Privacy notice
Short and without the legal fog: what this website stores about you, what it is for and how long it stays there.
Who runs it
Galimar s. r. o.
Štúrova 1, 040 01 Košice
Company ID: 56096470 · Tax ID: 2122204865 · VAT ID: SK2122204865
Company registration (Slovak Commercial Register):
Registered in the Commercial Register of the Košice City Court, section Sro, entry no. 59023/V
Phone: 0944 423 033 · E-mail: galimar@galimar.sk
The registered office and the premises are at the same address — OD Dargov stands on Štúrova 1.
IP addresses and protection against misuse
The application does not store the original IP address in its visit and form records. To limit submissions and failed logins, it uses a fingerprint created by hashing the address with a secret random value held in the server configuration. Hashing alone does not guarantee that the data is anonymous.
Optional visitor analytics
Our visitor analytics starts only after you accept analytics cookies. Without consent, we do not store an analytics identifier or events for page views and order buttons. The basket, search and ordering work if you reject analytics.
With consent, we record the time, page address without query parameters, referral source and campaign label, food viewed, event type, browser information and a random identifier. These are pseudonymous data, not guaranteed anonymous data. This analytics does not store your raw IP address, name or order contents. We retain these records for up to 14 months.
You can withdraw consent at any time through Cookies in the footer. Further tracking will stop. Withdrawal does not affect the lawfulness of earlier processing.
Cookies and browser storage
galimar_sk_cookie_consent— an essential cookie storing your decision, policy version and decision time; 180 days. It is set only after you make a choice.galimar_sk_sid— an optional random visitor identifier; 30 days, only with consent.galimar_sk_vid— a technical identifier used to protect forms against excessive submissions; 1 year. It is used for the relevant function, not to track visits without consent.galimar_sk_admin— a technical session for forms and administration, normally until the browser closes. Having this cookie does not mean you are logged in.
Cookies use HttpOnly, SameSite=Lax and Secure over HTTPS. Rejecting analytics is as easy as accepting it. Change your choice in Cookies; we ask again after 180 days or a policy version change.
localStorage under galimar_objednavka_v1 holds your unfinished basket. galimar_priamo_v1 holds information needed to display the status of a direct order. This storage is not sent automatically on every visit, but submitting a direct order sends the required information to our server. SMS and WhatsApp pass the prepared text to the chosen app. Basket storage supports ordering that you request and does not depend on analytics consent.
Cookie information updated: 12 September 2026.
Ordering by SMS or WhatsApp
Your order is put together and kept in your browser. The web server does not store its items, name or note. The SMS button opens a message on your phone; the WhatsApp button passes the prepared text to WhatsApp, which processes it under its own rules. You send the message in the chosen app, and the restaurant receives it as an ordinary message.
We count orders put together and uses of the sending options, without items, names, notes or prices. Clicking a button does not prove that a message was sent or delivered.
The draft stays in your browser until you remove all items or clear the site data in your browser settings.
What you type into the search
We store four things: the text you type into the advisor, how many dishes we found for it, the language of the page (Slovak, English, Ukrainian or Spanish) and the date — the day, not the exact time. It serves one purpose: to see what people look for and do not find.
No IP address, cookie, session identifier or anything else that could tie the text to a particular person is stored with it. That is also why we do not store the exact time: a second together with the text is exactly what would set one visitor apart from the rest.
The same goes for the "what are we missing" form — only the text itself and the number of times someone wrote it are stored.
So we ask you: please do not type personal data into these fields. We do not need it and we cannot reliably strip it out of the text.
How long we keep it
- traffic measurement — 14 months
- text from the search and from the form — 24 months
- daily form limits — 30 days
- failed attempts to log into the administration — 30 days
This is not just a promise. Older records are deleted by an automated job that runs every day — nobody has to remember to do it. When the job fails, it reports an error rather than staying quiet.
The map on the Contact and About pages
Those two pages carry a map showing where we are. It does not load by itself. Until you click it, there is only a picture with the address and our page talks to no outside service — no Google, no third-party cookies.
When you click Show map, a map by Google is embedded. From that moment Google sees your IP address, information about your browser and the fact that you opened this page, and it may set its own cookies. It does so as a separate controller under its own rules; we have no say in it and it is not governed by this page.
The decision is therefore yours and it holds for that one visit only — the next time you open the page, the map again does not load by itself. If you would rather not see it, click the address directly: navigation opens without anything from Google loading on our page.
Who we pass it to
We do not sell data or use it for advertising. Opening the map, WhatsApp or a delivery platform involves the corresponding external service, as described above.
The site runs on a server of the hosting provider Websupport, s. r. o., which accesses the data as a processor under a contract.
Delivery platforms are a different matter. When you order through Wolt, Bolt Food or Bistro.sk, their system handles the order and they process your data as separate controllers under their own rules. We have no say in it and it is not governed by this page.
Your rights
You have the right to know what we process about you, to ask for correction or deletion, to object to the processing and to lodge a complaint with the Office for Personal Data Protection of the Slovak Republic.
To exercise your rights, or if you have sent us personal data, contact galimar@galimar.sk. We will assess your request based on its content and the data available to us.
This document is effective from: 9 September 2026