Privacy & cookies

The controller is the company that operates Indian Jewel:

We collect only what each purpose needs. Nothing here is sold or used for profiling.

Table reservations (dish.co widget)

The booking form on our Contact page is provided by dish.co (Hospitality Digital GmbH). It collects your name, phone number, e-mail, party size, date and time and any note you add, so that we can hold and confirm your table. dish.co processes this on our behalf and stores it in its own system.

Legal basis: performance of a contract / steps before it (Art. 6(1)(b) GDPR)

Contact form

When you send us a message we store your name, e-mail, phone number (if given), subject and message so that we can reply. Submissions are rate-limited per IP address to block spam; the IP address is kept only in a short-lived request log for that purpose.

Legal basis: performance of a contract / steps before it (Art. 6(1)(b) GDPR)

Analytics (Google Analytics 4)

Only after you choose "Accept all", Google Analytics sets cookies to tell us which pages are visited, from which country and device, and whether the site works. The data is pseudonymous; IP addresses are not stored by GA4.

Legal basis: your consent (Art. 6(1)(a) GDPR) — you can withdraw it at any time

Advertising measurement (Google Ads)

Only after you choose "Accept all", Google Ads cookies let us see whether a visit from one of our adverts led to a call or a reservation. We do not build advertising profiles or share your details with advertisers.

Legal basis: your consent (Art. 6(1)(a) GDPR) — you can withdraw it at any time

Embedded map (Google Maps)

The Contact page embeds a Google map so you can find us. Loading it sends your IP address to Google, which may set its own cookies; Google's privacy policy applies.

Legal basis: our legitimate interest (Art. 6(1)(f) GDPR) in running and securing the website

Embedded video (YouTube)

Videos on the About page are shown as a still image and nothing is loaded from YouTube until you press play. Playback uses the youtube-nocookie.com player; from that moment Google's privacy policy applies.

Legal basis: your consent (Art. 6(1)(a) GDPR) — you can withdraw it at any time

• Contact-form messages: 12 months from receipt, then deleted.
• Reservations: kept by dish.co under its own retention rules; we do not keep a separate copy beyond the booking itself.
• Your cookie choice: stored in your browser until you clear it or change it with "Cookie settings".
• Analytics and advertising data: 14 months in Google Analytics (event data); Google Ads conversion data per Google's retention settings.

We use the following service providers (processors). Each is bound by a data-processing agreement and acts only on our instructions:

• Supabase, Inc. — database and edge functions that store contact-form messages (EU region).
• dish.co (Hospitality Digital GmbH, Germany) — table-reservation widget and booking records.
• Google Ireland Ltd. — Google Analytics 4, Google Ads, Google Maps and YouTube (only to the extent described above).
• Our web-hosting provider — serves the website and keeps standard server access logs for security.

Where a provider processes data outside the European Economic Area (e.g. Google LLC in the USA), the transfer relies on the EU–US Data Privacy Framework or the EU Standard Contractual Clauses.

Under the GDPR you have the right to:

• access the personal data we hold about you and receive a copy;
• have inaccurate data corrected;
• have your data erased ("right to be forgotten");
• restrict how we process it;
• object to processing based on our legitimate interest;
• receive the data you gave us in a portable format;
• withdraw consent at any time — this does not affect processing before the withdrawal;
• lodge a complaint with a supervisory authority.

To exercise any of these rights, e-mail info@indianjewel.cz. We will reply within one month.

The Czech supervisory authority is the Office for Personal Data Protection (Úřad pro ochranu osobních údajů, Pplk. Sochora 27, 170 00 Praha 7), uoou.gov.cz.

A cookie is a small file your browser stores for a website. We also use browser local storage for two settings. Below is everything this site can set, by category.

Analytics and marketing cookies are set only after you choose "Accept all". Until then Google's tags run in Consent Mode with storage denied: no cookies are written and only anonymous, cookieless pings are sent.

• Necessary — needed for the site to work (your consent choice, language, the reservation form). Cannot be switched off.
• Analytics — help us understand how the site is used. Set only with your consent.
• Marketing — measure whether our Google adverts lead to calls or bookings. Set only with your consent.

We will update this page when our processing or providers change and show the date of the latest version at the top.