top of page

Data protection

As of October 1, 2025

Privacy Policy

Introduction

We ("we", "us", "our") take the protection of the data of users ("users" or "you") of our website and/or mobile application (the "Website" and/or the "Mobile App") very seriously and are committed to protecting the information that users provide to us in connection with the use of our Website and/or Mobile App (collectively, the "Digital Assets"). Furthermore, we are committed to protecting and using your data in accordance with applicable laws.

This Privacy Policy explains our practices regarding the collection, use, and disclosure of your information through your use of our Digital Assets (the "Services") when you access the Services through your devices.

Please read this Privacy Policy carefully and make sure that you fully understand our practices regarding your information before using our Services. If you have read and fully understood this Policy and do not agree with our practices, you must stop using our Digital Assets and Services. By using our Services, you acknowledge the terms of this Privacy Policy. Your continued use of the Services constitutes your acceptance of this Privacy Policy and any amendments thereto.

In this Privacy Policy, you will learn:

  • How we collect data

  • What data we collect

  • Why we collect this data

  • With whom we share the data

  • Where the data is stored

  • How long the data is retained

  • How we protect the data

  • How we handle minors

  • Updates or changes to the Privacy Policy

What Data Do We Collect?

Category: Always

Below is an overview of the data we may collect:

Non-Personal Data
Non-identified and non-identifiable information that you provide during the registration process or that is collected through the use of our Services. Non-personal data does not enable us to identify the individual from whom it was collected. The non-personal data we collect mainly consists of technical and aggregated usage information.

Personal Data
Individually identifiable information, meaning any information by which you may be identified or could reasonably be identified ("Personal Data"). Personal Data that we collect through our Services may include information requested from time to time, such as names, email addresses, mailing addresses, phone numbers, IP addresses, and more. If we combine Personal Data with Non-Personal Data, we will treat the combined information as Personal Data for as long as it remains combined.

How Do We Collect Data?

Category: Always

The primary methods we use to collect data include:

  • We collect data through your use of our Services. When you visit our Digital Assets and use our Services, we may collect, record, and store usage information, session data, and related information.

  • We collect data that you voluntarily provide to us, for example when you contact us directly through a communication channel (such as by sending us an email with comments or feedback).

  • We may collect data from third-party sources, as described below.

  • We collect data that you provide when signing in to our Services through a third-party provider such as Facebook or Google.

Why Do We Collect This Data?

Category: Always

We may use your information for the following purposes:

  • To provide and operate our Services;

  • To develop, customize, and improve our Services;

  • To respond to your feedback, inquiries, and requests and provide assistance;

  • To analyze usage and request patterns;

  • For internal statistical and research purposes;

  • To improve our data security and fraud prevention capabilities;

  • To investigate violations and enforce our terms and policies and to comply with applicable laws, regulations, or governmental requests;

  • To send you updates, notices, promotional materials, and other information related to our Services. You may choose not to receive promotional emails by clicking the unsubscribe link included in such emails.

With Whom Do We Share This Data?

Category: Always

We may share your information with our service providers to operate our Services (for example, third-party hosting services, technical support providers, etc.).

We may also disclose your information under the following circumstances:

  1. To investigate, detect, prevent, or take action against illegal activities or other wrongdoing;

  2. To establish or exercise our rights of defense;

  3. To protect our rights, property, personal safety, and the safety of our users or the public;

  4. In the event of a change of control in our company or any affiliated company (through merger, acquisition, purchase of substantially all assets, etc.);

  5. To collect, hold, and/or manage your information through authorized third-party vendors (such as cloud service providers) as reasonably necessary for business purposes;

  6. To cooperate with third parties in enhancing your user experience.

For the avoidance of doubt, we may transfer, share, or otherwise use Non-Personal Data at our own discretion.

Blogs, Forums, and Social Interactions

Please note that our Services may enable social interactions, such as publicly posting content, information, comments, and chatting with other users. Any content or information you provide in these areas may be read, collected, and used by others.

We advise against posting or sharing information that you do not wish to make public. If you upload content to our Digital Assets or otherwise make it available through the use of a Service, you do so at your own risk. We cannot control the actions of other users or members of the public who may access your information or content.

You acknowledge and agree that copies of your information may remain accessible on cached and archived pages, or after third parties have copied or stored your content, even after deletion.

Cookies and Similar Technologies

When you visit or access our Services, we may authorize third parties to use web beacons, cookies, pixel tags, scripts, and other technologies and analytics services ("Tracking Technologies").

These Tracking Technologies may enable third parties to automatically collect information about you in order to improve navigation on our Digital Assets, optimize performance, provide a customized user experience, and support security and fraud prevention efforts.

For more information, please refer to our Cookie Policy.

Category: User is NOT Associated with an Advertising Service

We will not share your email address or other Personal Data with advertising companies or advertising networks without your consent.

Category: User is Associated with Advertising Services

We may deliver advertisements through our Services and Digital Assets (including websites and applications that use our Services), which may be tailored to your interests based on your recent browsing activities across websites, devices, or browsers.

To provide such advertising, we may use cookies, JavaScript, web beacons, HTML5 local storage, and other technologies. We may also engage third-party advertising networks and service providers to deliver targeted advertising and measure advertising effectiveness.

Any cookies or technologies used by these third parties are governed by their own privacy policies and not by this Privacy Policy.

Where Do We Store the Data?

Non-Personal Data

Please note that our companies, trusted partners, and service providers are located around the world. For the purposes outlined in this Privacy Policy, we may store and process Non-Personal Data in various jurisdictions.

Personal Data

Personal Data may be maintained, processed, and stored in the United States, Ireland, South Korea, Taiwan, Israel, and other jurisdictions as necessary for the proper provision of our Services or as required by law.

How Long Do We Retain Data?

We retain collected information for as long as necessary to provide our Services, comply with legal and contractual obligations, resolve disputes, and enforce our agreements.

We may correct, supplement, or delete inaccurate or incomplete information at any time at our sole discretion.

How Do We Protect the Data?

The hosting service provider of our Digital Assets provides the online platform through which we offer our Services. Your information may be stored through our hosting provider’s data storage systems, databases, and general applications. Your data is stored on secure servers behind a firewall, and secure HTTPS access is provided for most areas of the Services.

Payment Processing

All payment methods offered by us and our hosting provider comply with the PCI-DSS (Payment Card Industry Data Security Standard) requirements established by the PCI Security Standards Council. Compliance with PCI-DSS helps ensure the secure handling of credit card information through physical, electronic, and procedural safeguards.

Despite the measures taken by us and our hosting provider, we cannot guarantee absolute protection or security of any information you upload, post, or otherwise transmit to us or others.

We encourage you to use strong passwords and avoid transmitting sensitive information through email or instant messaging, as these are not considered secure forms of communication.

How Do We Handle Minors?

Services Not Intended for Minors

The Services are not intended for users who have not reached the age of majority. We do not knowingly collect information from children. If you are under the legal age of majority, you should not use the Services or provide us with any information.

We reserve the right to request proof of age at any time. If we learn that a minor is using our Services, we may deny access, suspend the account, and delete any information associated with that user.

Your Rights as an EU Resident

If you reside in the European Union, you may have the right to:

  • Request confirmation as to whether your Personal Data is being processed;

  • Access your Personal Data and related information;

  • Receive your Personal Data in a structured, commonly used, machine-readable format;

  • Request correction of inaccurate Personal Data;

  • Request deletion of your Personal Data;

  • Object to the processing of your Personal Data;

  • Request restriction of processing;

  • Lodge a complaint with a supervisory authority.

These rights may be subject to legal limitations and our legitimate interests.

California Consumer Privacy Act (CCPA)

If you are a California resident, you may have rights under the California Consumer Privacy Act (CCPA), including the right to request access to and deletion of your Personal Data.

We do not sell users’ Personal Data within the meaning of the CCPA.

Updates or Changes to This Privacy Policy

We may revise this Privacy Policy from time to time at our sole discretion. The version published on our Website is always the current version. We encourage you to review this Privacy Policy regularly for updates.

Your continued use of the Services following any notification of changes constitutes your acceptance of the revised Privacy Policy.

Contact

If you have any questions regarding our Services or the information we collect and use, please contact us:

Name: PHO CO BERLIN MITTE
Address: Rosa-Luxemburg-Straße 20, 10178 Berlin, Germany
Email: phoco.berlin.mitte.wix@gmail.com

Disclaimer

The information contained herein does not constitute legal advice and should not be relied upon as such. Specific legal requirements may vary by jurisdiction. As stated in our Terms of Use, you are responsible for ensuring that your Services comply with applicable laws and regulations.

To ensure full compliance with your legal obligations, we strongly recommend seeking professional legal advice regarding the requirements that specifically apply to your business.

Designed by NGO

Copyright 2026 Pho Co Restaurant

  • Instagram
  • Facebook
bottom of page