Privacy
Privacy policy
Restaurant Herat respects your privacy. This policy describes what data we collect, why, and what your rights are — in accordance with the new Swiss Federal Act on Data Protection (FADP) and the General Data Protection Regulation (GDPR).
Data controller
Restaurant Herat — Haidary, Route du Châtelard 56, 1018 Lausanne — contact@reservationsherat.online
Data collected
When you make an online reservation or contact us, we collect: your name, email address, phone number, the date, time, number of guests and any remarks (allergies, special occasion).
Purposes
Your data is used exclusively to process your reservation, send you an email confirmation, contact you in case of changes, and manage our dining-room service.
Legal basis
Processing is based on the performance of pre-contractual measures at your request (Art. 6.1.b GDPR) and on our legitimate interest in operating our restaurant business.
Recipients
Your data is accessible only to the Herat team. It is stored at Supabase (Lovable Cloud, European hosting).
Retention period
Reservation data is kept for 24 months for management and internal statistics.
Your rights
Under the FADP and GDPR, you have the right to access, rectify, erase, restrict and port your data. To exercise these rights, write to us at contact@reservationsherat.online.
Security
We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss or alteration (encrypted communications, restricted access, backups).