U MALICKÉ BRÁNY BY ALUMIA
Privacy Policy
1. Introductory information
The protection of your personal data is important to us. In this Privacy Policy, we explain what personal data we process, for what purpose, on what legal basis, to whom the data may be disclosed, and what rights you have in connection with the processing of personal data.
This Privacy Policy applies to the website umalickebranyplzen.cz, to communication via contact and reservation forms, e-mail, phone, online reservations, inquiries about private events, inquiries about gift vouchers, and regular communication with guests of Restaurace U Malické Brány by ALUMIA.
We process personal data in accordance with applicable legal regulations, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council, known as the GDPR, and related legal regulations of the Czech Republic.
2. Personal data controller
The personal data controller is:
ALUMIA restaurants s.r.o.
Hruškova 1840/17
Jižní Předměstí
301 00 Plzeň
Czech Republic
Company ID: 11953756
VAT ID: CZ11953756
The company is registered in the Commercial Register maintained by the Regional Court in Plzeň, Section C, File 45885.
E-mail: info@umalickebranyplzen.cz
Phone: +420 777 797 083
Restaurant premises address:
Restaurace U Malické Brány by ALUMIA
Rooseveltova 35/15
301 00 Plzeň
Czech Republic
3. What personal data we process
We process only personal data that is necessary for a specific purpose. The scope of the processed data depends on how you use our website or services.
This may include in particular the following personal data:
first name and surname,
e-mail address,
phone number,
data provided in a message, note, or inquiry,
date and time of reservation, number of guests, and other data related to the reservation,
data necessary for the preparation of a private event, celebration, corporate event, or reservation of the private lounge,
data related to an order or inquiry for a gift voucher,
technical data when visiting the website, such as IP address, device type, browser type, operating system, language settings, information about website usage, or approximate location derived from technical data,
data obtained through analytical and marketing tools, if you give your consent.
4. For what purposes we process personal data
4.1 Handling table reservations
If you make a table reservation, we process your personal data for the purpose of creating, confirming, and managing the reservation. We may also use the data for possible changes to the reservation date, clarification of the reservation, or communication related to your visit to the restaurant.
4.2 Online reservations via ChoiceQR
For online reservations, we use the ChoiceQR reservation system. If you create a reservation through the embedded reservation form, data necessary to create and manage the reservation may be processed, in particular your name, phone number, e-mail address, reservation date and time, number of guests, and any note related to the reservation.
The data entered into the reservation form is used for handling the reservation and related communication. When using the reservation form, data may also be processed by the ChoiceQR service according to its own privacy policy.
4.3 Responding to an inquiry or message
If you contact us via the contact form, e-mail, or phone, we process your data for the purpose of handling your inquiry, responding to your message, and any subsequent communication.
4.4 Private events, corporate events, and private lounge reservations
If you contact us regarding a private event, celebration, corporate event, or reservation of the private lounge, we process the data necessary to prepare an offer, agree on the terms, organize the event, and carry out subsequent communication.
4.5 Gift vouchers
If you order or inquire about a gift voucher, we process the data necessary to handle the inquiry or order, communicate with you, process the payment, issue the voucher, and hand it over.
4.6 Website operation and security
When visiting the website, we may process technical data necessary for the proper display of the website, its security, protection against misuse, solving technical issues, and ensuring the basic functions of the website.
4.7 Website traffic analysis
If you give us your consent, we use Google Analytics. This tool helps us understand how visitors use our website, which pages are visited most often, where visitors come from, and how we can further improve the website.
We use Google Analytics only based on your consent given through the cookie banner or cookie settings.
4.8 Marketing and advertising campaign measurement
If you give us your consent, we use Meta Pixel. This tool may help us measure the effectiveness of advertising campaigns and display more relevant advertising on Meta platforms, such as Facebook or Instagram.
We use Meta Pixel only based on your consent given through the cookie banner or cookie settings.
4.9 Displaying the map
We may use an embedded Google Maps map on the website to help visitors find the location of the restaurant. When the map is loaded, Google may process technical data, such as IP address, device information, or data related to displaying the map.
4.10 External delivery platforms
We may include links to external delivery platforms on the website, such as Wolt or Foodora. If you click on such a link, you leave our website, and any further processing of personal data is governed by the rules of the relevant external service.
5. Legal basis for processing
We process personal data only if we have a legal basis to do so. Depending on the specific situation, the legal basis may include in particular:
performance of a contract or taking steps prior to entering into a contract — especially when making a table reservation, inquiring about a private event, reserving the private lounge, or ordering a gift voucher,
legitimate interest — especially in regular communication, website protection, ensuring security, managing relationships with guests, responding to general inquiries, and protecting our legal claims,
compliance with legal obligations — for example in the area of accounting, tax documents, or obligations arising from legal regulations,
consent — especially for analytical cookies, marketing cookies, marketing tools, and certain external services where consent is required.
6. How long we retain personal data
We retain personal data only for the period necessary for the given purpose or for the period required by legal regulations.
Data from contact forms is retained for the period necessary to handle the inquiry and any subsequent communication.
Data related to reservations is retained for the period necessary to handle the reservation and any subsequent communication.
Data related to private events, corporate events, private lounge reservations, or gift vouchers is retained for the period necessary to handle the inquiry, order, or event.
Data related to accounting and tax documents is retained for the period required by legal regulations.
Data processed based on consent is retained for the duration of the consent, or until it is withdrawn.
Technical data and security logs are retained for the period necessary to ensure the security and operation of the website.
After the relevant period has expired, we delete or anonymize personal data, unless it is still required for another lawful purpose.
7. To whom personal data may be disclosed
We do not disclose personal data to third parties unless it is necessary to provide our services, operate the website, process online reservations, communicate with you, measure website traffic, carry out marketing, or comply with legal obligations.
Personal data may be made available in particular to the following categories of recipients:
web hosting and technical website management providers,
e-mail service providers,
the ChoiceQR reservation system provider, if you use the online reservation form,
Google, if you give consent to analytical cookies or allow Google Maps to be displayed,
Meta Platforms, if you give consent to marketing cookies,
operators of external delivery platforms Wolt and Foodora, if you access these services through a link on our website,
accounting, tax, or legal advisors, if necessary,
public authorities, if required by legal regulations.
For third-party services, personal data may be processed according to their own privacy policies. This applies especially when you access an external website, allow an external service to be displayed, or use an embedded reservation form.
8. Transfer of data outside the European Union
Some third-party tools may process personal data outside the European Union or the European Economic Area. If such a transfer takes place, it is carried out only under the conditions set by legal regulations, for example based on appropriate personal data protection safeguards.
This may apply in particular to services such as Google Analytics, Google Maps, Meta Pixel, ChoiceQR, or certain other external tools.
9. Cookies and third-party tools
We use cookies and similar technologies on the website. Some cookies are necessary for the proper functioning of the website, while others are used for analytical or marketing purposes.
Analytical and marketing tools, such as Google Analytics and Meta Pixel, are used only based on your consent.
External services may also be displayed on the website, such as Google Maps or the ChoiceQR reservation form. These services may process technical data when loaded or used, such as IP address, device information, or data entered into the reservation form.
You can change your cookie settings via the cookie banner or the cookie settings link on the website.
Detailed information can be found on the separate Cookie Policy page.
10. Online reservations and external services
Online reservations on our website are made through the ChoiceQR service. This service ensures the technical functioning of the reservation form and may process the data you enter into the form.
When using the reservation form, we recommend that you also read the ChoiceQR Privacy Policy, as this service may act as a separate controller or processor of personal data depending on the specific settings of the service.
Links to Wolt and Foodora are used only to redirect you to external platforms. After clicking on these links, you leave our website, and any further processing of personal data is governed by the rules of the relevant external platform.
11. Your rights
In connection with the processing of personal data, you have in particular the following rights:
the right of access to personal data — you may request information about what personal data we process about you,
the right to rectification — you may request correction of inaccurate or outdated data,
the right to erasure — you may request deletion of personal data if the legal conditions are met,
the right to restriction of processing — you may request restriction of processing in cases specified by legal regulations,
the right to object — you may object to processing based on legitimate interest,
the right to data portability — where applicable, you may request the transfer of data in a structured and machine-readable format,
the right to withdraw consent — if processing is based on consent, you may withdraw it at any time.
Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
12. How you can exercise your rights
If you have a question about the processing of personal data or wish to exercise any of your rights, you can contact us by e-mail:
When exercising your rights, we may ask you for reasonable identity verification in order to prevent unauthorized access to personal data.
We will respond to your request without undue delay, no later than within the time limits set by legal regulations.
13. Right to lodge a complaint
If you believe that we handle your personal data in violation of legal regulations, you have the right to contact the supervisory authority:
Office for Personal Data Protection
Pplk. Sochora 27
170 00 Prague 7
Website: uoou.gov.cz
14. Personal data security
We take appropriate technical and organizational measures to protect personal data against unauthorized access, loss, misuse, alteration, or unauthorized disclosure.
Access to personal data is granted only to persons who need it to perform their work or contractual duties, and only to the necessary extent.
15. Changes to this Privacy Policy
We may update this Privacy Policy from time to time, especially if there are changes to the way personal data is processed, the tools used, third-party services, or legal regulations.
The current version is always available on this page.
Last updated: 1 May 2026
