Our chef’s cuisine, served in a relaxed fine dining style from our base kitchen and brought to you by our food truck, featuring Mediterranean and Middle Eastern flavours.
Legal documents
Effective from 16 October 2026.
Patisson Food Ltd
Registered office: 2013 Pomáz, Vróci út 8.
Tax number: 25468760-2-13 · Company registration number: 13-09-223375
Registration authority: Company Court of the Budapest Environs Regional Court
E-mail: hello@patisson.hu · Catering: catering@patisson.hu
Phone: +36 20 516 1818
This notice explains how personal data are processed in connection with the use of patisson.hu, requests for quotations, purchases from the online shop and communications. For purchases by companies, this also includes the personal data of the contact person.
We use the customer's name, email address, telephone number provided, billing and delivery addresses, company name and tax number, ordered items, notes, collection date, and payment and order identifiers to record, fulfil and coordinate the order. Legal basis: performance of a contract and steps taken prior to entering into a contract, Article 6(1)(b) GDPR. The order cannot be fulfilled without the mandatory data.
We retain contract-related data that do not constitute accounting documents until the end of the general five-year limitation period for bringing claims following performance, on the basis of our legitimate interest in resolving any claims and disputes. Notes used solely for fulfilment that are no longer necessary must be deleted earlier. In the event of a dispute, we retain the necessary data until the proceedings have concluded.
Do not include unnecessary health information or other sensitive personal data in the product notes. Please discuss any allergen-related requirements with us in advance using our catering contact details. Recording a note does not constitute a commitment that the food will be free from allergens.
We process the name and address shown on the invoice, the company name and tax number where applicable, the items, amounts and document identifiers to fulfil statutory invoicing, taxation and accounting obligations. Legal basis: Article 6(1)(c) GDPR. We retain accounting documents for at least 8 years pursuant to Section 169 of Act C of 2000 on Accounting. Data that must be retained by law cannot be deleted at the data subject's request before the mandatory retention period expires.
Our authorised staff responsible for invoicing and accounting, and our contracted accounting partner, may access the documents to the extent necessary for their duties. The accountant receives only the data necessary for accounting tasks. Up-to-date, precise information about the recipients of accounting data can be requested using our contact email address.
We process the name, email address, telephone number, event details and message provided in messages and forms to respond, prepare quotations and coordinate arrangements. The legal basis is Article 6(1)(b) GDPR for steps taken prior to entering into a contract, and our legitimate interest in providing a substantive response to other enquiries under Article 6(1)(f) GDPR. For requests for quotations that do not result in a contract, we retain correspondence for 1 year after the matter is closed; in the event of a dispute, the period for bringing claims applies to the necessary documents.
We retain the record of a consumer complaint and the substantive response for 3 years under consumer protection law; legal basis: compliance with a legal obligation. In the event of a contractual dispute, any further retention of documents necessary for enforcing claims must be assessed separately.
For electronic withdrawal and cancellation declarations, we record the name, confirmation email address, order identifier, affected items, content of the declaration and time of receipt. The purposes are to receive, acknowledge and assess the request and fulfil related legal obligations; the legal bases are performance of a contract, compliance with a legal obligation and our legitimate interest in evidencing the declaration. The declaration is retained until the end of the period for enforcing related contractual claims; accounting documents are retained for the separate retention period applicable to them.
Creating an account is voluntary. We use the account identifier, email address, saved addresses and associated orders to operate the account. Legal basis: Article 6(1)(b) GDPR. You may request account deletion using our contact email address; this does not delete invoices and records subject to mandatory retention. We process data necessary for operating the account for as long as the account exists. If closure is requested, we delete account data that have no separate legal basis; invoicing and contractual records remain subject to their applicable retention rules. Deleting your account is not a prerequisite for unsubscribing from the newsletter.
The web server and security plugins may record technical logs, IP addresses, timestamps, browser data and security events. The purposes are to protect the service and identify faults; the legal basis is our legitimate interest in secure operation. We process technical data for as long as necessary to detect, investigate and resolve an operational fault or security event, and review whether continued processing is necessary. An extract needed as evidence of an identified incident or for legal proceedings may be retained until the related proceedings have concluded and the period for enforcing claims has expired.
We request separate, voluntary consent for the newsletter; subscribing is not a condition of purchase. We use your email address and the evidence relating to your subscription to manage the subscription, on the basis of Article 6(1)(a) GDPR. You may withdraw your consent through the unsubscribe link in the email or by contacting our email address. Withdrawal does not affect the lawfulness of processing carried out previously. Newsletters are sent using the MailPoet system integrated into WordPress and the MailPoet Sending Service. The service processes subscription and delivery data for sending, list management and troubleshooting. Processing for newsletter purposes continues until consent is withdrawn; thereafter, we retain only the minimum data necessary to enforce the opt-out and demonstrate consent or unsubscription until the limitation period for any legal claims has expired.
We require the subscriber's separate consent for individual tracking of newsletter opens and link clicks. Tracking may involve the subscriber identifier, email identifier, opening and clicking events, timestamps and technical data relating to operation. Consent to tracking can be withdrawn in the newsletter consent settings; you may also request to unsubscribe from the newsletter at any time. We have disabled MailPoet's browser cookie-based tracking.
MailPoet is a service provided by Automattic. Its sending infrastructure may also process data outside the EEA, in the United States. According to the provider, it uses sending logs and infrastructure in both the EU and the USA; Automattic's notice states that it also uses the Standard Contractual Clauses (SCCs) adopted by the European Commission for transfers outside the EEA. Information about the safeguards and a copy of the agreement with the provider can be requested using our contact email address. Details: MailPoet data processing, Automattic Privacy Policy.
Cookies required for the shopping cart and login are used for functional purposes. Consent is required for non-essential analytics and marketing technologies. Details and settings: Cookie Notice, or the “Manage consent” button on the website.
Patisson staff authorised to perform the relevant duties may access the data to the extent necessary. Hosting provider: Rackhost Zrt., 6722 Szeged, Tisza Lajos körút 41., info@rackhost.hu. Its role is to host the website and store the data, and to provide technical operation.
The card payment service providers shown at checkout, PayPal and Barion receive the order and transaction data required for payment; they may also act as independent data controllers in fulfilling their own legal obligations. Their privacy notices: Stripe, Automattic / WooPayments, PayPal, Barion. The payment service provider used is indicated at checkout by the selected payment method. The provider’s own privacy notice and legal obligations also apply to the retention of transaction data and processing for fraud prevention. Patisson does not store the full card number or CVC code.
Deliveries are currently made by our own staff. They may access the customer's name, address, telephone number needed for contact, and fulfilment details. If an external courier service is used, we will publish its details and role before any data are transferred to it. Section 6 provides further information about the newsletter service, and the Cookie Notice about analytics and embedded technologies. We disclose data to authorities only where there is an appropriate legal basis and a request. Transfers to recipients outside the EEA may take place only under the conditions set out in Chapter V of the GDPR. Information about the specific applicable safeguards and copies of them can be requested at hello@patisson.hu.
You may request information and access to your data, rectification of inaccurate data and, where the applicable conditions are met, erasure, restriction of processing or data portability. You may object to processing based on legitimate interests and withdraw your consent at any time. You can send your request to hello@patisson.hu. We may ask you to verify your identity if necessary. As a rule, we respond within 1 month; we will inform you within that period of any extension permitted by law and the reasons for it.
You may lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information: 1055 Budapest, Falk Miksa utca 9–11.; postal address: 1363 Budapest, Pf. 9.; telephone: +36 1 391 1400; naih.hu. You may also seek a remedy before a court.
Key legislation: GDPR, Act CXII of 2011, Act C of 2000, Act CVIII of 2001 and Act CLV of 1997. When this notice is amended, we will publish the new version and its effective date on this page.