This website is operated by Joto’s B.V., a company registered in the Netherlands.

Torenallee 22-02, 5617 BD Eindhoven, The Netherlands

Email: reservations@jotosboardgamecafe.com

When you make a reservation through our website, we may collect the following personal data:

• Your name (required)
• Your email address (optional — only if you’d like a confirmation email)
• Reservation details: date, time, number of guests, selected games, and any additional notes you provide

We use Google Analytics (Google LLC) to understand how visitors use our website. Google Analytics uses cookies to collect anonymized usage data. For more information, see Google’s Privacy Policy.

The legal basis for this processing is our legitimate interest in improving our website (Article 6(1)(f) GDPR).

We collect your personal data solely to process and manage your table reservation. Specifically:

• Confirm and manage your reservation
• Send you a confirmation email (if you provided your email address)
• Notify our team of the incoming reservation

The legal basis for processing your data is the performance of a contract (Article 6(1)(b) GDPR) — your reservation is an agreement between you and us.

We retain reservation data for up to 1 year after your visit. After this period, your personal data is deleted. You may also request deletion at any time (see Your Rights below).

We do not sell, rent, or share your personal data with third parties for marketing purposes. However, the following service providers may process your data on our behalf:

• Sanity AS (Norway) — content management and data storage. Your data is stored within the European Economic Area (EU region). See sanity.io/legal/privacy.
• Vercel Inc. (United States) — website hosting and delivery. Vercel processes requests through its global edge network, including infrastructure within the EU. Data transfers outside the EEA are covered by Standard Contractual Clauses. See vercel.com/legal/privacy-policy.
• Google LLC (United States) — website analytics via Google Analytics. Data transfers are covered by Standard Contractual Clauses. See policies.google.com/privacy.

Confirmation and notification emails are sent using our own SMTP server hosted by mijndomein.nl (Netherlands).

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, or misuse, in accordance with Article 32 of the GDPR.

Some of our service providers (Vercel, Google) are based in the United States. Where personal data is transferred outside the European Economic Area, we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission.

As a resident of the European Union, you have the following rights regarding your personal data:

• Right of access — You may request a copy of the personal data we hold about you.
• Right to rectification — You may ask us to correct inaccurate data.
• Right to erasure — You may request deletion of your personal data.
• Right to object — You may object to the processing of your data.
• Right to restriction of processing — You may request that we limit the processing of your data.
• Right to data portability — You may request a copy of your data in a structured, commonly used, machine-readable format.

To exercise any of these rights, please contact us at reservations@jotosboardgamecafe.com. We will respond within 30 days.

You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.

Our services are not specifically directed at children under 16. If you believe we have inadvertently collected personal data from a child, please contact us and we will promptly delete it.

If you have any questions about this privacy policy or how we handle your data, please reach out:

Joto's B.V.

Torenallee 22-02, 5617 BD Eindhoven, The Netherlands

reservations@jotosboardgamecafe.com