Respecting the right to the protection of personal data, as well as the right to private life, is one of the fundamental missions of our restaurant, Zaytoun, the property of S.C. Arte Stradivarius S.R.L., with headquarters in Timișoara, Unirii square no. 5, floor 2, CIF RO 31772540, registered at ONRC Timiș under no. J35/1491/2013.
Thus, we take all necessary steps to process your data. personal data in accordance with the principles established in the data protection legislation applicable in Romania, including Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of this data and repealing Directive 95/46/EC (“GDPR”).
Personal data means any information relating to an identified or identifiable natural person (“data subject”). An identifiable natural person is a person who can be identified, directly or indirectly, in particular by reference to an identification element such as a name, an identification number, an online identifier, or to one or more specific elements, inherent to his physical, physiological, genetic, psychological, economic, cultural or social identity.
WHAT KIND OF PERSONAL DATA DO WE PROCESS?
We collect personal data from most interactions with you, as well as in other aspects of our business. The types of personal information we collect include:
- a) your name and surname, e-mail address, telephone number and message;
- b) information you provide regarding your preferences. marketing or in the course of participating in contests, raffles or certain promotional offers;
- c) personal data provided by you. in order to enroll in a program dedicated to our members and/or in a loyalty program;
- d) reviews and opinions about our services;
- e) pictures taken in our restaurant on the occasion of certain events;
- f) any other types of information you choose to provide to us.
Also, surveillance cameras and other security measures on our properties may capture or record images of guests in public places (such as restaurant entrances, lobbies) and your data. location (through images captured by surveillance cameras, access cards and other technologies).
You can always choose which personal data you want to provide to us. However, if you choose not to provide certain personal data, where the basis of our request is to comply with a contractual obligation or obligations necessary for the conclusion of a contract, there is a possibility that we will not be able to provide you with certain services, for example: if we do not you provide us with your name, surname, email address or phone number if you want to make a reservation, we will not be able to make the reservation.
As a user of the website www.zaytoun.ro, we collect the time and date of accessing the website and the IP address from which our websites were accessed.
We protect the privacy of data obtained from children under 16 years of age. If you are under the age of 16, you must obtain the consent or authorization of your parents or guardian responsible for any provision of personal data.
We do not collect or process Personal Data relating to: racial or ethnic origin; Political Views; religion or philosophical beliefs; health or medical condition; criminal history;
trade union membership; genetic or biometric data; sexual life or orientation;
FOR WHAT PURPOSE AND ON WHAT BASIS DO WE PROCESS YOUR PERSONAL DATA? If you are a customer
- a) Restaurant reservations or in the case of requests for offers sent by you. for certain events organized or that can be organized. Purpose: we process your data personal (i) to reserve a place for you in the restaurant and (ii) to respond to requests for offers submitted by you; Grounds: conclusion of a contract
- b) Pick-up orders. Purpose: we process your data personal data to be able to fulfill the orders made by you. for personal pickup Grounds: execution of the contract for the provision of restaurant services
- c) Feedback. Purpose: we process your data personal to make sure you felt good with us Grounds: our legitimate interest to constantly improve the services we offer and to provide services that are as suitable and compliant as possible to our customers’ standards
- d) Marketing. Purpose: we process your data personal for marketing purposes, such as commercial newsletters and marketing communications about new products and services or other offers that we think may be of interest to you. Basis: we rely on our legitimate interest to promote our services by sending you offers that we believe may be of interest to you. (see “Right to object” in the “Your rights” Section)
If necessary, in accordance with applicable law, we will obtain your consent. before processing your personal data for direct marketing purposes. In this case, we inform you that you will be able to withdraw your consent for marketing processing at any time, in which case you will no longer receive any marketing communications from us.
Also, on the occasion of organizing certain events in our restaurant, it is possible to take some photos, and some of these could also be shared online to show others what our events are like.
In any case, because we take into account your right to privacy, we take care that the photos do not highlight certain people and we will do our best that you be informed that photographs will be taken.
- e) Other communications: by e-mail, post, telephone or SMS. Purpose: these communications will be made for a specific reason such as: (i) to respond to your requests, (ii) if you have not completed a booking online, we may send you an email to remind you to complete the booking, (iii) to inform you about the manner in which complaints and/or incidents arising during your stay in our restaurant were resolved. Grounds: Our legitimate interest to provide services to the highest standards by resolving any requests/complaints and to assure you of our full availability.
- f) Analysis, improvement and research. Purpose: to ensure the constant qualitative evolution of our services, we take care to analyze every complaint/suggestion from you, so we draw up statistical reports to identify problems, the degree of repetition and to find the best solutions in order to remedy them. Themes: we rely on our legitimate interest to provide services that meet your standards. and of the restaurant.
TO WHOM WE TRANSMIT YOUR PERSONAL DATA?
In order to provide you with the expected level of hospitality and to provide you with high quality service, we may share your information. personal data of restaurant members, our service providers and other third parties, as detailed below:
- a) Providers: in order to provide the requested services, in some cases, we will have to transmit some of your data. personal data of the suppliers, and they have the capacity of proxies and process the data on our behalf, on our account and in accordance with our instructions (such as software suppliers, IT, accounting services, medical services).
- b) Members of the restaurant as proxies: for similar purposes or in connection with those for which they were collected.
- c) Events: if you participate in certain events within the restaurant, and this event is organized in collaboration with third parties, your data personal data granted in order to participate in the events can be shared with the other organizers and, if applicable, with other event participants.
- d) Business partners: in certain cases, we partner with other companies to provide you with products, services or offers;
- e) Authorities and/or public institutions for: (i) compliance with legal provisions, (ii) to respond to their requests, (iii) for reasons of public interest (eg: national security).
Privacy of your data is important to us, which is why, where possible, the transmission of personal data in accordance with the above is only carried out on the basis of a confidentiality undertaking from the recipients, guaranteeing that such data is kept secure and that the provision of this information is done in accordance with applicable law and policies. In any case, each time we will transmit to the recipients only the information strictly necessary to achieve the respective purpose.
DO WE TRANSFER YOUR PERSONAL DATA OUTSIDE EU/EEA?
No, your data they will not be transmitted to countries that are not part of the European Union or the European Economic Area.
SUPPLY BY YOU OF THE PERSONAL DATA OF OTHER NATURAL PERSONS
If you provide us with the personal data of other natural persons, please inform them before this disclosure and how it will be processed, as described in this privacy policy.
HOW LONG DO WE KEEP YOUR PERSONAL DATA?
Your data personal data are kept for the entire period of achieving the purposes detailed in this policy, if a longer retention period is not required or permitted by applicable law (for example, surveillance camera recordings will not be kept for more than 30 days). We constantly review the need to retain your data. personal data, and to the extent that the processing is no longer necessary and there is no obligation imposed by law to keep the data, we will destroy your data. personal data as soon as possible and in such a way that it can no longer be recovered or reconstructed (for example, we will delete/destroy all data of people who were not hired following interviews, if there is no serious prospect of future employment) . If personal information is printed on paper, it will be destroyed in a secure way that ensures the impossibility of reconstitution, and if it is saved on electronic media, it will be deleted by technical means to ensure that the information is no longer they can be recovered or reconstituted later.
WHAT ARE YOUR RIGHTS?
As a data subject, you benefit from the following rights provided by the GDPR:
- Right of access: you can ask us (i) a confirmation of whether or not personal data is being processed and, if so, access to that data and information about it, as well as (ii) a copy of the personal data we hold (art. 15 of the GDPR); 2. Right to rectification: You can inform us of any changes to your data. personal data or you can ask us to correct the personal data we hold about you. (art. 16 of the GDPR); 3. The right to erasure (“the right to be forgotten”): in certain situations (such as (i) if the data were collected illegally, (ii) the deadline for data storage has expired, (iii) you have exercised your right to object or (iv) data processing is based on consent and you have withdrawn your consent), you can ask us to delete the personal data we hold about you. (art. 17 of the GDPR); 4. The right to restrict processing: in certain situations (such as when you dispute the accuracy of this data or the legality of the processing), you can ask us to restrict the processing of your data. for a certain period (art. 18 of the GDPR); 8 5. The right to data portability: ask us to send you your data. personal data to a third party or directly to you. (art. 20 of the GDPR); 6. The right to object: in certain situations (such as processing based on legitimate interest), you can ask us to stop processing your data. (art. 21 of the GDPR); If we use your data personal data based on consent, you have the right to withdraw this consent at any time. In this case, your data they will no longer be processed by us, unless a legal provision obliges us to keep and archive them. In any case, we will inform you if there is such a legal provision and we will indicate it expressly.
If you wish to exercise any of your rights above, you can contact us at the e-mail address: contact@zaytoun.ro.
IT’S YOUR DATA. SAFE?
We care about your security. personal data very seriously, therefore we take important security measures necessary to protect against unauthorized access to data or unauthorized modification, disclosure or destruction of data. This involves internal reviews of data collection, retention and processing practices and security measures, as well as physical security measures to protect against unauthorized access to the systems where we store personal data. We also require our service providers and business partners to take all necessary measures to protect against unauthorized access to data or unauthorized modification, disclosure or destruction of data.
POLICY CHANGES
This privacy policy may change from time to time. To learn about these changes, please periodically consult the revised Privacy Policy by accessing the zaytoun.ro website.
