Privacy Policy
Restoran Lipi – Ivanec
Last updated: 1 November 2026.
At Restoran Lipi, we respect your privacy and take care to protect your personal data. This Privacy Policy explains what personal data we collect through our website, why we process it, how we protect it and what rights you have in relation to your data.
1. Personal data controller
The personal data controller is:
LIPI j.d.o.o. za ugostiteljstvo i usluge
- Address: Ulica akademika Mirka Maleza 31, 42240 Ivanec, Croatia
- OIB (Croatian tax ID): 64639228942
- Email: restoran@lipi.hr
- Phone: 042 782 844
If you have any questions about the processing of personal data, you can contact us at the email address above.
2. What personal data do we collect?
Depending on how you use our website, we may process the following data:
Newsletter subscriptions
- The email address you voluntarily provide.
- Subscription and consent information, such as the date, time and technical data used to confirm your subscription.
- Information about your subscription and unsubscribe status.
- Information about your interaction with newsletter emails, if email open and click tracking is enabled.
Contact and reservations
If you contact us by email or telephone, we may process your name, contact details and information you voluntarily provide so that we can respond to your enquiry or arrange a reservation.
Website use
When you visit the website, certain technical data may be processed automatically, such as your IP address, access time, browser information and other information needed for the website to operate securely and properly.
3. Purposes and legal bases for processing
We process your personal data only for specific and lawful purposes.
Sending newsletters
If you subscribe to our newsletter, we use your email address to send the content you have agreed to receive, such as daily lunch offers, restaurant news and information about events.
The legal basis for this processing is your consent, in accordance with Article 6(1)(a) of the General Data Protection Regulation (GDPR).
Subscribing is entirely voluntary and is not a condition for using our website or services.
Responding to enquiries and reservations
We use the data you provide when contacting us to answer your questions or arrange a reservation. Depending on the nature of the communication, the legal basis may be taking steps at your request before entering into a contract, or our legitimate interest in responding to enquiries.
Website security and operation
We may process technical data to maintain security, detect technical problems and ensure the website operates properly, on the basis of our legitimate interest.
4. Newsletters and the use of Mailchimp
To manage subscriptions and send newsletter emails, we use Mailchimp, an email marketing service provided by The Rocket Science Group LLC, which is associated with Intuit.
When you subscribe to the newsletter, your email address and related subscription data are processed through Mailchimp to manage the mailing list and send emails.
Mailchimp may process email delivery and subscription status data and, if the relevant features are enabled, information about email opens and link clicks. This data may be used to analyse newsletter performance and improve the content we send.
Data may be transferred to and processed outside the European Economic Area, including in the United States of America. Appropriate safeguards provided for by the GDPR apply to these transfers, in accordance with Mailchimp's applicable contractual terms.
More information is available in Mailchimp's privacy policy.
Unsubscribing from the newsletter
You may unsubscribe at any time, without giving a reason.
Every newsletter email will contain an unsubscribe link (Unsubscribe).
You can also request to unsubscribe by emailing restoran@lipi.hr.
Withdrawing consent does not affect the lawfulness of processing carried out before consent was withdrawn.
5. Sharing personal data
We do not sell personal data or provide it to other companies for their own independent advertising.
Authorised staff at Restoran Lipi and technical service providers needed to maintain the website, store data and send newsletters may have access to the data.
These service providers process data in accordance with their respective roles, contractual obligations and applicable personal data protection rules.
We may also disclose data to the competent authorities when required by law.
6. How long do we retain personal data?
We process newsletter-related data while you are subscribed to our mailing list or until you withdraw your consent.
After you unsubscribe, we stop sending you newsletters. Certain minimal records of your unsubscribe request or previous consent may be retained for as long as necessary to prevent unwanted further emails, demonstrate the lawfulness of processing or comply with legal obligations.
We retain enquiry and reservation data for as long as necessary to handle the request and, where needed, to meet legal obligations or protect legal interests.
We retain technical data for the period necessary for the website's security and operation.
7. Cookies and external services
Our website may use strictly necessary cookies and similar technologies needed for it to function properly.
If we use analytics or marketing cookies that require consent, we will activate those technologies only after you have given the appropriate consent.
The website may also contain content from external service providers, such as Google Maps. When this content is activated, external providers may process certain technical data in accordance with their own privacy policies.
8. Personal data security
We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, alteration or misuse.
Access to personal data is limited to the people and service providers who need it to perform their respective tasks.
9. Your rights
Under the GDPR, you have the right to:
- Request access to the personal data we process.
- Request correction of inaccurate or incomplete data.
- Request erasure of personal data where the legal conditions are met.
- Request restriction of processing.
- Object to processing based on legitimate interests.
- Request data portability where the relevant conditions are met.
- Withdraw previously given consent at any time.
To exercise your rights, contact us at restoran@lipi.hr.
We respond to requests within the time limits set by the GDPR, generally no later than one month after receiving a valid request.
If you believe your rights have been infringed, you have the right to lodge a complaint with the competent supervisory authority:
Croatian Personal Data Protection Agency (AZOP)
Ulica Metela Ožegovića 16, 10000 Zagreb
Email: azop@azop.hr
Web: https://azop.hr
10. Automated decision-making
Restoran Lipi does not make decisions that would produce legal or similarly significant effects for you based solely on automated processing of personal data.
11. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to how the website operates, the services we use or applicable rules.
The current version will always be available on our website, showing the date it was last updated.
Thank you for your trust!
At Restoran Lipi, we want you to feel welcome and secure, both at our table and when visiting our website.