Effective date: 5 April 2026
1. Introduction
Welcome to ONA. We respect your privacy and are committed to protecting your personal data in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR).
This Privacy Policy explains how we collect, use, and protect your information when you visit our website or make a reservation.
2. Data Controller
The data controller responsible for your personal data is:
ONA
Email: info@ona.rest
3. Information We Collect
We may collect and process the following data:
- Personal Information: Name, email address, phone number (e.g., when making a reservation or contacting us)
- Usage Data: IP address, browser type, pages visited, and time spent on the website
- Cookies and Tracking Data: Collected through cookies and similar technologies
- Analytics Data: Collected via Google Analytics to understand website usage
4. Legal Basis for Processing
We process your personal data based on:
- Contractual necessity (e.g., to manage reservations)
- Legitimate interests (e.g., improving our services and website)
- Consent (e.g., for cookies and analytics where required)
5. How We Use Your Information
We use your data to:
- Manage and confirm reservations
- Communicate with you regarding your booking
- Improve our website and services
- Ensure website security and performance
6. Sharing Your Information
We do not sell your personal data. We may share your data with:
- Service providers, such as Google Analytics
- Legal authorities, when required by law
Google Analytics may process your data outside the EU. We ensure appropriate safeguards are in place.
7. Cookies
We use cookies to improve your browsing experience and analyze website traffic.
You can manage or disable cookies through your browser settings. Where required, we will request your consent before placing non-essential cookies.
8. Data Retention
We retain personal data only as long as necessary:
- Reservation data: retained for operational and legal purposes
- Analytics data: retained according to Google Analytics settings
9. Your Rights (GDPR)
If you are located in the EU, you have the right to:
- Access your personal data
- Request correction or deletion
- Restrict or object to processing
- Withdraw consent at any time
- Lodge a complaint with a data protection authority
10. Data Security
We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, loss, or misuse.
11. Third-Party Links
Our website may contain links to external websites. We are not responsible for their privacy practices.
12. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page.
13. Contact Us
If you have any questions about this Privacy Policy or your data, please contact us:
Email: booking@ona.rest
