
• browser type and version;
• operating system;
• device type;
• language settings;
• approximate technical location information;
• technical errors and diagnostic information;
• security events or attempted attacks.

This processing is used to deliver the website, maintain its functionality, diagnose technical problems, protect the website against misuse and attacks, and maintain appropriate information-security measures.

Where applicable, the legal basis is Café Lune's legitimate interest in maintaining a functional, reliable and secure website under Article 6(1)(f) GDPR.

Reservations and Direct Communications

Visitors may contact Café Lune by telephone, email, WhatsApp or another communication channel made available on the website.

If you contact Café Lune, the information you voluntarily provide may include:

• your name;
• telephone number;
• email address;
• requested reservation date and time;
• number of guests;
• the content of your enquiry or message;
• other information necessary to handle your request.

The purpose of processing is to respond to enquiries, arrange and administer reservations, communicate with guests and provide requested information.

Where processing concerns a requested reservation or service, the legal basis is Article 6(1)(b) GDPR. General enquiries may also be processed on the basis of Café Lune's legitimate interest under Article 6(1)(f) GDPR.

Visitors should avoid sending unnecessary sensitive or special-category personal data.

Google Analytics and Site Kit by Google

Café Lune uses Google Analytics, implemented through Site Kit by Google, to understand how visitors interact with the website.

Google Analytics may process information such as:

• pages viewed;
• approximate geographic area;
• browser and device information;
• referral source;
• session information;
• interactions with website elements;
• technical identifiers.

Analytics information helps Café Lune understand how visitors find and use the website and assists with improving website content and performance.

Where Google Analytics uses non-essential cookies or comparable technologies, processing is based on the visitor's consent under Article 6(1)(a) GDPR.

Visitors who do not consent to analytics cookies should still be able to use the core informational functions of the website.

Google Analytics Cookies

Where the visitor consents to analytics storage, Google Analytics may use cookies such as the following:

The exact cookies used on the website may change when Google services, plugins or website functionality are modified.

Google Analytics Data Retention

Google Analytics provides configurable retention periods for certain user-level and event-level data.

Café Lune intends to retain analytics information only for as long as reasonably necessary to understand website usage and improve its services.

Aggregated information that no longer identifies or singles out an individual visitor may be retained for longer where permitted by law.

Cookie Consent and Preference Management

The Café Lune website uses a cookie-consent interface allowing visitors to accept, reject or customise non-essential technologies.

Necessary cookies and technologies may operate without optional consent where they are strictly required for website functionality, security or remembering a visitor's privacy preferences.

Analytics, advertising, social-media or other non-essential technologies should only be activated where the appropriate legal requirements have been satisfied.

Visitors may withdraw their consent at any time through the website's cookie preference settings.

Withdrawal does not affect the lawfulness of processing performed before consent was withdrawn.

Google Maps

The website may contain an embedded Google Maps map showing the location of Café Lune.

When Google Maps is loaded, the visitor's browser may establish a direct connection with Google. Google may receive technical information such as the visitor's IP address, browser information, device information and information relating to the use of the map.

Visitors may also use a "Get Directions" link to open Café Lune's location directly in Google Maps. When following an external Google Maps link, the visitor leaves the Café Lune website and Google's privacy terms apply.

Google Reviews and Trustindex

Café Lune may display customer reviews originating from Google through a Trustindex review widget.

The widget may display publicly available information including reviewer names, profile images, review ratings, review text, dates and Google branding.

When externally hosted widget resources are loaded, technical information such as the visitor's IP address, browser information, requested resource and access time may be transmitted to the relevant service provider.

Reviews displayed on the website originate from third-party review platforms and are not necessarily collected directly by Café Lune through this website.

Visitors who click a link to read or write a Google review will leave the Café Lune website and Google's privacy terms will apply.

Instagram and Social-Media Content

Café Lune displays content from its Instagram account through a social-media feed integration.

This may include:

• Instagram photographs;
• Reels and videos;
• post captions;
• profile information;
• links to Instagram;
• other publicly available social-media information.

Some social-media assets may be stored locally on the website, while other resources may be loaded from Instagram or Meta infrastructure.

If a visitor interacts with embedded Instagram content or follows a link to Instagram, Meta may process information according to its own privacy policies.

Google Fonts and Other External Resources

The website may use fonts and other technical resources supplied by third-party providers.

Where such resources are loaded directly from an external provider, the visitor's browser may transmit technical connection information, including an IP address and browser information, to that provider.

Where reasonably practical, Café Lune may use locally hosted fonts and static resources to reduce unnecessary third-party connections.

WhatsApp and Other Communication Links

The website may provide links allowing visitors to contact Café Lune through WhatsApp or another third-party communication platform.

When a visitor follows such a link or opens a third-party application, that service provider may process information under its own terms and privacy policy.

Visitors who do not wish to use WhatsApp may contact Café Lune directly by telephone or email.

Recipients and Service Providers

Depending on the active website configuration, personal data or technical information may be processed by service providers involved in operating the website.

These may include:

• website hosting providers;
• content-delivery and security providers;
• website administrators and IT service providers;
• Google;
• Google Analytics and Site Kit;
• Google Maps;
• Trustindex;
• Meta and Instagram;
• cookie-consent technology providers;
• competent authorities where disclosure is required by law.

Transfers Outside the European Economic Area

Some technology providers used by the website operate internationally and may process information outside Hungary or outside the European Economic Area ("EEA").

Where personal data is transferred outside the EEA, such transfers must be based on an appropriate mechanism permitted under the GDPR, such as an adequacy decision, approved Standard Contractual Clauses or another lawful transfer mechanism.

The exact mechanism may depend on the service provider, contractual relationship and circumstances applicable at the time of processing.

Legal Bases for Processing

How Long Personal Data Is Retained

Café Lune follows the principle that personal data should not be retained for longer than reasonably necessary for the purpose for which it was collected.

• Reservation information may be retained for the period required to manage the reservation and reasonable customer-service follow-up.
• General correspondence may be retained for a reasonable period necessary to deal with the enquiry.
• Security and server logs may be retained for an appropriate technical and security period.
• Cookie-consent records may be retained as necessary to demonstrate privacy choices.
• Analytics information is retained according to the configured Google Analytics retention settings.
• Information required for legal obligations, disputes or legal claims may be retained for the applicable statutory period.

Data Security

Café Lune takes reasonable technical and organisational measures designed to protect personal data against unauthorised access, disclosure, alteration, destruction or loss.

Measures may include:

• HTTPS encrypted connections;
• secure administrator credentials;
• access controls;
• software and plugin updates;
• website backups;
• server security measures;
• restricted administrative access;
• appropriate security monitoring.

No internet transmission or electronic storage method can be guaranteed to be completely secure.

Your GDPR Rights

Subject to the conditions and limitations of applicable data-protection legislation, you may have the right to:

To exercise your rights, contact: [email protected]

Café Lune may request reasonable information necessary to confirm the identity of the person making a request.

Right to Withdraw Cookie Consent

Where processing is based on consent, visitors may withdraw their consent at any time.

Visitors may use the website's cookie-preference interface to modify their choices.

Rejecting or withdrawing optional analytics, marketing or social-media consent should not prevent access to the website's essential informational content, although some optional third-party features may no longer function.

Right to Lodge a Complaint

If you believe Café Lune has processed your personal data unlawfully, you may contact Café Lune first so the matter can be investigated.

You also have the right to lodge a complaint with the Hungarian supervisory authority:

You may also seek judicial remedies where available under applicable law.

Automated Decision-Making and Profiling

Café Lune does not use this website to make decisions about visitors that produce legal effects or similarly significant effects solely through automated decision-making.

Website analytics may involve statistical analysis of website usage, but Café Lune does not use such analytics to make significant automated decisions concerning individual visitors.

Children's Data

The website is intended to provide general information about Café Lune and is not designed for the purpose of collecting personal data from children.

Café Lune does not knowingly request children to create website accounts, make online purchases or submit personal data through an online registration system.

External Websites and Third-Party Services

The website may contain links to third-party websites or services, including:

• Google Maps;
• Google Reviews;
• Instagram;
• WhatsApp;
• other social-media or communications platforms.

Café Lune is not responsible for the privacy practices of third-party websites after a visitor leaves cafelunebudapest.com.

Visitors are encouraged to review the privacy information provided by those third-party services.

Changes to This Privacy Policy

Café Lune may update this Privacy Policy when the website, services, third-party integrations, legal requirements or data-processing practices change.

The latest version will be published on this website together with the date of the latest revision.

Significant changes affecting how personal data is processed should also be reflected in the website's cookie and consent configuration where required.