1. REGULATIONS OF THE MIĘDZYMIASTOWA RESTAURANT § 1 General provisions These Regulations set out the rules for the use of services provided by N FOOD HOŁUBICZKO, EDRIES, GAWRYLUK SPÓŁKA KOMANDYTOWA, operating under the name “MIĘDZYMIASTOWA”. These Regulations have been adopted by the owner of the gastronomic premises (N FOOD HOŁUBICZKO, EDRIES, GAWRYLUK SPÓŁKA KOMANDYTOWA) “MIĘDZYMIASTOWA” located at 34 Rynek Główny Street, 31-010 Kraków, hereinafter referred to as LOCAL The provisions of these Regulations are performed by persons authorized by N FOOD HOŁUBICZKO, EDRIES, GAWRYLUK SPÓŁKA KOMANDYTOWA NIP 6762543015 ul. Rynek Główny 34, 31-010 Kraków operating as “Międzymiastowa”, it's premises manager and staff. Guests of the premises are obliged to become familiar with the Rules and Regulations and comply with their provisions. Entering the premises means acceptance of the provisions of these Regulations. The Rules and Regulations apply throughout the premises. § 2 Premises 1. Reservation of tables can be made through the My Table application. 2. Reservations are made on the basis of a deposit of PLN 100 per person (on Fridays and Saturdays). *The price is subject to change for “special” places. - email contact biuro@miastowa.com 3. We only make reservations inside the restaurant. 4. The deposit will be refunded if the reservation is canceled at least 48 hours before the scheduled date. It will be minus a service charge of 2% of the deposit amount. 5. The prepayment will not be refunded to guests if there are less than 48 hours between the cancellation date and the scheduled date of the reservation. 6. Complaints about reservations for a specific time, made through the “My Table” application, are considered by the restaurant manager within 7 working days. 7. positive consideration of the complaint results in a refund of the prepayment in the form of a Voucher or a refund via bank transfer up to 7 working days after consideration of the complaint. 8. Within the framework of a reservation for a specific time, the lateness of guests not exceeding 15 minutes does not affect the validity of the reservation. 9. On the premises you can consume food and beverages purchased only on the premises. The staff of the premises reserves the right to refuse service to persons who are intoxicated. § 3 Complaints 1. Complaints about meals may be filed only during consumption, not after the meal. 2. If the complaint is accepted, the price of the advertised meal will be refunded or it will be prepared again in a proper manner, at the customer's choice. 3. Comments of guests regarding meals and beverages shall be considered by the manager of the premises or an employee of the premises service authorized to do so. § 4 Security 1. Smoking of tobacco products is strictly prohibited on the premises. 2. In order to guarantee the safety of guests on the premises is installed monitoring. Personal data administrator of Miedzymiastowa is N FOOD HOŁUBICZKO, EDRIES, GAWRYLUK SPÓŁKA KOMANDYTOWA, UL. RYNEK GŁÓWNY 34, 31-010 Kraków. 3. 3. The staff of the establishment, together with the manager of the establishment, reserve the right to refuse to provide services if the guest violates any of the provisions of the regulations. § 5 Final provisions 1. The Rules and Regulations are available for inspection at the premises and on the website of the premises. 2. The Owner of the premises reserves the right to change the Rules at any time without giving reasons. 3. The Regulations shall come into force on March 01, 2021. Privacy policy of the company The administrator of personal data of Miedzymiastowa is N FOOD HOŁUBICZKO, EDRIES, GAWRYLUK SP. K. with its registered seat in Krakow, at Rynek Główny 34, 31-010 Krakow, identified by NIP number: 6762543015 REGON: 369125282 hereinafter referred to as Miedzymiastowa. Personal data of individuals are processed in accordance with Regulation 2016/679 of the European Parliament and of the Council of the EU, dated April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such personal data, also known as RODO (EU General Data Protection Regulation), which will become directly applicable in national legal orders on May 25, 2018. Site visitors Like most website operators, Międzymiastowa collects non-personally identifying information, such as browser type, language preference, referring site, and the date and time of each visitor request. The purpose of collecting non-personally identifiable information is to better understand how Internet users use Web sites and to maintain aggregate statistics about visits to its own Web sites. Międzymiastowa also collects potentially personally-identifying information such as IP addresses. However, Intercity does not use such information to identify users and does not disclose such information, except in circumstances required by law. Visitor statistics Międzymiastowa may collect statistics about the behavior of visitors to the websites. Intercity keeps statistics solely for its own use and does not disclose them to third parties. Międzymiastowa does not disclose personally-identifying information other than as described below. Protection of certain personal information Międzymiastowa discloses personally identifiable and personally identifiable information only to those employees and contractors who need to know the information in order to process it on behalf of Intercity or to provide services available on Międzymiastowa websites, who have agreed not to disclose the information to third parties. Some of the contractors, may be located outside of Poland, within the European Union, where uniform data protection rules have been in place since May 25, 2018. By using the Intercity website, you consent to the transfer of such information to them. Międzymiastowa does not rent or sell potentially personally-identifying and personally-identifying information to anyone. Other than to employees and contractors as described above, Intercity discloses potentially personally-identifying and personally-identifying information only when required to do so by law. If you are a recipient of the Intercity newsletter and have provided your email address, Międzymiastowa may occasionally send you an email or ask for your feedback. Międzymiastowa takes all necessary measures to protect against unauthorized access, use, alteration or destruction of personally identifiable information and personally identifiable information. Cookies A cookie is a string of information stored by a website on a visitor's computer, and the visitor's browser provides the information each time the user returns to the website. Rama uses cookies to help identify and track visitors and assess usage or access preferences on the site. Visitors to Rama's sites who do not wish to place cookies on their computers should set their browsers to reject cookies before using Intercity's websites, with the caveat that some features of Intercity's websites, may not function properly without the aid of cookies. Międzymiastowa does not store any sensitive personal information. Personal data will be kept for no longer than necessary for the purpose of processing and may be deleted at any request of the User, who has the right to: - correct, complete, update or rectify their personal data, - object to the processing of their personal data, - request the deletion of their personal data - the right to be forgotten. For this purpose, please contact us by e-mail at biuro@miastowa.com or by letter to: Miedzymiastowa ul. Rynek Główny 34, 31-010, Cracow The seller uses IP addresses collected during Internet connections for technical purposes related to the administration of the Intercity website In addition, IP addresses are used to collect general statistical information. The Seller uses “cookies” files. The information collected with “cookies” allows to customize the services and content to the individual needs and preferences of the Buyers, as well as are used to develop general statistics on the use of Intercity websites. Disabling the option in your web browser to allow the storage of “cookies” does not generally prevent you from using the Intercity websites. Międzymiastowa undertakes to ensure the confidentiality of the personal data processed. Upon termination of the processing services, it shall delete all existing copies of the data, unless European Union law or Polish law prescribes the retention of personal data. Międzymiastowa, upon discovery of a personal data protection violation, shall without undue delay report the incident to the GIODO and, if necessary, to the Cyber Security Department of the Ministry of Digitization within 72 hours, and shall immediately notify the persons whose data has been violated.

**Reservation Regulations for Payment with MDE Card (Deposit for Use)** **1. General Provisions** 1.1. These regulations define the rules for making reservations at Międzymiastowa restaurant using the MDE card as a deposit for use. 1.2. Making a reservation implies acceptance of these regulations. **2. Reservation Rules** 2.1. A table reservation can be made in person, by phone, or via the reservation application. 2.2. To confirm the reservation, a deposit payment using the MDE card is required. 2.3. The deposit amount is determined individually and may depend on the number of people and the reservation date. **3. Terms of Deposit Use** 3.1. The deposit made with the MDE card will be applied to the restaurant bill on the day of the reservation. 3.2. If the customer does not show up at the agreed time without prior cancellation, the deposit is forfeited and is non-refundable. 3.3. If the reservation is canceled at least 48 hours in advance, the deposit may be used for a future reservation on a date agreed with the restaurant, unless otherwise stated in the reservation agreement. **4. Changes and Cancellations** 4.1. The customer has the right to change the reservation date no later than 48 hours before the planned visit. 4.2. In case of a reservation change, the deposit remains in the customer's account and may be used for a new date. 4.3. The restaurant reserves the right to cancel the reservation due to unforeseen circumstances, in which case the customer will be notified immediately, and the deposit will be refunded or transferred to another date, unless otherwise stated in the reservation agreement. **5. Personal Data** **Information on Personal Data Processing** 5.1. The data controller is NFOOD Hołubiczko, Edries, Gawryluk Spółka Komandytowa, Rynek Główny 34, 31-010 Kraków. 5.2. If you have any questions or concerns regarding the processing of your data by the Controller, please contact us via email at biuro@miastowa.com or in writing at Rynek Główny 34, 31-010 Kraków. 5.3. Your personal data will be processed by the Controller for the following purposes: a. Making and fulfilling reservations under the "Reservation Terms" using the online reservation system, and providing services by the Controller based on Article 6(1)(b) of the GDPR. b. Ensuring the security of individuals on the restaurant premises and protecting property, which the Controller achieves through the use of video surveillance on the premises, based on Article 6(1)(f) of the GDPR. c. Establishing, pursuing, or defending against claims that may arise in connection with the use of the Controller’s services, based on Article 6(1)(f) of the GDPR. 5.4. Personal data will be processed for the duration necessary to fulfill the contract and thereafter for the purposes and period required by law or to secure claims. Monitoring data is recorded automatically and stored for 14 days, after which it is deleted by gradually overwriting existing recordings with new ones. 5.5. You have the right to access your personal data processed by the Controller, the right to correct, request deletion, restrict processing, and in some cases, transfer the data and object to processing. 5.6. You also have the right to withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal. 5.7. The data subject has the right to lodge a complaint with a supervisory authority if they believe that the processing of their personal data violates applicable law. The supervisory authority is the President of the Personal Data Protection Office. 5.8. Providing personal data is voluntary but necessary for making and fulfilling a reservation. 5.9. The Controller declares that personal data is protected against unlawful disclosure to unauthorized persons, theft, destruction, loss, damage, alteration, or processing contrary to GDPR regulations. 5.10. **Scope of Data Processing** The Controller processes your personal data to the following extent: name, surname, contact details (email address, phone number), credit card number, date of stay, possible drink preferences (via the add-ons tab), and details regarding the number and age of accompanying persons. 5.11. **Sharing Personal Data with Other Entities** 5.12. Recipients of personal data may include authorities, institutions, and entities authorized under the law, as well as entities providing services to the Controller (e.g., legal, IT, marketing, accounting services, and other entities involved in the execution of the ordered service). **6. Final Provisions** 6.1. The restaurant is not responsible for improper use of the MDE card or lack of funds on the card. 6.2. Any disputes related to the reservation process will be resolved amicably in the first instance, and in the absence of an agreement, through legal proceedings. 6.3. These regulations come into force on the date of their publication and may be changed by the restaurant at any time, provided that changes do not affect previously made reservations.