1. Our responsibility for your privacy
This privacy policy applies to you as a Resthon restaurant customer (see overview here). When we refer to 'we, our, us' in this privacy policy, we mean Resthon.
You can be sure that we process your data in a lawful and secure manner.
2. Data controller
We are owned by the Thon Group AS (hereinafter 'the Thon Group', 'TG'), which is the data controller for your personal data. It is the Thon Group that decides why and how processing at Resthon is to be carried out.
3. Your personal data: What do we do?
3.1 Table reservation
When you reserve a table at one of our restaurants, we ask you to provide contact information such as:
- Name
- Phone number
- Email address
- Time of day
- Number of people and
- Any other specifications
We do this to administer and manage your reservation and as part of our service provision to you. The legal basis for this is the fulfilment of a contract with you (GDPR Article 6 (1) b).
The personal data collected in connection with your reservation is stored for 12 months after the reservation has been made. Payment information is deleted after five years on the basis of the Norwegian Bookkeeping Act.
3.2 Newsletter
On our website, you can subscribe to our newsletter. We will then process your:
- Name
- Date of birth (optional, age confirmation)
- Email address
The legal basis for this is your consent (GDPR Article 6 (1) a).
The data will be deleted if you revoke your consent. This can easily be done via the link at the bottom of the newsletter.
4. Sensitive personal data
Some personal data is particularly sensitive and requires additional protection, such as health-related data. When you make a reservation at one of our restaurants, you may have special requests for your reservation, which may involve providing health-related information or other information that needs to be processed with particular care, such as food allergies.
When you add such special requests to your reservation, we require your consent for the collection and use of sensitive data in accordance with GDPR Art. 9 (2) a.
5. Social media
We are present on social media platforms. Social media allows us to view posts, likes, followers, comments and messages, as well as aggregated information about visits and activity on our pages, boards and personalised ads.. We do this on the basis of our legitimate interest in reaching out to customers and potential customers (GDPR Art. 6 (1) f).
The social media platforms themselves are the data controllers for the information you provide there. We do not store this information ourselves, but have access to it as long as we have a page on the social media platform. You can delete information about yourself at any time, such as by removing content or comments you have posted. Your data will not be deleted if you simply stop following our page.
You can find more information about how personal data is processed in the privacy policies of the various social media platforms. We encourage you to read these.
6. Cookies
You can read more about our use of cookies in our Cookies Policy.
7. For more information on how we keep your personal data, including:
- Our security measures to protect your data
- Your rights
- Where the data is stored and with whom it is shared
please see the Thon Group Privacy Policy.