Privacy Notice & Terms

Cinquecento Budapest PRIVACY NOTICE (GDPR) Controller Cinquecento KFT – for restaurant Cinquecento Budapest Registered office: Budapest, Bocskai u. 15. 2 em. 1 ajto, 1114 Hungary HU VAT: 32859449-2-43 – Companies Register: 01-09-446422 Email: contacts@cinquecentobudapest.hu – Phone: +36705155798 Website: https://cinquecentobudapest.hu/ If appointed: DPO/Privacy Officer:

Scope This notice applies to Cinquecento Budapest's website and services for menu browsing, order creation, online payment and customer support. Categories of data • Identity and contact data: name, surname, email, phone. • Order fulfilment data: delivery/pick■up address, order notes, preferences (e.g., time slot, allergens indicated by the user). • Payment data: transaction details (amount, result, identifiers). Full card details are processed exclusively by our payment service provider Worldline Financial Services (Europe) S.A., not by the Controller. • Browsing and cookies: IP address, technical logs, cookie/SDK identifiers, analytics, cookie preferences. • Support: contents of communications (email, forms, chat). Purposes and legal bases (Art. 6 GDPR) 1) Contract performance: cart, order, payment, preparation and delivery/pick■up; after■sales support. Basis: Art. 6(1)(b). 2) Legal obligations: tax/accounting, food safety regulations. Basis: Art. 6(1)(c). 3) Legitimate interests: site security, fraud prevention, legal defence, service improvement (anonymised/aggregated analytics where possible). Basis: Art. 6(1)(f). 4) Direct marketing only with consent; revocable at any time. Basis: Art. 6(1)(a). 5) Non■essential cookies (marketing/advanced analytics) only with consent. Basis: Art. 6(1)(a). Data provision Required for order/payment/compliance; optional for marketing and non■essential cookies. Recipients • Payment provider: Worldline Financial Services (Europe) S.A.. • Hosting/e■commerce platforms. • Couriers/delivery services (if applicable). • Advisors and competent authorities where required. International transfers Any transfers outside the EEA will rely on GDPR Arts. 44■49 safeguards (e.g., Standard Contractual Clauses). Retention • Order/billing data: for performance and statutory tax/accounting retention. • Account (if any): until deletion request or inactivity [specify]. • Support: [e.g., 24 months]. • Marketing: until consent withdrawal or [e.g., 24 months]. • Security logs: [e.g., 12 months]. Security Appropriate technical and organisational measures (TLS in transit, access controls, data minimisation, logging). Card data do not pass through our systems. Data subject rights Access, rectification, erasure, restriction, portability, objection, and consent withdrawal (Arts. 15■22 GDPR). Contact: contacts@cinquecentobudapest.hu. You may lodge a complaint with the Hungarian Authority (NAIH): https://www.naih.hu; ugyfelszolgalat@naih.hu. Minors Service not intended for children under 16. Cookies Consent banner for non■essential cookies and a Preference Center. See Cookie Policy. Changes Updates will be posted on the website.

TERMS AND CONDITIONS

Service owner Cinquecento KFT – Cinquecento Budapest Address: Budapest, Bocskai u. 15. 2 em. 1 ajto, 1114 Hungary – HU VAT: 32859449-2-43 – Companies Register: 01-09-446422 Email: contacts@cinquecentobudapest.hu – Phone: +36705155798 – Website: https://cinquecentobudapest.hu/ 1. Purpose These Terms govern the use of the website and the online ordering and payment service for food and beverages, with in■store pick■up and/or delivery (if available). 2. Registration and account Orders can be placed as guest or with an account. Users must provide accurate data and safeguard credentials. 3. Menu, allergens and availability Menu, ingredients, allergens and prices are shown on the website. Items may be unavailable at the time of order; we will offer alternatives or refunds. 4. Prices, taxes and invoicing Prices in HUF (unless otherwise stated), VAT included. Any delivery/service fees are shown before payment. Invoice available upon correct tax details. 5. Orders and confirmation Order is placed upon confirmation and payment. We may refuse/cancel for legitimate reasons (suspected fraud, unserved address, force majeure), with refund where due. 6. Payments Payments by card via Worldline Financial Services (Europe) S.A.. Card data are processed by the provider and do not pass through our systems. 7. Delivery and pick■up Pick■up at the scheduled time. Delivery (if active) to the address provided; times are indicative and delays may occur. If unreachable, costs or cancellation may apply. 8. Changes/cancellation and refunds Allowed until the order enters preparation. For significant delays, unavailability or errors (wrong/missing items), contact us within 24 hours: replacement or proportional refund will be offered. For perishable goods, the right of withdrawal may not apply after preparation. 9. Alcohol Alcoholic beverages (if offered) are sold only to adults; ID may be requested. 10. User conduct No unlawful use or infringement of third■party rights. 11. Liability Our liability for purchased products is limited to the price paid, except for wilful misconduct or gross negligence; mandatory statutory liabilities remain unaffected. 12. Intellectual property Site contents, trademarks, logos, photos and texts are owned by Cinquecento KFT or licensed. 13. Complaints and support Contact: contacts@cinquecentobudapest.hu – +36705155798. EU ODR platform: https://ec.europa.eu/consumers/odr/ 14. Data protection See the Privacy Notice and Cookie Policy. 15. Governing law and jurisdiction Hungarian law; courts of Budapest (without prejudice to mandatory consumer rights). 16. Changes Effective upon publication.