Privacy policy.
Last updated: 19 May 2026. This policy describes how GALLO RESTAURANT d.o.o. collects, processes and stores personal data for the purpose of reservations, events and guest communication.
Data controller
GALLO RESTAURANT d.o.o., Hebrangova 34, 10000 Zagreb, Croatia. VAT (OIB): 81412172571. Contact: info@gallorestaurant.hr.
What we collect
Only the data we need to serve you — name, email, phone number, reservation date and time, party size, optional notes about allergies or occasion. For the newsletter, only your email.
Legal basis
Processing relies on Article 6(1) GDPR — contract performance (reservations) and consent (newsletter). For private events and business lunches we additionally rely on legitimate interest.
Retention
Reservation data is kept for 12 months from the booking date. The newsletter subscription is kept until you unsubscribe (one click in every message). Accounting data is retained for 11 years as required by Croatian tax law.
Who we share with
No one for marketing. Technical processing (hosting, email, reservation platform) runs through processors bound by GDPR-compliant data processing agreements. No transfer outside the EU without adequate safeguards.
Your rights
You have the right to access, rectification, erasure, restriction, portability and objection. All requests go to info@gallorestaurant.hr. We respond within 30 days. You may also lodge a complaint with the Croatian Personal Data Protection Agency (AZOP).
Cookies and analytics
The site uses essential technical cookies (session, language, navigation) required for it to function. Alongside these, we use Google Analytics 4 to understand traffic volume and source.
Google Analytics is activated only after your explicit consent via the cookie banner. Without consent, gtag.js is loaded in Google Consent Mode v2 with a default state of "denied" — no data is sent to Google. You can change your choice at any time via the "Cookie settings" link in the site footer.
The data controller for GA data is Google Ireland Limited. Data may be transferred outside the EU. For more information see policies.google.com/privacy.
Changes
Material changes are announced on this page. Newsletter subscribers receive a short notice in the next regular issue.