Respecting the right to the protection of personal data, as well as the right to private life, is one of the fundamental missions of the restaurant Ave Forchetta – Neo Italian Bistro.
Considering the legislative changes at the level of the European Union by Regulation (EU) 2016/679 regarding the protection of natural persons with regard to the processing of personal data and the free movement of such data and the repeal of Directive 95/46/EC ("GDPR ”) which becomes applicable as of May 25, 2018, we want to make sure that your rights are protected and that you are aware of how Ave Forchetta processes your personal data.
Personal data means any information relating to an identified or identifiable natural person ("data subject"); an identifiable natural person is a person who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more many specific elements, specific to its physical, physiological, genetic, psychological, economic, cultural or social identity.
Our restaurant is AveForchetta and is managed by the company:
SC AVE FORCHETTA TANDEM S.R.L. with headquarters in Bucharest, Sector 1, Matei Millo street no. 5, TANDEM OFFICE BUILDING, ground floor, registered at the Trade Registry Office with no. J40/6269/2022, with Unique Registration Code RO45903653, IBAN Account: RO48BUCU1081304266043RON, opened at Alpha Bank, Unirii Branch, legally represented by Mr. Adrian Stănoiu, as General Manager.
Please find below the details related to data processing:
__________________________________________________________________________
WHAT KIND OF PERSONAL DATA DO WE PROCESS?
If you are a customer or potential customer
We collect personal data from most interactions with you, as well as in other aspects of our business. The categories of personal data we collect are:
Also, surveillance cameras and other security measures located on our properties may capture or record images of guests in public places (such as restaurant entrances, lobbies) as well as your location data (through images captured by security cameras surveillance, access cards and other technologies).
You can always choose which personal data you want to provide to us. However, if you choose not to provide certain personal data, where the basis of our request is to comply with a contractual obligation or obligations necessary to enter into a contract, we will be unable to provide you with certain services, for example: if you do not want give us your name, surname, email address or phone number if you want to make a reservation or order, we will not be able to make the reservation or order.
If you are a potential employee
We collect the information from the CV you submit as well as any other information submitted with the CV.
If you are a user of our website www.aveforchetta.ro.
Simply accessing our website will not lead to the collection of your personal data unless you voluntarily enter certain data (eg online bookings, vacancy applications, certain requests/requests, etc.).
However, we collect the time and date of the website access and the IP address from which our website was accessed.
However, we collect the time and date of the website access and the IP address from which our website was accessed.
We collect the name, first name, position and any other data provided by you or the company you represent.
If you are employed
Please see the employee privacy policy, made available at the time of employment and available at any time from the human resources department.
__________________________________________________________________________
PERSONAL DATA OF MINORS
We do not process the personal data of minors under the age of 16.
__________________________________________________________________________
SENSITIVE DATA
The term "sensitive data" refers to racial or ethnic origin, political opinions, religious confession or philosophical beliefs or trade union membership and the processing of genetic data, biometric data, health data or data on sex life or sexual orientation.
We generally do not collect sensitive information unless you choose to provide it to us. We may use the health data you provide to better serve you and meet your special needs (for example, preparing food without including foods to which you are allergic, providing access for people with disabilities).
__________________________________________________________________________
FOR WHAT PURPOSE AND ON WHAT BASIS WE PROCESS YOUR DATA. PERSONAL?
Dacă sunteți oaspete
Purpose: we process your personal data (i) to reserve a place for you in the restaurant and (ii) to respond to requests for offers or reservations sent by you.
Grounds: conclusion of a contract
Purpose: we process your personal data in order to be able to fulfill the orders placed by you whether you choose to serve them at the location, or for personal collection or delivery.
Grounds: execution of the restaurant services contract
Purpose: we process your personal data to make sure you felt good with us.
Grounds: our legitimate interest to constantly improve the services we offer and to offer services that are as suitable as possible and comply with the standards of our customers
Purpose: we process your personal data for marketing purposes, such as commercial newsletters and marketing communications regarding new products and services or other offers that we believe may be of interest to you.
Grounds: we rely on our legitimate interest to promote our services by sending you offers that we believe may be of interest to you (see “Right to object” in the “Your Rights” Section).
If necessary, in accordance with applicable law, we will obtain your consent before processing your personal data for direct marketing purposes. In this case, we inform you that you will be able to withdraw your consent for marketing processing at any time, in which case you will no longer receive any marketing communications from us.
We will include an unsubscribe link that you can use if you no longer want us to send you messages.
Also, on the occasion of organizing certain events in our restaurant, it is possible to take some photos, and some of these could also be distributed online to show others what our events are like. In any case, because we take into account the right to privacy, we take care that the photos do not highlight certain people and we will do our best to inform you that photos will be taken (for objections to our photos see “ The right to opposition” in the “Your rights” section).
Purpose: these communications will be made for a specific reason such as: (i) to respond to your requests, (ii) if you have not completed an online booking, we may send you an email to to remind you to complete your reservation, (iii) to inform you of how complaints and/or incidents arising during your stay at our restaurant have been resolved.
Legal Basis: our legitimate interest to provide services to the highest standards by resolving any requests/complaints and to assure you of our full availability.
Purpose: to ensure the constant qualitative evolution of our services, we take care to analyze every complaint/suggestion from you, so we draw up statistical reports to identify problems, the degree of repetition and to find the best solutions to fix them .
Grounds: We rely on our legitimate interest to provide services that meet your and Ave Forchetta's standards.
If you are a user of our website www.aveforchetta.ro.
Purpose: traffic monitoring in order to identify errors and/or any other dysfunction of the site
Basis: we base this data processing activity on our legitimate interest, which is to provide you with a fully functional website by fixing any errors, as well as continuously improving it.
However, we collect the time and date of the website access and the IP address from which our website was accessed.
Purpose: performance of contractual relations with our suppliers or business partners.
Grounds: execution of a contract.
If you are a potential employee
Purpose: To evaluate your employment application.
Grounds: conclusion of a contract
If you are employed
Please see the employee privacy policy, made available at the time of employment and available at any time from the human resources department.
For all the categories of persons above, we may also process your data in the context of the following activities:
Purpose: we process your data to carry out the operations mentioned above
Reasons: the legitimate interest to carry out the operations, especially in the conditions where they would be impossible to carry out without processing your data.
However, we assure you that this possible processing will be carried out in accordance with this policy and by implementing measures to ensure the confidentiality of your data.
Purpose: we process personal data for the security of assets and the physical integrity of individuals.
Grounds: we rely on our legitimate interest to ensure the protection of your property, the restaurant, as well as the protection of people.
Purpose: in certain cases, we need to process the information provided, which may include personal data, to resolve legal disputes or complaints, for investigations and compliance with applicable legal regulations, to enforce an agreement or to comply with requests from public bodies to the extent that these requests meet the conditions imposed by law.
Reasons: the reasons for the processing can be represented by the legal obligation (if we have the legal obligation to disclose certain personal data to the public authorities) or
in our legitimate interest to resolve any disputes and/or complaints.
__________________________________________________________________________
TO WHOM WE TRANSMIT YOUR DATA. PERSONAL?
In order to provide you with the expected level of hospitality and provide you with high quality services, we may share your personal information with our service providers and other third parties as detailed below:
Authorities and/or public institutions for: (i) compliance with legal provisions, (ii) to respond to their requests, (iii) for reasons of public interest (eg: national security).
The privacy of your data is important to us, which is why, where possible, the transmission of personal data in accordance with the above is only carried out on the basis of a confidentiality undertaking from the recipients, guaranteeing that this data is kept safe and that the provision of this information is done in accordance with applicable law and policies. In any case, each time we will transmit to the recipients only the information strictly necessary to achieve the respective purpose.
__________________________________________________________________________
DO WE COLLECT PERSONAL DATA FROM THIRD PARTIES?
In order to provide you with the expected level of hospitality and to provide you with the best level of service, it is possible that the personal data provided to our restaurant may also be transmitted to our business partners and other third parties, as detailed below:
In any case, we assure you that your data collected from third parties will be processed under the same conditions as if they were collected directly from you. We will also only collect what is necessary to fulfill our purposes (see Section "FOR WHAT PURPOSE AND ON WHAT BASIS ARE YOUR PERSONAL DATA PROCESSED?".
In addition, when we first contact you, we will first inform you of the source from which we obtained your personal data.
__________________________________________________________________________
DO WE TRANSFER YOUR PERSONAL DATA OUTSIDE EU/EEA?
No, your data will not be transferred to countries that are not part of the European Union or the European Economic Area.
__________________________________________________________________________
SUPPLY BY YOU OF THE PERSONAL DATA OF OTHER NATURAL PERSONS
If you provide us with the personal data of other neutral persons, please inform them before this and how it will be processed, as described in this privacy policy.
__________________________________________________________________________
HOW LONG DO WE KEEP YOUR PERSONAL DATA?
Your personal data is kept for the duration of the purposes detailed in this policy, unless a longer retention period is required or permitted by applicable law (for example surveillance camera recordings will not be kept for more than 30 days ).
We constantly review the need to retain your personal data, and to the extent that processing is no longer necessary and there is no legal obligation to retain the data, we will destroy your personal data as soon as possible and in a way that does not can still be recovered or reconstructed (for example, we will delete/destroy all data of people who were not hired following interviews, if there is no serious prospect of employment in the future).
If personal information is printed on paper, it will be securely destroyed by shredder, and if it is saved on electronic media, it will be deleted by technical means to ensure that the information cannot be recovered. or reconstituted later.
__________________________________________________________________________
WHAT ARE YOUR RIGHTS?
As a data subject, you benefit from the following rights provided by the GDPR:
If we use your personal data based on your consent, you have the right to withdraw this consent at any time. In this situation, your data will no longer be processed by us, unless a legal provision obliges us to keep and archive them. In any case, we will inform you if there is such a legal provision and we will indicate it expressly.
To find out how you can exercise any of the above rights, please see the "Questions or Complaints" section
__________________________________________________________________________
IT'S YOUR DATA SAFE?
We take your personal security very seriously, which is why we take important security measures necessary to protect against unauthorized access to data or unauthorized modification, disclosure or destruction of data. This involves internal reviews of data collection, retention and processing practices and security measures, as well as physical security measures to protect against unauthorized access to the systems where we store personal data.
We also require our service providers and business partners to take all necessary measures to protect against unauthorized access to data or unauthorized modification, disclosure or destruction of data.
__________________________________________________________________________
LINKS TO OTHER WEBSITES
Our website contains links to third party websites. Please note that we are not responsible for the collection, use, retention, sharing or disclosure of data or information by such third parties. If you use or provide information on third-party sites, the terms and privacy policy of those sites apply. We advise you to read the privacy policy of the websites you visit before submitting personal data.
The use of Internet services provided by our restaurants is subject to the terms of use and privacy policy of the Internet providers. You can access those terms and policies by using the links on that service's login page or by visiting your Internet provider's website.
__________________________________________________________________________
QUESTIONS OR COMPLAINTS
If you have any questions or concerns related to the processing of your personal data or if you wish to exercise any of the rights mentioned above, you are welcome to contact us in writing at the following e-mail address: marketing@aveforchetta.ro.
Also, considering that you do not have electronic means or do not want to use them, you can make a written request that you submit to the address: Bucharest, Sector 1, Matei Millo street no. 5, TANDEM OFFICE BUILDING, ground floor. For any other additional information, you can contact us at marketing@aveforchetta.ro.
After submitting the request, a representative of AveForchetta will contact you and request additional information to identify you and facilitate the exercise of the right. It is important that you comply with the AveForchetta representative's request and provide all the necessary information to be able to identify you, otherwise, for security reasons, we will have to reject your request.
In any case, we will respond within 30 days of receiving the request.
To the extent that you are not satisfied with the way in which your request was resolved, you can submit a complaint to the National Supervisory Authority for the Processing of Personal Data.
__________________________________________________________________________
POLICY CHANGES
This privacy policy is subject to periodic updates according to changes in European or national regulations regarding the protection of personal data. If we make material changes to it, we will post a link to the revised policy on the home page of our website. If we make significant changes that will have an impact on your rights and freedoms (for example, when we start processing your personal data for purposes other than those specified above), we will contact you before we start this processing.
To help you keep track of the most important changes, we will include a change history below to acknowledge changes to the Privacy Policy.
Last update: 23.01.2024
