This Cookie Policy explains which cookies and similar technologies that store information on the terminal device are used by the website of the KEBAB HOUSE BONE’MA restaurant, including its version installed as a web application, for what purposes they are used and how their use can be controlled. This document supplements the Privacy Policy.
Effective from 21 October 2026.
1. Operator and contact details
1.1. The website is operated, and decisions on the use of cookies are made, by:
- Business name or full name: KEBAB HOUSE BONE’MA
- Address of the establishment: třída T. G. Masaryka 1077, 293 01 Mladá Boleslav 1
- Company ID (IČO): 03350339
- Tax ID (DIČ): CZ03350339
- Telephone: 326210955
- Website: kebab-house-bonema.vercel.app
- Contact form: Contact page
- Chat: the chat window on the website
1.2. Questions concerning cookies may be addressed to the operator using any of the means of communication stated in paragraph 1.1 (the "contact details stated in Article 1").
3. Legal basis
3.1. Under Section 89(3) of Act No. 127/2005 Coll., on Electronic Communications, as in effect from 1 January 2022, information may be stored in the user’s terminal device, or access to such information gained, only on the basis of the user’s prior consent, except for technical storage or access that is strictly necessary for the transmission of a communication or for the provision of a service explicitly requested by the user.
3.2. The website currently uses only cookies that are necessary for its operation and security (the "necessary cookies") or for remembering a choice that the user has made themselves or for displaying the website correctly (the "functional cookies"). Under paragraph 3.1, no consent is required for their use. Where they contain personal data, the operator processes such data on the basis of the performance of a contract (Article 6(1)(b) of Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation, "GDPR")) where signing in to the customer account or an order is concerned, and otherwise on the basis of a legitimate interest in the proper and secure operation of the website (Article 6(1)(f) GDPR).
3.3. The website does not currently use analytical, marketing or other optional cookies. Should the operator introduce them in the future, it would use them only on the basis of the user’s prior consent (Article 6(1)(a) GDPR) and would update this Policy in advance.
5. Local storage and cache
5.1. The website also stores the following data on the device:
- Name
- kh_cart_v1 (localStorage)
- Provider
- website operator
- Purpose
- keeping the contents of the cart
- Category
- necessary
- Storage period
- until the cart is emptied
- Name
- kh_install_prompt (localStorage)
- Provider
- website operator
- Purpose
- record of when the user dismissed the prompt to install the app, or that the app is installed on this device, so that the prompt is not shown repeatedly; this information is not sent anywhere
- Category
- functional
- Storage period
- 3 days from dismissing the prompt; after the app is installed, until the website data are deleted
- Name
- kh_checkout_idempotency (sessionStorage)
- Provider
- website operator
- Purpose
- one-time random identifier that prevents the same order from being submitted more than once
- Category
- necessary
- Storage period
- until the browser tab is closed
- Name
- kh_splash (sessionStorage)
- Provider
- website operator
- Purpose
- information that the intro animation has already been shown, so that it is not repeated each time a page is loaded
- Category
- functional
- Storage period
- until the browser tab is closed
- Name
- kh_chat_hint (sessionStorage)
- Provider
- website operator
- Purpose
- information that the chat mascot has already offered help in this session, so that its speech bubble is not repeated each time a page is loaded
- Category
- functional
- Storage period
- until the browser tab is closed
- Name
- kh_last_order (localStorage)
- Provider
- website operator
- Purpose
- number of the last order placed from this device and a link to its status page, so that it can be opened quickly and so that the chat can answer a question about its status
- Category
- functional
- Storage period
- 3 days from the last display of the order status page
- Name
- kh_recent_search (localStorage)
- Provider
- website operator
- Purpose
- up to six most recent menu searches, so that they can be repeated quickly; the data is not sent anywhere and can be deleted at any time with the Clear button in the search
- Category
- functional
- Storage period
- 30 days from the last search
- Name
- kh_chat_active (localStorage)
- Provider
- website operator
- Purpose
- flag indicating that a chat conversation is in progress on this device, so that it is restored when the user returns to the website
- Category
- functional
- Storage period
- until the conversation ends
- Name
- bonema-push-synced (sessionStorage)
- Provider
- website operator
- Purpose
- flag indicating that enabled notifications have been linked to the customer account in this session
- Category
- functional
- Storage period
- until the browser tab is closed
- Name
- service worker cache (Cache Storage)
- Provider
- website operator
- Purpose
- static website files (for example styles, scripts and icons) and the offline page; customer account, order and payment pages are not stored in it
- Category
- necessary
- Storage period
- until the website is updated or the website data are deleted in the browser
5.2. If a signed-in user enables notifications (push notifications), the browser stores notification subscription data, in particular the subscription address and encryption keys. This happens only after the user has given explicit permission in the browser’s dialog box; the permission may be withdrawn at any time in the customer account or in the browser settings. Details are given in the Privacy Policy.
5.3. In addition, in the part of the website intended for the operator’s staff, sound notification settings (kh-staff-sound) and the numbers of new orders and unread messages (kh-staff-new, kh-staff-chat) are stored in the browser storage. They serve exclusively for the operation of the staff work environment; they are not stored on customers' devices.
6. Third-party services
6.1. If the buyer chooses online payment, they are redirected to the Stripe Checkout payment gateway, which runs on Stripe’s domain. This page uses Stripe’s own cookies, in particular for payment security and fraud prevention, which Stripe decides on in accordance with its privacy policy. Stripe cookies are not stored on the operator’s website.
6.2. The website does not embed third-party content that would store cookies, for example videos or social media buttons; social networks are only linked to, and fonts are loaded from the website’s server. The map on the order status page loads map data from the OpenFreeMap service (Hyperknot Software Kft., Hungary), which, according to its privacy policy, does not use cookies or other tracking technologies. Once the user navigates to third-party websites, the use of cookies is governed by the terms of their operators.
9. Changes to the Policy
9.1. The operator updates this Policy whenever there is a change in the cookies or similar technologies used. The current version is published on the website together with its effective date. Questions may be addressed to the operator via the contact details stated in Article 1.