Privacy Policy

This is a translation for your convenience. In case of any discrepancy, the Czech version prevails.

On this page, you will find what personal data we process when you book a table with us, order a gift card or write to us, why we do so, how long we keep it and what rights you have. We comply with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and Act No. 110/2019 Coll., on Personal Data Processing.

Who processes your data

What data and why

Table reservations

When you book a table using the booking form on our website or by phone, we process your name, phone number or e-mail address, the date and time of your visit, the number of guests, the chosen area (Diner, Bar, Club) and, where applicable, the milkshake you pre-ordered and any wish you write with your booking.

• Purpose: handling and confirming your reservation, a reminder before your visit and, where applicable, arranging a change.
• Legal basis: performance of a contract and taking steps at your request prior to entering into a contract (Art. 6(1)(b) GDPR).
• Retention period: we keep the reservation itself for the time needed to handle it and no longer than 3 months after the reserved date. The name and contact from it stay in our guest records, see below.

Guest records: we also keep your name and phone number or e-mail from a reservation or a reservation request in our guest records, together with how many times you have booked with us and when you did so first and last. This helps us recognize you next time and contact you about a reservation. The legal basis is our legitimate interest. We keep these records until you ask us to erase them; simply write to info@jamesdean.cz.

Booking through an AI assistant: when you have your AI assistant (for example Claude or ChatGPT) send a reservation, it passes us the same details as the form on our website: date, time, area, number of guests, name and phone number or e-mail. We do not see or store your conversation with the assistant. To limit abuse we keep a counter of requests for about a day; it holds only a salted hash of the contact, not the contact itself. The provider of the assistant (for example Anthropic or OpenAI) processes your conversation under its own policies.

Gift card orders

When you order a gift voucher or a James Dean Driver’s License using the form on our website, we process your name, e-mail address and, where provided, your phone number and note, the content of your order and the chosen delivery method. For a Driver’s License, we also process the name of the card holder you provide to us and, if the card is sent by post, the delivery address.

• Purpose: handling your order, confirming it by e-mail, matching your payment, handing over or mailing the card and handling any complaints.
• Legal basis: performance of a contract (Art. 6(1)(b) GDPR). Where the card holder is someone other than you, we process the holder’s name on the basis of our legitimate interest in issuing the card according to your order (Art. 6(1)(f) GDPR).
• Retention period: 13 months after the order is completed or cancelled (for an order that is never completed, 13 months after it was placed). The card is valid for one year; the extra month is for handling complaints. After that, we erase the personal data and keep only the order number, the card values and the amount. We keep payment records for the period required by accounting and tax regulations.

When you write to us or call us

We process the data you provide to us yourself (name, e-mail address, phone number, content of your message).

• Purpose: answering your inquiry, gift card orders placed by phone or e-mail, handling complaints.
• Legal basis: performance of a contract or our legitimate interest in replying to you (Art. 6(1)(b) and (f) GDPR).
• Retention period: for the time needed to handle the matter and no longer than 1 year, unless the law requires a longer period.

Visiting the website

The website does not use any analytics or advertising tools and does not track you. It loads the embedded Google map only with your consent. You will find the details on the Cookies page. To protect our forms against abuse, we store only a fingerprint (hash) of your IP address for 24 hours, never the address itself.

Who we share your data with

Your data is accessible only to our employees who handle reservations, orders and inquiries. We are technically supported by the following processors, with whom we have concluded a data processing agreement:

• Cloudflare, Inc. (USA): website operation and the database of reservations and orders stored in Europe,
• BulkGate (Czech Republic): sending text messages with reservation confirmations and reminders,
• Resend (USA): sending e-mails with reservation confirmations and reminders and with gift card order confirmations.

If a card is sent by post, we pass the name and address to the postal carrier, which processes the data as an independent controller.

For processors based in the USA, transfers are governed by the standard contractual clauses approved by the European Commission or, where applicable, by the EU-US Data Privacy Framework. We do not sell your data to anyone and do not use it for advertising. The Google map is loaded only with your consent; Google Ireland Limited operates it under its own privacy policy.

Your rights

At any time, you can contact us to:

• access the data we hold about you and obtain a copy of it,
• have inaccurate data rectified,
• have your data erased if we no longer need it,
• have processing restricted,
• have your data transferred to another controller,
• object to processing based on legitimate interest,
• withdraw your consent (for example to the Google map) – this does not affect processing carried out before the withdrawal.

Simply write to info@jamesdean.cz. We will reply within one month at the latest. If you are not satisfied, you can lodge a complaint with the Office for Personal Data Protection, Pplk. Sochora 27, 170 00 Praha 7, uoou.gov.cz.