Data privacy.
This page explains what personal data Café Michelle collects, why we collect it, and what you can do about it. We collect as little as we can.
Who we are.
The controller of your personal data is Michelle sp. z o.o., ul. Hoża 86 lok. 410, 00-682 Warszawa, KRS 0001111128, NIP 7011209687. We run Café Michelle at Grochowska 282 · Warszawa.
For anything about your data, email info@cafemichelle.com or write to us at the address above.
What we collect and why.
When you message us.
If you use our contact form or email us, we get your name, your email address, your phone number if you give it, and your message. We use them to reply to you and to handle reservations, catering and events. The legal basis is our legitimate interest in answering you (article 6(1)(f) GDPR) and, for bookings, taking steps you ask for before a contract (article 6(1)(b) GDPR). We keep these messages for up to three years after our last contact with you, unless we need them longer to deal with a claim.
When you apply for a job.
If you send an open application, we get what you choose to include: usually your name, contact details, work history and CV. We keep it only if you agree to it in your application (article 6(1)(a) GDPR), for 12 months or until you withdraw your consent, whichever comes first. Withdrawing your consent doesn't affect anything we did before.
When you sign up for our newsletter.
We get your email address and, if you give it, your first name. We use them only to send you the newsletter, based on your consent (article 6(1)(a) GDPR). We keep them until you unsubscribe, which you can do from the link in every email.
When you visit this site.
If you accept cookies, HubSpot's analytics cookies record how you use the site: the pages you view, how long you stay, the site that sent you here, your device and browser, and your IP address. We use this to see which pages help people and which don't, based on your consent (article 6(1)(a) GDPR). If you decline, these cookies don't load. Our cookies page lists every cookie we use.
The servers that run this site also keep short technical logs so it stays up and secure. That's based on our legitimate interest (article 6(1)(f) GDPR).
When you order through a delivery app.
Orders on Wolt, Uber Eats and Bolt Food go through those companies, and each one is responsible for the data it collects. We only see what we need to make your order. Their own privacy policies apply.
Who we share it with.
We don't sell your data. We share it only with companies that run services for us, under contracts that protect it, and with public authorities when the law requires it.
- HubSpot hosts this website, our forms, our newsletter and our contact records. Our HubSpot account stores its data in the EU.
- Our email provider handles messages sent to info@cafemichelle.com.
HubSpot belongs to HubSpot, Inc. in the United States, which may access data to support its service. Those transfers are covered by the EU-US Data Privacy Framework and the European Commission's standard contractual clauses.
Your rights.
You can ask us to:
- show you the data we hold about you and give you a copy
- correct it
- delete it
- limit how we use it
- send it to you or to another company in a common format
You can also object to anything we do based on our legitimate interest, and withdraw your consent at any time. Email info@cafemichelle.com and we'll reply within one month.
If you think we've handled your data wrongly, you can complain to the Polish data protection authority: Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl.
A few more things.
Giving us your data is voluntary, but we can't reply to a message without a way to reach you. We don't make automated decisions about you, and we don't build profiles of people.
If this policy changes, we'll update this page and the date below.
Last updated: 30 October 2026.