Privacy policy

China Palace Restaurant AS is the data controller for the personal data processed in connection with this website and our restaurant operations.

• Company: China Palace Restaurant AS
• Organisation number: 953 172 178
• Address: Torgallmenningen 3A, 2nd floor, 5014 Bergen, Norway
• Email: post@cpbergen.no
• Phone: (+47) 97 88 88 88

We only collect the data we need to give you a good experience and deliver our services:

• Table reservations: name, phone number, email, number of guests, date and time, and any notes you provide. Reservations are handled through our booking providers.
• Private and group dining: name, email, phone, preferred date, number of guests, occasion and the message you send via the form.
• Takeaway and gift cards: order and payment details processed by our external providers (see section 5).
• Enquiries: the information you provide when you contact us by email or phone.
• Use of the website: anonymous, aggregated visitor statistics and information from cookies you have consented to (see the cookie policy).
• Technical data: IP address, browser type and device are processed briefly for security, operations and anonymous statistics.

We process personal data for the following purposes, on the following legal grounds:

Where we rely on consent, you can withdraw it at any time without affecting the lawfulness of processing before withdrawal.

The website uses cookies and similar technologies. Necessary cookies are set without consent, while analytics cookies are only set when you consent. You can change your choices at any time. See our cookie policy for a full overview.

We share personal data with providers who process it on our behalf under data processing agreements. We never sell your personal data.

• Vercel Inc. – website operations and hosting.
• Google Ireland Ltd. / Google LLC – Google Analytics (only with consent), Google Maps and fonts.
• Firebase / Google Cloud – storage of anonymous visitor statistics.
• Mux Inc. – video streaming shown as part of the site's presentation.
• easyTable / Gastroplanner – table reservations.
• Baemingo – takeaway ordering.
• Givn – gift card sales.
• Resend Inc. – sending emails (confirmations and requests).

When you use external ordering or payment services, their own privacy policies also apply.

Some of our providers are established outside the EU/EEA, including in the USA. When personal data is transferred there, we ensure a lawful basis — normally the European Commission's Standard Contractual Clauses and any supplementary measures — so that your data is protected at a level equivalent to that within the EU/EEA.

We keep personal data only for as long as necessary for the purpose it was collected for:

• Reservations and requests are normally deleted within 12 months of the visit, unless otherwise required by contract or law.
• Accounting records are kept in accordance with the Norwegian Bookkeeping Act (as a rule five years).
• Email correspondence is deleted when no longer needed.
• Anonymous visitor statistics may be kept indefinitely because they do not identify you.

Under data protection law you have, among others, the right to:

• request access to the data we hold about you,
• request rectification of inaccurate data,
• request erasure of data (the 'right to be forgotten'),
• request restriction of processing,
• object to processing based on legitimate interest,
• request data portability (a machine-readable copy),
• withdraw consent you have given.

To exercise your rights, contact us at post@cpbergen.no. We respond as quickly as possible and within one month at the latest.

If you believe we process your personal data in breach of the rules, you may lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet). We would, however, appreciate you contacting us first so we can put things right.

• Datatilsynet, Postboks 458 Sentrum, 0105 Oslo, Norway
• Email: postkasse@datatilsynet.no
• Website: www.datatilsynet.no

We do not use automated decision-making or profiling with legal effect for you. We have technical and organisational measures that protect personal data against unauthorised access, alteration and deletion.

We may update this privacy policy as needed. The current version is always available here, with the updated date at the top.