Privacy Policy
Statement on the Processing of Personal Data
CASA DOINA S.R.L., with its registered office in Bucharest, 4 Șoseaua Kiseleff, Sector 1, registered with the Trade Register under no. J1993012848403, unique registration code RO 3996991, acting as data controller, wishes to inform you about the processing of your personal data in connection with the provision of CASA DOINA S.R.L. services/products to its customers, for the purposes specified below.
By the nature and procedures of the services provided by CASA DOINA S.R.L. (“Services” or “Casa Doina Services”), users of these services (“Customers” or “Users”) provide certain personal data used to ensure that the Services are provided and carried out optimally and securely, in accordance with applicable legal provisions and internal procedures.
Protecting Casa Doina customers’ personal data and keeping such data secure is one of the key concerns of CASA DOINA S.R.L. and of the partners and subcontractors involved in providing the Services.
This Privacy Policy Statement reflects the privacy policy applicable to all users of Casa Doina services/products, so that they are informed and can make informed decisions regarding how their personal data collected through the use of the website and Services is or will be used, as well as regarding the rights available to them.
Personal Data
Personal data means any information relating to an identified or identifiable natural person. An identifiable person is a person who can be identified, directly or indirectly, particularly by reference to an identifier, including but not limited to:
(i) first name, last name, address, e-mail address, telephone number (landline or mobile); (ii) data provided when making reservations (date, time, number of guests, special requests/allergies, if provided by you); (iii) financial information strictly necessary for processing payments (such data is processed by partner payment processors, and Casa Doina does not have access to full card details); (iv) information resulting from video surveillance if you visit our premises at 4 Șoseaua Kiseleff, where applicable; (v) signature, where relevant for organizing private events; (vi) any other information derived from such data as a result of processing carried out by Casa Doina (e.g. customer segmentation, the unique identifier generated for each customer) and necessary for Casa Doina’s activities; (vii) IP address or activities performed when browsing the website www.casadoina.ro or interacting with our Instagram, Facebook and TripAdvisor pages.
Processing of personal data means any operation or set of operations performed on personal data, whether or not by automated means, such as collection, recording, organization, storage, adaptation or alteration, retrieval, consultation, use, disclosure to third parties by transmission, dissemination or otherwise making available, combination, restriction, archiving, erasure, destruction, etc.
Collection of Information
Information is collected in the process of providing services to users or potential users. The main sources of information are:
Reservation forms available on www.casadoina.ro (including through the online reservation widget), the contact form, as well as data provided by telephone or e-mail;
Transactions taking place between Casa Doina and its technology partners (online reservation service providers, payment processors) and between such partners and users of the Services;
Interactions on our social media pages (Instagram, Facebook) and on review platforms such as TripAdvisor;
External sources, for the purpose of fulfilling specific legal obligations (public registers, competent authorities).
Purposes of Personal Data Processing
The purposes for which CASA DOINA S.R.L. processes personal data are:
Providing the Services directly through the available channels (physical location, website, telephone, e-mail, reservation applications);
Identifying and managing reservations made by users/potential users;
Identifying users/potential users for the purpose of fulfilling Casa Doina’s legal obligations in connection with the provision of the Services;
Monitoring operations and providing support services to users/potential users;
Analyzing and improving the Services, conducting surveys, as well as carrying out marketing and promotional activities relating to the Services (e.g. commercial communications, offers for events);
Analyzing the behavior of persons accessing the Casa Doina website through the use of cookies, in order to provide content tailored to users’ preferences;
Conducting internal analyses (including statistical analyses) regarding the Services and the user portfolio, in order to improve and develop them;
Resolving any procedural and/or legal matters relating to the provision of the Services or the Company’s interests;
Archiving, in physical and/or electronic format, documents relating to the provision of the Services and correspondence with users;
Reporting to state institutions in accordance with the legal regulations applicable to Casa Doina.
Legal Grounds for the Processing of Personal Data
CASA DOINA S.R.L. processes personal data for the purposes mentioned above on the following legal grounds:
Performance of a contract or taking steps at the request of the data subject prior to entering into a contract (e.g. fulfilling a reservation);
Casa Doina’s legitimate interest in providing the Services optimally and in compliance with applicable legal provisions;
A legal obligation to which Casa Doina is subject (e.g. reporting to competent authorities);
Consent provided by selecting communication options (e.g. for direct marketing/newsletters).
Is Providing the Data Mandatory? What Are the Consequences of Refusal?
The processing of personal data requested from users by Casa Doina for the purpose of providing the Services (e.g. processing a reservation) is strictly necessary for the provision of those Services. Refusal to provide such data may prevent us from fulfilling the requested reservation.
Users may choose at any time not to have their data processed for direct marketing purposes.
Recipients of Personal Data
For the purposes mentioned above, Casa Doina may disclose Customer data, where strictly necessary, to the following categories of third parties:
regulatory and legal authorities;
the provider of the online reservation solution (reservation widget), for the purpose of managing reservations made through the website;
payment processors, for transactions carried out online;
contractual partners (e.g. IT/maintenance service providers, marketing service providers, consultants, auditors), some of whom also act as processors of personal data on behalf of the data controller.
The personal data we disclose to processors acting on our behalf is limited to the minimum necessary for the performance of the respective services. We require such processors not to use personal data for any other purpose and to process it securely.
The personal data mentioned above may be made available or transferred to third parties in the following circumstances: (i) to public authorities or institutions with supervisory powers, based on the Company’s legal obligations; (ii) to comply with a legal requirement or protect the Company’s rights, including before courts of law; (iii) to third-party purchasers, to the extent that the Company’s business is transferred, in whole or in part.
Transfer of Personal Data Outside the Country
Customers’ personal data may be transferred outside the country to states within the European Union (“EU”) or the European Economic Area (“EEA”) where technology partners (e.g. providers of online reservation services or payment processing services) have their servers or operate from such states.
Any transfer carried out by the Company will comply with the provisions of the General Data Protection Regulation No. 2016/679 (“GDPR”).
Duration of Processing
We will store Customers’ personal data only for the period necessary to achieve the purposes of processing described above and in accordance with applicable legal regulations, including those concerning the archiving of financial and accounting documents.
What Happens to Users’ Data After Processing Ends
Once the processing period mentioned above has expired and the Company no longer has legal grounds or a legitimate interest in processing your data, the data will be deleted in accordance with the Company’s procedures, which may involve archiving, anonymization or destruction.
Automated Decision-Making and Profiling
The personal data referred to herein may be subject to limited automated decision-making processes used exclusively to personalize marketing communications (e.g. segmentation based on culinary preferences), without producing legal effects concerning the data subject.
Security of Personal Data Processing
The Company continuously evaluates and improves the security measures implemented to ensure that personal data is processed safely and securely.
Rights of the Data Subject
In the context of processing the personal data of users/potential users, the data subject has the following rights:
Right to information – Articles 13 and 14 GDPR;
Right of access to personal data being processed – Article 15 GDPR;
Right to rectification or erasure of data – Articles 16 and 17 GDPR;
Right to request restriction of processing – Article 18 GDPR;
Right to data portability – Article 20 GDPR;
Right to withdraw consent to processing, where processing is based on consent, without affecting the lawfulness of processing carried out before such withdrawal;
Right to object to the processing of personal data – Article 21 GDPR, including the right to object to processing for direct marketing purposes;
Right not to be subject to a decision based solely on automated processing that produces legal effects concerning the data subject or similarly significantly affects them;
Right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) and the right to seek remedy before the competent courts.
Changes to This Statement
CASA DOINA S.R.L. reserves the right to amend this Privacy Policy Statement without prior notice, in accordance with applicable legislation. If this Statement is amended, an updated version will be published on the website. Please check this page periodically to ensure that you are aware of the latest version.
The rights mentioned above may be exercised at any time by sending a notification to restaurant@casadoina.ro or by sending a written, dated and signed notification to: 4 Șoseaua Kiseleff, Sector 1, Bucharest.
CASA DOINA S.R.L.
4 Șoseaua Kiseleff, Sector 1, Bucharest
Telephone: 021 222 6717
E-mail: restaurant@casadoina.ro