Privacy Policy

1. Who is responsible for your data

The reservation service on this website is operated by StayOut, vl. Filip Begović ("we", "us"), acting as the data controller for the table reservations of the restaurant Lanterna. For every question about your personal data, including requests to access, correct or delete it, contact us at hello@stayout.app.

2. What data we collect

• Reservation details: your name, email address, phone number (optional), party size, reservation date and time, and any notes you write for the restaurant (for example allergies or occasions).
• Account details: if you create an account, your login email address and password (stored only in encrypted form by our authentication provider).
• Waitlist details: the same contact details, saved when you join a waitlist for a fully booked time.
• Consent records: when you accepted this privacy policy and whether you opted in to our newsletter.
• Push notification data: if you turn on phone alerts, a technical token needed to deliver them to your device.
• Technical data: basic device and browser information needed to run and secure the service.

3. Why we use your data, and on what legal basis

• To handle your reservation — showing availability, saving your booking, assigning a table, and confirming, reminding or updating you by email (legal basis: performance of a contract / steps before entering a contract).
• To operate the service securely — keeping reservation records, preventing abuse, and diagnosing technical problems (legal basis: our legitimate interest).
• To send you offers and news — only if you switch the newsletter option on. You can withdraw this consent at any time (legal basis: your consent).

We do not use your data for advertising profiling, and we never sell it.

4. Who else can see your data

Your reservation details are visible to the restaurant's staff so they can host you. We use a small number of trusted providers to run the service: our hosting and database provider, our email delivery provider, and our notification service. Each of them processes data only on our instructions under a data processing agreement. We do not transfer your data to countries outside the European Economic Area without appropriate safeguards.

5. How long we keep it

• Reservation records are kept for up to 24 months and then deleted.
• Waitlist entries are kept for up to 3 months after the requested date.
• Newsletter consent is kept until you withdraw it.
• Account details are kept while your account exists; deleting your account removes them.

6. Your rights

You have the right to:

• get a copy of your data (access),
• correct inaccurate data,
• have your data deleted,
• restrict or object to how we use it,
• receive your data in a portable format,
• withdraw your consent (for example, the newsletter) at any time.

To exercise any of these rights, email hello@stayout.app. We answer within 30 days. You also have the right to complain to the Croatian Personal Data Protection Agency (AZOP).

7. Cookies and local storage

This service only uses browser storage that is strictly necessary to keep you signed in and to remember your notification settings on this device. We do not use tracking, analytics or advertising cookies.

8. Children

The service is not aimed at children under 16 and we do not knowingly collect their data. If you believe a child has given us their data, contact us and we will delete it.

9. Changes to this policy

If we change this policy, the new version will be published on this page with an updated date. Significant changes affecting your reservations will also be communicated to you directly.