Privacy policy

Last updated: 27 August 2026

1. Who is responsible for the data

The controller is , Romanian tax ID , Trade Register no. . You can contact us at contact@hanul-bucuriei.ro or by telephone at 0745 100 009.

2. What information we use and why

Bookings

When you request a table or room, we may process your name, email address, telephone number, selected dates or time, number of guests, chosen option and message. We use them to check availability, reply and confirm or update the booking.

Messages, email and telephone

When you contact us, we use your contact details and message to reply and retain the context of the conversation.

Technical and security data

The server may record the IP address, date and time, requested URL, referrer, server response and browser or device information. These logs support operation, troubleshooting and protection against abuse.

Preferences and analytics

We retain your cookie choice. If you accept Statistics, we may use Google Analytics 4 for aggregate measurement. Details are provided on the Cookies page.

3. Legal bases

• steps at your request before entering a contract and performance of that contract, for bookings;
• legitimate interests, for general enquiries, security and website operation;
• consent, for optional technologies;
• legal obligation, when the law requires information to be retained or disclosed.

4. Who may receive the information

Access is limited to authorised people who manage bookings and communication. We may use providers for hosting, security, backup, email, platform maintenance, forms, maps and analytics, only to the extent needed for their service. We may disclose information to authorities or professional advisers where required by law or to protect a right. We do not sell or rent personal data.

Some global providers may process information outside the European Economic Area. In those situations, we use providers that declare appropriate legal transfer mechanisms, where applicable.

5. How long we retain information

• Bookings and correspondence: for as long as needed to manage the request and then for the period justified by legal duties, context and the protection of rights.
• Technical logs: according to security and backup cycles, after which they are deleted or overwritten unless an incident requires longer retention.
• Cookie preference: until you change the choice, the technology expires or you clear the browser data.

6. Your rights

Subject to the GDPR, you may request access, rectification, erasure, restriction and portability, and you may object to processing based on legitimate interests. You may withdraw consent for the future. We do not use information submitted through the website for solely automated decisions with legal effects.

To exercise a right, email contact@hanul-bucuriei.ro. If you believe processing is unlawful, you may lodge a complaint with the Romanian supervisory authority, ANSPDCP.

7. External services

The website may integrate Google Analytics, Google Maps and links to external platforms. Those services operate under their own policies. Optional Analytics is controlled through cookie preferences, while a map or external link may send the provider the technical information required to load it.

8. Security, children and updates

We apply measures proportionate to the risk, such as restricted access, secure connections, form protection and backups. The website is not designed to intentionally collect information from children. We update this policy when our working practices, providers or relevant requirements change.