We are the controller of your personal data: Restoran Beštija, Didov maslinik j.d.o.o., Masarykova 11/1, 10000 Zagreb, OIB 36876925446. This means we decide how your data is used and we are responsible for it. If you have a question about privacy, write to bestijamasarykova@gmail.com or call +385 91 922 88 61.
What happens when you visit the site?
The site runs on a server from Vultr (server hosting). When you open a page, the server records technical data: your IP address, your browser and the pages you open. We need this to show you the site and keep it safe. These logs are kept for a short time, and we do not use them to find out who you are. Legal basis: our legitimate interest (Art. 6(1)(f) GDPR).
How do online reservations work?
You book a table through DISH, a reservation service of DISH Digital Solutions GmbH. The booking form comes from DISH and opens inside our page. What you enter (name, contact details, date, time, number of guests and notes) goes to DISH and to us, so we can manage your booking. Legal basis: the booking itself (contract, Art. 6(1)(b) GDPR). DISH handles this data under its own privacy policy, at dish.co.
What happens when you buy a gift card?
You pay for a gift card by bank transfer and let us know by email. We use your name, payment details, email and, if you want the card posted, your postal address. We need them to confirm the payment, issue the invoice and send the card. Legal basis: the purchase and our legal duties (Art. 6(1)(b) and (c) GDPR). We keep invoices for as long as Croatian accounting and tax law requires.
What if you email or call us?
We use your details only to answer you. We delete them once we no longer need them, unless the law says we must keep them. Legal basis: our legitimate interest (Art. 6(1)(f) GDPR).
Is there a Google map on the site?
No. The map on the contact page is a picture made from OpenStreetMap data, and it comes from our own server. Google Maps opens only if you click the link to it. Google may then set its own cookies and see your IP address. Provider: Google Ireland Limited.
What about social media?
The site links to our Facebook, Instagram, Tripadvisor and Google pages. These are plain links: nothing loads from those networks until you follow one.
Cookie policy
What are cookies?
Cookies are small text files that a website saves in your browser. They help the site remember things, such as your cookie choice, or count how many people visit. Some are set by us, others by services we use, such as Google.
Which cookies do we use?
We sort cookies into the same three groups as our cookie banner:
Necessary cookies keep the site and the booking form working. They are always on.
Analytics cookies show us how the site is used. They are set only if you allow them.
Marketing cookies measure how our ads on Google, Facebook and Instagram perform. They are set only if you allow them.
Cookies on bistro-bestija.com
Name
Provider
Purpose
Category
Duration
cc_cookie
Bistro Beštija (this site)
Remembers your cookie choice, so the banner does not appear on every page.
Necessary
6 months
SESSION
DISH (reservation.dish.co)
Keeps the booking form working while you make a reservation.
Necessary
Until you close your browser
__Secure-better-auth.session_token
Bistro Beštija (this site)
Keeps our staff signed in to the admin area. Set only for staff, never for guests.
Necessary
Until 30 minutes without activity
_ga
Google (Google Analytics)
Tells visits apart with a random ID, so we can count visitors.
Analytics
2 years
_ga_BDXZHG4FTY
Google (Google Analytics)
Remembers your current visit, so the pages you open are counted together.
Analytics
2 years
_gcl_au
Google (Google Ads)
Measures whether a visit from one of our Google ads leads to a booking or a call.
Marketing
3 months
_fbp
Meta (Facebook Pixel)
Measures how our ads on Facebook and Instagram perform.
Marketing
3 months
Until you make a choice, Google Tag Manager is not loaded at all, so Google and Meta set no cookies through our site. We also use Google Consent Mode, which passes your choice on to Google. For example, if you allow analytics but not marketing, Google’s advertising cookies stay off. DISH may use more cookies inside its booking form, under its own privacy policy. Legal basis for analytics and marketing cookies: your consent (Art. 6(1)(a) GDPR).
What else is stored in your browser?
Our site also installs a service worker: a small script that keeps copies of pages, styles and images in your browser’s Cache Storage. This makes the site open faster and lets it work on a weak connection. It is not a cookie, it holds no personal data and it is not used to track you. You can remove it by clearing this site’s data in your browser settings.
How can you change your choice?
You can change or withdraw your choice at any time. Click Cookie settings at the bottom of any page, or use the button below. Switch the groups on or off, then save. If you withdraw consent, we stop setting those cookies from then on. Cookies already saved stay in your browser until they expire, or until you delete them in your browser settings.
What are your rights?
You can ask us to show you the data we hold about you, to correct it or to delete it. You can also ask us to limit how we use it, object to its use, or give it to you in a format you can take elsewhere. If you gave consent, you can withdraw it at any time. Write to bestijamasarykova@gmail.com. If you think we handle your data wrongly, you can complain to the Croatian Personal Data Protection Agency (AZOP), Selska cesta 136, 10000 Zagreb, azop.hr (opens in a new tab).