Privacy Policy

1. Who We Are

This website is operated by Pošada Split d.o.o. on behalf of 2Point Restaurant, located at Obala Bana Berislavića 16, Trogir 21220, Croatia. We are committed to protecting your privacy and personal data in accordance with the General Data Protection Regulation (GDPR) and Croatian data protection laws.

2. What Data We Collect

We collect the following personal data when you use our website:

• Reservation form: Name, email address, phone number, seating preference, number of guests, special requests, and date/time of reservation.
• Contact form: Name, email address, and message content.
• Technical data: IP address, browser type, and device information collected automatically for security and rate limiting purposes.

3. Why We Collect Your Data

Your personal data is processed for the following purposes:

• To process and manage your table reservation.
• To send you reservation confirmation, reminder, and follow-up emails.
• To respond to your inquiries submitted through the contact form.
• To prevent abuse and ensure the security of our services (rate limiting).

The legal basis for processing is your consent (Article 6(1)(a) GDPR) when you submit a form, and our legitimate interest (Article 6(1)(f) GDPR) in preventing abuse.

4. How We Store Your Data

Your data is stored securely on servers provided by Supabase (EU region). Reservation data is retained for the duration of the current season and deleted at the end of each calendar year. Contact form submissions are retained for up to 6 months.

5. Third-Party Services

We use the following third-party services to operate our website:

• Supabase (database hosting, EU region) — stores reservation and configuration data.
• Resend (email delivery) — sends confirmation and notification emails.
• Vercel (website hosting) — hosts the website and processes requests.
• Google Maps (embedded map) — displays our restaurant location on the contact page.

We do not sell, trade, or share your personal data with any parties beyond these service providers.

6. Your Rights

Under GDPR, you have the following rights:

• Right of access — request a copy of your personal data.
• Right to rectification — request correction of inaccurate data.
• Right to erasure — request deletion of your personal data.
• Right to withdraw consent — withdraw your consent at any time.
• Right to lodge a complaint — with the Croatian Personal Data Protection Agency (AZOP).

7. Cookies

This website does not use tracking cookies or analytics cookies. We only use essential cookies required for the functioning of the admin dashboard (session authentication).

8. Contact

If you have any questions about this privacy policy or wish to exercise your rights, please contact us:

• Email: info@2point-trogir.com
• Phone: +385 95 829 0822
• Address: Obala Bana Berislavića 16, Trogir 21220, Croatia