Privacy notice
This notice explains what personal data we process through our website, why, for how long, and what rights you have. In short: we ask for what we need to answer your enquiry, and we do not sell it to anyone.
In force from: 29 August 2026
1. Who processes your data
Felba Food Kft. ("we"), the operator of the Khraw Pak Thai restaurant.
- Registered seat: 1024 Budapest, Kút utca 9., Hungary
- Restaurant: 1068 Budapest, Dózsa György út 88., Hungary
- Company registration number: 01-09-412728
- VAT number: 32221349-2-41
- Email: flexnfresh2023@gmail.com
- Phone: +36 70 616 8263
We are not required to appoint a data protection officer. For any privacy question, reach us at the email address above.
2. What we process and why
Event enquiry form
If you submit the form, we process your name, email address, phone number (if given), the planned date, number of guests, type of event, and the message you write.
- Purpose: answering your enquiry, preparing a quote, and the contact needed for that.
- Legal basis: steps taken at your request prior to entering into a contract (GDPR Art. 6(1)(b)). If the enquiry does not lead to a contract, further retention rests on our legitimate interest (Art. 6(1)(f)) in keeping the correspondence traceable.
- Retention: for as long as the enquiry is open, then 12 months from the last correspondence if no contract follows. That period reflects the seasonality of events — an enquiry often returns for the same period the following year. After that we delete it. If a contract is concluded, accounting records are kept for 8 years under Hungarian law — those records only, not the rest of the correspondence.
The "Message" field is free text. We handle allergies and dietary needs by phone rather than through the form — that records them more accurately and avoids storing health data unnecessarily. If you do enter such information in the free-text field, we use it solely to run your event, restrict access to the staff involved, and delete it together with the enquiry.
Phone and email enquiries
If you call or write to us, we process your contact details and the content of the enquiry — for the same purpose, on the same legal basis, and for the same period as above.
Website statistics
We measure traffic with Simple Analytics. It uses no cookies, builds no visitor profiles, and collects nothing that could identify you personally. We only see aggregate figures: how many people visited, which pages, and roughly where they came from. The data is stored within the European Union.
3. Cookies and data stored in your browser
This site sets no marketing or tracking cookies, which is why there is no cookie banner.
- Language choice: when you switch language, we store that choice in your browser's local storage (
localStorage) so you do not have to set it again. It never leaves your device and can be removed at any time by clearing your browser data. - Map: the Google map loads only if you click "Show the map". Until you do, Google receives nothing from you. Once loaded, Google acts as its own controller, may set cookies and will see your IP address — governed by Google's privacy policy.
- Fonts: the site's fonts are served from our own server, so loading them sends no data to any third party.
4. Who we share data with
We do not sell your data or pass it on for marketing. We use the following providers, acting as processors:
- Netlify (Netlify, Inc., United States) — website hosting and form submission handling. Transfers to the US rest on the EU–US Data Privacy Framework adequacy decision, with the European Commission's Standard Contractual Clauses as the fallback mechanism.
- Google Workspace (Google Ireland Limited, Ireland) — the restaurant's email account, where form submissions arrive.
- Simple Analytics — aggregate traffic statistics, no personal data, stored in the EU.
Beyond that, we may disclose data where a legal obligation requires it.
5. Your rights
Under the GDPR you may request:
- access — to know what data of yours we hold;
- rectification — if anything is inaccurate;
- erasure — where there is no longer a purpose or legal basis;
- restriction — suspension of processing in certain cases;
- portability — the data you gave us in a machine-readable format;
- objection — against processing based on legitimate interest.
Write to flexnfresh2023@gmail.com for any of these. We reply within one month at the latest.
6. Complaints
If you believe our processing infringes your rights, please contact us first — most things can be settled in one email. You may also complain to the supervisory authority:
Hungarian National Authority for Data Protection and Freedom of Information (NAIH)
1055 Budapest, Falk Miksa utca 9-11.
naih.hu · ugyfelszolgalat@naih.hu
You may also go to court, at the tribunal for your place of residence or stay.
7. Changes
If this notice changes, we publish the new version on this page and update the date above.