Afghan Lemar

Privacy and legal notice

What Afghan Lemar does with your details when you use this website.

Who is responsible

  • NASK BV (Afghan Lemar) decides what happens to your data and is responsible for it (the data controller).
  • IWINS (enterprise number BE 1040.644.308, Sint-Andries, Bruges) builds and runs this website and the system behind it. IWINS only processes your reservations and details on Afghan Lemar's instructions. IWINS itself is responsible for sign-in, security and technical logs.
  • Questions about your data: +32 50 32 07 45 or hello@iwins.app.

What we use your data for, and why

  • Your reservation: your name, phone number, email address, notes, date, time, number of guests and table. Needed to carry out your reservation (contract).
  • Messages about your reservation: confirmations, reminders and changes by email. Needed to carry out your reservation (contract).
  • Allergies and diets: a note can contain health information. We only use it to prepare your food safely, and only because you choose to give it (your explicit consent).
  • Signing in with Google: if you choose to, we receive your name, email address and Google ID, so you can see your reservations and reuse your details (contract).
  • Your feedback: on our feedback page you give a score and, if you like, a comment. If you want us to contact you, you also give your email address and, if you like, your name. We only use this to improve our service and to answer you. Our legitimate interest in improving our service, and your consent for the contact.
  • Security: your IP address, browser and the time of each request, to keep the website working and prevent abuse. Our legitimate interest in a secure service.

Do you have to give your data?

  • The required fields in the form are needed for your reservation: without them we can't take your reservation. Everything else is optional.

Who receives your data

  • IWINS and the companies it uses to run this website:
  • Supabase: database, sign-in, on servers in the EU (Paris).
  • Railway: server and technical logs, on servers in the EU (Netherlands).
  • Netlify: hosting of this website.
  • Resend: emails.
  • Google: signing in, if you choose to.
  • Google Maps: the map on this website, which means Google can see your IP address.
  • n8n and Telegram: outage alerts (technical error reports, with email addresses, phone numbers and user IDs made unrecognisable).
  • Authorities: only when the law requires it.
  • We do not sell your data.

Transfers outside the EU

  • Some of these companies are based outside the EU or can reach data from there, for example in the USA or Singapore.
  • We then use the EU-U.S. Data Privacy Framework when the company is certified under it, and otherwise the European Commission's Standard Contractual Clauses (Decision (EU) 2021/914).
  • You can ask for a copy through +32 50 32 07 45 or hello@iwins.app.

How long we keep your data

  • Your reservations and details: we do not delete them automatically. We keep them as long as Afghan Lemar uses this system, unless you ask us to delete them sooner and the law does not require us to keep them. If Afghan Lemar stops using it, they are deleted within 120 days, except while an investigation or dispute is ongoing.
  • Your account: until you ask us to delete it.
  • Technical logs: at most 30 days.

Your rights

  • You can ask to see, correct, delete or take your data with you, ask us to limit its use, and object to its use. If we use something because you agreed, you can withdraw that at any time.
  • Contact +32 50 32 07 45 or hello@iwins.app. It is free and you get an answer within one month.

Complaints

  • You can lodge a complaint with the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit), Drukpersstraat 35, 1000 Brussels, +32 2 274 48 00, contact@apd-gba.be, https://www.gegevensbeschermingsautoriteit.be/burger/acties/klacht-indienen.