Privacy policy

Noba Seaside AB, org. no. 559517-5497, is the data controller for personal data processed through this website, our table reservation system, contact forms and related restaurant services.

Address: Theres Svenssons gata 15, 417 55 Göteborg, Sweden. Email: info@restaurangophelia.se

For table reservations, we may collect your name, email address, phone number if provided, reservation date and time, number of guests, and any message or special request you choose to provide.

When you contact us through our contact form, we may collect your name, email address, phone number if provided, and the content of your message. Please do not include sensitive personal information or information that is not necessary to handle your reservation or inquiry.

We use personal data to manage table reservations, respond to contact messages and booking inquiries, send reservation confirmations and other necessary service-related communications, manage changes and cancellations, maintain and secure our website and booking system, comply with legal obligations, and improve our website and guest experience where permitted.

We do not use your personal data for unrelated marketing purposes unless we have an appropriate legal basis to do so.

For reservations, we process the information necessary to take steps at your request and to administer the reservation. The legal basis is generally GDPR Article 6(1)(b), where processing is necessary to take steps at your request before entering into a contract or to perform the reservation-related agreement.

For contact inquiries, the legal basis may be GDPR Article 6(1)(b) where processing is necessary to take steps at your request, or Article 6(1)(f) where processing is necessary for our legitimate interests in handling and responding to customer inquiries. Website analytics and non-essential cookies, including Google Analytics, are used only where the required consent has been obtained, based on GDPR Article 6(1)(a).

We keep personal data only for as long as necessary for the purposes for which it was collected, unless a longer retention period is required or permitted by law. Reservation information is retained for as long as reasonably necessary to administer reservations, handle related customer-service matters, establish or defend legal claims, and comply with applicable legal obligations.

Contact-form messages are retained for as long as necessary to handle and follow up on the inquiry and for a reasonable period thereafter where necessary for customer-service, legal or administrative purposes. Information subject to statutory retention requirements is retained for the period required by applicable Swedish law. Consent records may be retained for as long as necessary to demonstrate valid consent.

We use service providers to operate our website, reservation system and communications. These include Supabase (database and backend services), Vercel (website hosting and deployment), Resend (reservation and customer-service email delivery), Google Analytics (website analytics where consent has been provided), and Loopia (domain and related domain services). These providers may process personal data on our behalf under appropriate agreements where applicable.

Some of our service providers or their subprocessors may process personal data outside the European Economic Area (EEA). Where required by the GDPR, we use appropriate safeguards for international transfers, such as an adequacy decision or Standard Contractual Clauses. We do not sell personal data. Data may be disclosed where required by law or where necessary to establish, exercise or defend legal claims.

Subject to the conditions and limitations set out in the GDPR, you may have the right to access, rectify, erase, restrict, or object to processing of your personal data, and to data portability where applicable.

You may withdraw consent at any time where processing is based on consent. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal. You also have the right to lodge a complaint with Integritetsskyddsmyndigheten (IMY), the Swedish Authority for Privacy Protection.

For privacy questions or to exercise your rights, contact us at info@restaurangophelia.se or write to: Noba Seaside AB, Theres Svenssons gata 15, 417 55 Göteborg, Sweden.

Please include enough information for us to identify your booking or inquiry. We may need to verify your identity before providing personal data or carrying out certain requests.