So much information and help i get from you fellows that it takes me some time to digest it

.
So, i decided to clarify one more time (for my self actually

) what devices i have and how do i have connected them, and is it right or not.

In the attached image you can see the final current network architecture which shows that actually office computers together with cafe cash computer and video camera device are in the network n#1, and only wireless internet connection for cafe users makes the network n#2.
That is how i want it.
In this case which suggestion is best, Graham's or Zeph's?
Up to the Wireless Router everything is working already fine, with static IPs (as should be).
All i need to do now is to make wireless internet possible for cafe via dynamic IPs and stop cafe visitors from being able to see my local network IPs/machines (unless they physically connect to the hub in the cafe via regular wire

).
Thank you and sorry for being a dummy.