Privacy Policy

Who is responsible for your data

Yami Yami Kft., trading as TIMI BAR & COFFEE, is the data controller for the processing described on this page. Contact us at timiclub.hu@gmail.com for privacy questions or requests.

Where this policy applies

This policy applies to the TIMI official website, online booking pages, QR table ordering and the optional My TIMI account. A third-party website you open from TIMI follows its own privacy policy.

Website delivery and security

Cloudflare processes technical request data, which may include an IP address, browser information, requested page, time and security signals, to deliver and protect the website. TIMI relies on its legitimate interest in providing a secure and reliable service.

TIMI does not intentionally write full IP addresses into its custom website analytics dataset. Provider security logs follow the provider settings that apply to our account.

Aggregate website analytics

On non-legal pages, TIMI may record an event name, page path and family, language, booking type, landing source or campaign, and event identifier. This helps us understand which pages work and improve the service under our legitimate interest.

These custom events do not contain your name, email address, My TIMI member ID or a full IP address. They are stored in Cloudflare Workers Analytics Engine for three months. Legal pages do not run this analytics component or write campaign data to browser storage.

Bookings

When you make a booking, TIMI uses your name, email address, booking type, date and time, party size, expected duration, note and language to take steps at your request and provide the booking service. Booking contact details may be used for necessary confirmations, changes or cancellation messages.

The separate events option is optional and off by default. Selecting it records only a request to begin double opt-in; it does not make the address an active marketing subscriber until the confirmation step succeeds. Booking service messages remain free of promotional content.

We keep booking information while it is needed to manage the visit, follow up and handle a reasonable dispute or legal claim. If a separate invoice or statutory accounting record is created, that record follows the legally required retention period. The current booking system does not promise an automatic deletion date.

Optional marketing

The separate events email option on the booking page still requires separate consent and email confirmation. My TIMI events and member offer emails follow the dedicated section below. Existing consent that TIMI can prove was separately and explicitly given remains recorded for its original limited purpose; it does not authorize a new purpose. A booking address or Google-verified address alone is not marketing consent. Booking and My TIMI use do not require marketing consent.

You can withdraw consent through the one-click unsubscribe link or by contacting TIMI. Withdrawal does not affect earlier lawful processing. A withdrawal, complaint, hard bounce or other applicable suppression always takes priority over an earlier consent.

After an unsubscribe or suppression event, TIMI stops event and community marketing immediately and deletes the original name and email address held only in the marketing register. This does not delete a separate My TIMI account, booking, invoice or other record kept for its own purpose and retention rule.

TIMI keeps only the minimum separate suppression record needed to prevent accidental marketing. A new subscription request does not silently clear complaint, hard-bounce, legal or administrative blocks.

My TIMI events and member offer emails

Subscribing is optional. After signing in to My TIMI, selecting “Subscribe now” gives TIMI permission to email your verified member address about events, member offers and available coupons. Your subscription starts when your choice is saved. No further email confirmation is needed. Signing in, registering or verifying student status does not subscribe you.

We record your member identifier, name, verified email address, subscription time, language and the version of the information shown to you to manage and demonstrate your choice. The default retention period is 1,095 days from successful subscription. At expiry, we stop sending for this purpose and delete the name and email held only as consent evidence. A new subscription requires a new explicit choice.

You can unsubscribe directly from an email or in Account & privacy, without giving a reason. This does not affect your member account, student offers or necessary order and booking messages. After withdrawal, we stop sending for this purpose and clear the name and email held only as consent evidence. We retain only the minimum suppression record needed to prevent accidental sending. Bounces, complaints and other applicable blocks are not automatically cleared by another subscription click.

Google sign-in and My TIMI

Google sign-in is optional. You can browse the menu and place an anonymous table order without signing in. If you choose Google sign-in, TIMI requests only openid, email and profile.

TIMI uses the Google account identifier (sub) as the stable external identity key and stores your verified email address, display name, language, internal member ID and account status. TIMI does not store Google access tokens, ID tokens or refresh tokens after the sign-in exchange.

We use this information to provide and protect the My TIMI account you request. A Google-verified email establishes Google account control only; TIMI does not treat it as marketing consent or use an email match by itself to connect another customer record.

Where TIMI has explicitly established a link, My TIMI may show selected XGD membership facts, such as membership status, tier, available points and progress. XGD remains the authoritative membership and transaction ledger. The link does not by itself prove ownership of a previous order or permit marketing.

To handle bookings, communication choices and suppression consistently, TIMI's Customer Hub links only the necessary internal contact identifier, booking contact fact and communication status. It does not replace XGD, create a second financial ledger or infer a member link from the same email address. Google data is not sold or used for advertising.

Favorites

If favorites are enabled later, TIMI stores the stable identifiers of items you save. Favorites remain until you remove them or delete the My TIMI account. The feature is disabled for the initial login release and does not affect anonymous ordering.

Service providers

TIMI uses a limited number of providers to operate the service: Cloudflare for hosting, security, database and aggregate analytics; Google for optional sign-in and, on some non-legal pages, font delivery; and Resend for booking and consented email delivery.

Providers receive only the information needed for their role. They process data under the applicable contract and privacy terms; some services may also act as an independent controller for their own security and account obligations.

• Cloudflare Privacy Policy
• Google Privacy Policy
• Resend Privacy Policy

International transfers

Some providers may process information outside Hungary or the European Economic Area. Where required, TIMI relies on an applicable adequacy decision, standard contractual clauses or another lawful safeguard. You may contact us for information about the safeguard relevant to your data.

How long information is kept

OAuth transaction

Hashed state, PKCE verifier, nonce and safe return path expire after 10 minutes and are consumed once.

Unconfirmed event email request

Kept only until the double-opt-in link expires or the request is cancelled. An unconfirmed request never permits marketing.

Confirmed event email subscription

The default 1,095-day period starts when double opt-in succeeds. At expiry, TIMI first removes permission to send for that purpose, then deletes the name and email retained only as marketing consent evidence. A new cycle requires a new double opt-in. Three years is TIMI's business retention default, not a statutory maximum.

My TIMI account

Kept until you delete the account or TIMI has a documented legal reason to retain limited information.

Member session

Expires after 30 days. Expired or revoked session rows are scheduled for deletion within a further 30 days.

Security events

Minimal security records are scheduled for deletion after 12 months. They must not contain Google sub, full email addresses, tokens or secrets.

Protected recovery history

Deleted database information may remain temporarily in provider-managed recovery history for the active recovery window, never longer than 30 days under the current platform limit.

Your rights

Depending on the processing, you may ask for access, correction, deletion, restriction or portability, object to processing based on legitimate interests, and withdraw consent at any time. You also have the right not to be subject to a qualifying decision based only on automated processing; TIMI does not use My TIMI for such decisions in this release.

Email timiclub.hu@gmail.com. TIMI may ask for proportionate information to confirm that the request concerns your data. We normally respond within one month, subject to the extensions allowed by law.

• Email TIMI about your data

You may complain to a data protection authority, including Hungary’s NAIH, or seek a court remedy.

• NAIH complaint information

Changes to this policy

TIMI updates this page when the service or legal requirements change. The version and update date are shown at the top. If a change materially affects an active My TIMI account, TIMI will use an appropriate notice before the change takes effect where required.