1. Who is the data controller?
Café Lisboa is the data controller for the processing described in this Policy.
2. What information Café Lisboa collects
Café Lisboa does not collect personal information directly from you via forms, logins, or registrations. The Site is informational only. The limited data involved is:
- Analytics data via Google Analytics (see Section 4).
- Public Google Reviews shown on the homepage (see Section 5).
- Technical logs necessary for the secure operation of the Site (e.g., IP address and user-agent in server logs).
Café Lisboa does not create user accounts, and the company does not store any contact details on its own systems through this Site.
3. Legal bases for processing
- Consent for analytics cookies and related processing (you can accept or reject).
- Legitimate interests for displaying publicly available Google Reviews to showcase customer feedback about our business.
- Legitimate interests in ensuring the security and integrity of the Site (basic server logs).
4. Google Analytics
Café Lisboa uses Google Analytics to understand how visitors use the Site so we can improve it. Google Analytics may process:
- Pages visited, clicks, and time on page;
- Referring site/UTM parameters;
- Browser, device and general location derived from IP;
- IP address (with IP anonymisation enabled before storage).
Analytics cookies load only if you consent via our cookie banner. You can change or withdraw consent at any time.
Provider: Google Ireland Limited. For details, see Google Privacy Policy and Google Analytics Opt-out.
Note: Google may process data on servers outside the EEA. Please review Google’s documentation for information on safeguards and data transfers.
Configuration: Café Lisboa uses IP anonymisation and does not use Google Analytics to identify individual visitors or to combine analytics with other data to profile you.
5. Google Reviews on our homepage
Café Lisboa displays customer reviews sourced from Google (e.g., reviewer name, star rating, review text). These reviews are provided by Google’s widget/API and are subject to Google’s Terms of Service.
Café Lisboa does not store or edit these reviews on its own servers; they are fetched and displayed from Google. If you wish to change or remove a review, please do so through your Google account.
6. Cookies
Cookies are small text files placed on your device. Café Lisboa uses:
- Essential cookies – required for the Site to function (cannot be disabled).
- Analytics cookies – Google Analytics cookies that help us measure usage (load only with your consent).
You can manage consent via our cookie banner at any time. For general information about cookies and how to control them, visit allaboutcookies.org.
7. Third-party resources (e.g., CSS)
Café Lisboa loads some resources from third-party servers to render the Site correctly. For example, an external CSS stylesheet from: lunevedy.com/assets/2.0/css/lunevedy.min.css.
Requests to third-party servers reveal your IP address and user-agent to those providers. Café Lisboa does not control third-party content or their processing. Please consult the relevant provider’s terms and privacy notices.
8. Data retention
- Google Analytics: data retention set to 14 months.
- Server logs: retained only as necessary for security and troubleshooting, then deleted.
- Café Lisboa does not retain other personal data from Site visitors.
9. Sharing of data
Café Lisboa does not sell or trade personal data. Limited sharing occurs with:
- Google Ireland Limited (analytics provider, if you consent).
- Our hosting provider (for secure operation of the Site).
10. Your GDPR rights
Under GDPR you can:
- Request access to your personal data;
- Request correction or deletion;
- Restrict or object to processing;
- Withdraw consent at any time (for analytics);
- Lodge a complaint with the Data Protection Commission (DPC).
11. Security
Café Lisboa takes appropriate technical and organisational measures to protect the Site and the limited personal data processed (e.g., HTTPS, access controls). However, no internet transmission is completely secure.
12. Jurisdiction
This Policy and any related dispute are governed by the laws of Ireland. You may also have mandatory rights under EU/EEA consumer and data protection laws.
13. Changes to this Policy
Café Lisboa may update this Policy from time to time. Any changes will be posted on this page with an updated “Last updated” date. Please review it periodically.