Privacy policy

1. Data controller

The controller is Elita Craft House S.R.L., Trade Register no. J2018000844236, tax id RO38920481, email office@reinabrasserie.ro, phone +40 729 038 037 (hereinafter “Reina Brasserie”, “we”). For any question about your data write to office@reinabrasserie.ro.

2. What we process and why

We only process the data each feature needs:

• Delivery orders: name, phone number, delivery address (street, number, apartment, entrance, floor, intercom), notes for the courier, chosen payment method, the products ordered and, optionally, an email address. Basis: performance of the contract (art. 6(1)(b) GDPR) and legal bookkeeping obligations (art. 6(1)(c)).
• Sending the order via WhatsApp: the site opens the WhatsApp app on your device with the order message pre-filled; you send the message to the restaurant's number. The conversation is processed by WhatsApp (Meta Platforms Ireland Ltd.) under its own privacy policy. Basis: performance of the contract.
• Contact form: name, email and message, so we can reply. Basis: legitimate interest in answering requests (art. 6(1)(f)) or pre-contractual steps.
• Reservations are handled by ialoc (Apps & Web Solutions S.R.L. / ialoc.ro), an independent controller for data entered in its booking form. Read ialoc's policy before booking.
• Anonymous measurement: we count aggregate events (e.g. menu or delivery page opened) without cookies, IP addresses or identifiers.
• Technical security logs: the IP address is used temporarily for abuse prevention (rate limiting) and is not linked to orders.

3. Recipients

Data may be accessed, strictly as needed, by:

• our hosting provider;
• the email service used for contact-form messages;
• WhatsApp (Meta Platforms Ireland Ltd.), for the order message you send;
• ialoc, for reservations;
• public authorities, where the law requires.

We do not sell data and we make no profiling or automated decisions with legal effects. Transfers outside the EEA only take place to providers offering adequate safeguards (standard contractual clauses or adequacy decisions).

4. Retention

• orders: 3 years from the order date, for records and complaint handling; fiscal documents are kept as accounting law requires (10 years);
• contact messages: 12 months from the last exchange;
• technical logs: at most 30 days;

5. Your rights

You have the rights of access, rectification, erasure, restriction, portability, objection and not to be subject to automated decisions. To exercise them write to office@reinabrasserie.ro; we reply within one month. You may also lodge a complaint with the Romanian supervisory authority (ANSPDCP), B-dul G-ral. Gheorghe Magheru 28-30, Bucharest, www.dataprotection.ro.

6. Security

The site uses encrypted connections (HTTPS), restricted access to the administration area and request rate limiting. Order pages are reachable only through private, non-indexable links.

7. Minors

The site is not aimed at persons under 16 and we do not knowingly collect their data.

8. Changes

Any change to this policy is published here with its date.