SIFRA SUSHI AND GRILL
SIFRA SUSHI AND GRILL is committed to respecting the privacy rights of all visitors to our website.
This Privacy Policy covers the use of the website and the services provided by SIFRA SUSHI AND GRILL, trading as SIFRA SUSHI AND GRILL (“SIFRA SUSHI AND GRILL”, “we”, “us” or “our”).
SIFRA SUSHI AND GRILL is incorporated with company registration number and has its registered address at Calçada da Boa Hora, 168A, 1300-098 Lisboa, Portugal.
Website: http://sifrasushiandgrill.pt/
This Privacy Policy provides details of the way in which we process personal data in line with our obligations under the General Data Protection Regulation (EU) 2016/679 (“GDPR”), the Data Protection Act 2018, and any other applicable data protection laws (together, the “Data Protection Laws”).
In this Privacy Policy, “controller”, “personal data” and “process” (and their derivatives) have the meanings given to those terms under Data Protection Laws.
Personal data generally means information that can be used to identify an individual, and processing refers to actions such as collection, use, storage, and disclosure. SIFRA SUSHI AND GRILL is the controller of your personal data processed in connection with the website.
The purpose of this Privacy Policy is to explain how and why we process personal data and to outline our responsibilities regarding its protection. Our data processing practices may evolve over time, and we may update this Policy accordingly.
Personal Data We Collect
We collect personal data when:
you provide it directly to us,
third parties provide it to us, or
it is automatically collected through your use of our website.
We do not disclose your personal data to third parties except as outlined in this Privacy Policy.
Personal Data Collected Directly From You
We may collect personal data when you place a food order, including but not limited to:
You may also provide information relating to health conditions or religious beliefs (e.g., dietary requirements).
Personal Data Collected Automatically
When you use our website, we may automatically collect:
IP address
device identifiers
browser information
cookie data
How We Use Personal Data
We process personal data to operate, improve, and personalise our services, including to:
complete food orders (delivery or collection);
personalise content based on preferences;
contact you about offers (subject to your consent);
communicate with you;
prevent fraud or unlawful activity;
respond to enquiries and provide support;
comply with legal and contractual obligations;
enforce our terms and conditions;
resolve disputes.
Lawful Basis for Processing
Purpose of Processing Lawful Basis under GDPR
Administration purposes Necessary for the performance of a contract, compliance with legal obligations, or based on consent
Training and quality monitoring Legitimate interests in improving services
Website operation and analytics Legitimate interests in maintaining and improving the website
Statistical analysis Legitimate interests in service improvement
Enforcing and defending legal rights Legitimate interests and legal obligations
We will not use your personal data for marketing purposes without your consent. You may opt out at any time via the “opt-out” link in communications or by contacting us through our website.
Your Data Protection Rights
Under Data Protection Laws, you have the right to:
be informed about data processing;
access your personal data;
rectify or erase data;
restrict processing;
data portability;
object to processing;
object to automated decision-making (including profiling).
Requests can be made via the contact details provided on our website and will be handled in accordance with applicable law.
Sharing of Personal Data
We do not sell or share your personal data with third parties except as described in this Policy.
We and Flipdish, our online ordering partner, act as joint controllers for personal data processed through food orders placed via the Flipdish platform. Flipdish may also act as a processor for marketing consent management and analytics.
We may disclose personal data where required by law, to enforce our rights, investigate fraud, or protect users and third parties.
In the event of a business sale or merger, personal data may be transferred, and users will be notified.
Data Retention
We retain personal data only for as long as necessary for the purposes outlined in this Policy or as required by law.
Third-Party Links
Our website may contain links to third-party websites. We are not responsible for their privacy practices, and users should review their policies separately.
Changes to This Policy
Any updates to this Privacy Policy will be posted on our website and, where appropriate, communicated by email.
Contact Us
For questions regarding this Privacy Policy or our data processing practices, please contact us using the details provided on our website.
You may also lodge a complaint with the relevant Data Protection Authority; however, we encourage you to contact us first so we can address your concerns.