Legal
Privacy
policy
What data we take from you, why, how long we keep it and what you can ask us to do with it. Written to be understood, not to tick a box.
Ultima actualizare: 18 septembrie 2026
Who is responsible for your data
| Denumire | AREA HOSPITALITY S.R.L. |
| Sediu social | Str. Apollonia Hirscher nr. 12, Municipiul Brașov, jud. Brașov |
| Punct de lucru | Str. Apollonia Hirscher 12, Brașov |
| Telefon | +40 772 222 555 |
| contact@italien.ro | |
| Nr. Registrul Comerțului | J2023018306403 |
| Cod unic de înregistrare (CUI) | 48869505 |
| Capital social | 2.000 lei, integral vărsat |
For any question about your data, write to contact@italien.ro.
We have no data protection officer (DPO) and are not required to have one: art. 37 GDPR requires one only for public authorities, for those whose core activity is large-scale monitoring, or for those processing special categories of data on a large scale. A restaurant is in none of those situations.
What data we take and on what basis
| When | Ce | De ce | Basis |
|---|---|---|---|
| Reservation | name, phone, email, date and time, number of guests, notes | so we can hold the table and reach you | art. 6(1)(b) — steps at your request, before a contract |
| Contact form | name, email, message | so we can reply to you | art. 6(1)(f) — legitimate interest: answering those who write to us |
| Guest account | name, email, visit history, points | so you have your account and history | art. 6(1)(b) — contract |
| Messages with the restaurant | what you write to us and what we reply | so we can talk, and so what was agreed stays written | art. 6(1)(b) — contract |
| Loyalty card | card number, visits, points, discounts | so we can count your points | art. 6(1)(b) — the programme's terms |
| Invoice request | company details, or name and address | so we can issue the invoice | art. 6(1)(c) — legal obligation |
| Review on the site | the name you give, the rating, the text | so we can publish it | art. 6(1)(a) — consent, by sending it |
| The menu at the table | table number, what you ordered, the time | so the order reaches the kitchen | art. 6(1)(f) — legitimate interest: table service |
| Security | IP address, technical logs | against abuse and spam | art. 6(1)(f) — legitimate interest: keeping the site working |
We do not ask for national ID numbers. For an invoice in a private person's name, the name and address are enough. If any form ever asks you for one, do not fill it in and let us know — it means we have made a mistake.
We do no marketing unless you tell us you want it. If a newsletter ever appears, it will have its own separate, unticked box, and you will be able to unsubscribe with a single click from any email.
How long we keep it
| Reservations | 12 months from the date of the reservation |
| Messages from the contact form | 12 months from the last reply |
| Messages with the restaurant | 12 months from the last message |
| Guest account, history, points | for as long as the account lasts, plus 3 years from closure |
| Unused account | we delete it after 36 months of inactivity, having told you first |
| Invoices and accounting documents | 5 years — legal obligation (Law 82/1991) |
| Reviews | for as long as they are published; we delete them on request |
| Technical logs | 90 days |
Apart from accounting documents, where the period is set by law, the other periods are our own choice: as long as we need to do the job, no longer.
Who else sees it
Nobody without a reason. In concrete terms, the data reaches:
- the company hosting our server, in the European Union;
- the service through which confirmation emails are sent;
- the loyalty card provider, for points and discounts;
- our accountants, for invoices;
- the authorities, if they require it by law.
We sell no one's data and we do not hand it over for advertising.
Your rights
- Access — to find out what data we hold about you.
- Rectification — to have mistakes corrected.
- Erasure — to have it deleted, where the law does not oblige us to keep it.
- Restriction — to put it on hold while something is being clarified.
- Portability — to give you your data in a file you can take with you.
- Objection — to object to processing based on legitimate interest.
- Withdrawal of consent, at any time, without affecting what was lawfully done until then.
You do not have to write to us for these. From your account you can download your data and close your account yourself, without asking permission. For the rest, write to us — we answer within 30 days at most.
If you are not satisfied with our answer
You can complain to the supervisory authority:
National Supervisory Authority for Personal Data Processing (ANSPDCP)B-dul G-ral. Gheorghe Magheru 28–30, Sector 1, 010336 Bucharest
Phone: +40 318 059 211 · +40 318 059 212
Email: anspdcp@dataprotection.ro
dataprotection.ro
Automated decisions
We make no automated decisions affecting you and we do no profiling. Loyalty points are worked out by fixed rules, the same for everyone.
See also Cookie policy și Terms and conditions.