1. Who we are
Solvarissabistro Limited (“Solvarissabistro”, “we”, “us” or “our”) is responsible for the personal information described in this policy. Our contact address is 85 Victoria Street West, Auckland 1010, New Zealand. You can contact us at info@solvarissabistro.com or +64 9 889 2746.
For New Zealand privacy matters, we aim to handle personal information consistently with the Privacy Act 2020 and the information privacy principles. Where the European Union General Data Protection Regulation (“GDPR”) applies to a particular individual or processing activity, we also apply the relevant GDPR requirements described below.
2. Scope of this policy
This policy applies to personal information collected through the Solvarissabistro website, reservation and enquiry forms, direct communications, guest-service interactions and related administrative processes. It does not govern independent services operated by third parties that you choose to use outside our website.
Our website is intended to provide information about the venue, restaurant, casino experience and ways to contact us. It is not a remote gambling service and does not process online wagers or casino account balances.
3. Information we may collect
Depending on how you interact with us, we may collect your name, email address, telephone number, reservation date and time, party size, messages you send, dietary or accessibility information you choose to provide, correspondence history, and basic technical information needed to operate and secure the website.
Please only provide information that is relevant to your request. If your message contains information about another person, you should have a lawful basis or their permission to share it with us where required.
4. Why we collect and use personal information
We use personal information to receive and manage reservation enquiries; answer questions; coordinate group visits; respond to accessibility or dietary requests; administer our relationship with guests; maintain website security; investigate misuse; comply with legal obligations; establish, exercise or defend legal claims; and improve the clarity and reliability of our guest communications.
We do not use information submitted through a reservation enquiry to create an online gambling profile or to make automated decisions about an individual’s access to casino gaming.
5. Legal bases where GDPR applies
Where GDPR applies, our processing may rely on one or more of the following bases: taking steps at your request before entering into a contract or performing a contract; compliance with a legal obligation; our legitimate interests in operating a hospitality venue, responding to enquiries, securing our website and maintaining accurate business records; and consent where consent is specifically requested and is the appropriate basis.
When we rely on legitimate interests, we consider the purpose, necessity and possible effect on the individual. Where consent is the basis, you may withdraw consent for future processing without affecting processing that was lawful before withdrawal.
6. Sensitive information and special-category data
You may choose to tell us about dietary or accessibility needs when arranging a visit. Some information of this kind may reveal health-related details. We ask that you provide only what is reasonably necessary for us to accommodate the request. Where GDPR treats information as special-category data, we process it only where an appropriate Article 9 condition applies, including explicit consent where required.
7. Information about casino access
New Zealand casino gaming areas are restricted to people aged 20 or older. Venue staff may ask to inspect acceptable identification for age or access-control purposes. This website does not ask you to upload identification. If identity or age information is handled in person at the venue, it is managed under applicable law and operational procedures.
8. How we collect information
We generally collect information directly from you when you complete a form, contact us, make or discuss a reservation, or communicate with our staff. We may also receive information from a member of your group who is coordinating a booking, where that person is reasonably expected to provide the information for the stated purpose.
Under New Zealand privacy requirements, collection should be lawful, connected with a legitimate function or activity, and no broader than reasonably necessary. We apply that principle when designing our forms and internal processes.
9. Cookies, local storage and technical data
Our current website is designed to operate without third-party advertising or analytics services. It may use limited browser storage for essential interface preferences or consent choices. Further details are provided in our Cookie Policy.
Standard web hosting infrastructure may automatically record limited request information such as date and time, requested page, browser type, IP address, response status and security events. These records may be used for reliability, diagnostics, security and abuse prevention.
10. Sharing personal information
We do not sell personal information. We may disclose information to service providers that support hosting, information technology, communications, reservation administration or professional advice, but only to the extent reasonably necessary for the relevant service and subject to appropriate contractual or confidentiality controls.
We may also disclose information where required or authorised by law, to protect rights or safety, to respond to lawful requests, or in connection with a genuine corporate reorganisation where appropriate safeguards apply.
11. International disclosures
Where personal information is disclosed outside New Zealand, we consider the cross-border disclosure requirements of the Privacy Act 2020. Where GDPR applies to a transfer outside the European Economic Area, we use an appropriate transfer mechanism where required, such as an adequacy decision, standard contractual clauses or another lawful safeguard.
12. Retention
We keep personal information only for as long as reasonably necessary for the purposes for which it was collected, including handling the enquiry or reservation, maintaining appropriate business and accounting records, resolving disputes, and meeting legal obligations. Retention periods can vary according to the type of record and the reason it is held.
When information is no longer required, we take reasonable steps to delete it, anonymise it or otherwise place it beyond use, subject to lawful retention requirements and routine backup cycles.
13. Security
We use reasonable administrative, technical and organisational measures intended to protect personal information against loss, unauthorised access, alteration, misuse or disclosure. No method of transmission or storage can guarantee absolute security, so we also maintain processes for investigating suspected incidents and reducing foreseeable risk.
14. Privacy breaches
If a privacy breach occurs, we assess its nature, the information affected, likely consequences and available mitigation. Where New Zealand law requires notification of a notifiable privacy breach, we notify the Office of the Privacy Commissioner and affected individuals as required. Where GDPR applies, we follow applicable supervisory-authority and data-subject notification requirements.
15. Your New Zealand privacy rights
Subject to applicable exceptions, you may request access to personal information we hold about you and ask for correction where you believe it is inaccurate, incomplete or misleading. We may need enough information to verify your identity and locate the relevant records before responding.
If we do not make a requested correction, New Zealand law may allow you to request that a statement of correction be attached to the information. You may also raise a privacy concern directly with us or contact the New Zealand Office of the Privacy Commissioner.
16. Additional GDPR rights
Where GDPR applies, you may have rights to access, rectification, erasure, restriction, data portability and objection, as well as the right to withdraw consent where processing is based on consent. These rights are not absolute and may be limited by lawful exceptions.
You also have the right to lodge a complaint with an appropriate data protection supervisory authority where GDPR applies. We encourage you to contact us first if you believe we can resolve the issue directly.
17. Automated decision-making
We do not use the website reservation or contact process to make solely automated decisions that produce legal or similarly significant effects on individuals.
18. Children and young people
The restaurant and general website information may be relevant to family or group planning, but casino gaming areas are subject to New Zealand age restrictions. We do not knowingly use this website to solicit personal information from children for casino participation.
19. Accuracy and your responsibilities
Please provide accurate contact and reservation details and let us know if important information changes. Accurate information helps us avoid failed communications and prepare appropriately for your visit.
20. Changes to this policy
We may update this policy when our practices, technology or legal obligations change. The revised version will be posted on this page with an updated date. Material changes may also be highlighted through an appropriate notice on the website.
21. Contact us
Privacy questions, access requests and correction requests can be directed to Solvarissabistro Limited, 85 Victoria Street West, Auckland 1010, New Zealand, by email at info@solvarissabistro.com or by phone at +64 9 889 2746.