Privacy policy

Who is responsible

HAI OU društvo s ograničenom odgovornošću za trgovinu i ugostiteljstvo, Titov trg 6, 51000 Rijeka. Email: [email protected], phone 051 631 048.

Visiting this website

The site is served by Cloudflare, Inc., which briefly processes technical access data on every visit (IP address, browser type, time) to deliver and protect the site. The legal basis is our legitimate interest in running the site securely (Art. 6(1)(f) GDPR). We keep no visitor logs ourselves.

Cookies

This site sets no cookies and uses no analytics or advertising tools. We don't track you across pages or visits. Your browser only remembers whether the intro animation has already played, so it doesn't repeat on every page (sessionStorage, cleared when you close the tab, never sent anywhere).

The map

The Google map does not load by itself. Only when you click "Show map" does your browser connect to Google, which may then process your IP address and set cookies under its own privacy policy.

The same applies to the 360° view (Google Street View) on the About and home pages: it loads only when you click "Walk through the restaurant".

Table booking and delivery

The "Book a table" button calls our mobile number, and "Order delivery" offers delivery from the restaurant (a call to our number) and Wolt, Glovo and Dobar tek. The delivery systems are run by their providers under their own privacy policies; the details you enter there (name, phone, time, delivery address) are used only for your booking or order.

Calls, email and messages

If you call us, email us or message us on Instagram or Facebook, we use your details only to reply (Art. 6(1)(b) and (f) GDPR). We keep messages while we are in contact and for at most 12 months after the last contact, unless the law requires longer (e.g. a written complaint: one year). Instagram and Facebook are Meta services under Meta's privacy policy.

Photos

If you recognise yourself in a photo or video on this site and want it removed, tell us and we will remove it.

Who else processes data

Cloudflare, Inc. (hosting), our email provider and the person who maintains the site, all as processors acting on our instructions. Cloudflare is based in the USA; transfers rely on the EU-US Data Privacy Framework and standard contractual clauses.

Your rights

You may ask to access, correct or delete your data, restrict its processing or take it with you, and you may object to its processing. Contact us at [email protected]. You can also complain to the Croatian Personal Data Protection Agency (azop.hr).

We make no automated decisions and build no profiles. Last updated: 23 Oct 2026