Privacy policy

What we collect

The site has no user accounts and does not track visitors. The only personal data that reaches us is what you type into one of the three forms.

Table booking: date, time, number of people, your name, phone number and, if you want, a message.

Party booking: date, time slot, number of children, chosen package, your name, phone number, email address and, if you want, a message.

Contact form: your name, email address and message.

Each submission automatically carries the language you filled the form in and the moment you sent it. That is all. We do not collect your IP address for our own purposes, we place no tracking code and we buy data about you from nobody.

Why we collect it, and on what basis

Data from a booking request is used to confirm the booking, to reach you if anything changes and to prepare for your visit. The legal basis is taking steps at your own request before entering into a contract — Article 6(1)(b) GDPR.

Data from the contact form is used to answer your message. The basis is our legitimate interest in replying to someone who writes to us — Article 6(1)(f).

We do not use it for marketing, we send no newsletter and we build no profiles. If any of that ever changes, you will be asked separately and explicitly, not quietly through an update to this page.

Who else sees it

The site is hosted by Netlify, Inc. (United States), which receives and stores form submissions in order to deliver them to us. Netlify processes the data as our processor, under contract, and does not use it for its own purposes. The transfer to the United States relies on the European Commission's standard contractual clauses.

If you use the WhatsApp button instead of a form, the message leaves from your own WhatsApp app, not from this site. The conversation runs through WhatsApp Ireland Limited (Meta group), under their privacy policy, not ours. Your phone number becomes visible to us for the simple reason that you wrote to us, exactly as with a text message.

Beyond that, the data goes nowhere. We do not sell it, rent it or pass it on for advertising. We would hand it to a public authority only where the law requires it.

How long we keep it

Booking requests and messages stay in the Netlify panel and in our mailbox for as long as they are useful for that booking and for any complaint that follows — at most 12 months from the date of the visit.

If a visit produces an accounting document, that is kept for 10 years, as Romanian accounting law requires. This is a legal obligation, not a choice of ours.

You can ask for earlier deletion at any time. We delete everything we are not legally required to keep.

Your rights

You have the right to ask for access to your data, its correction, its erasure, restriction of processing, portability, and to object to processing based on legitimate interest. These are the rights in Articles 15–22 GDPR.

To exercise them, simply write to us. There is no fee and we answer within one month.

If our answer does not satisfy you, you may complain to the Romanian data protection authority — dataprotection.ro.

Children

The site addresses parents, not children, and we do not knowingly collect data about children through the forms. The number of children in a party request is a figure, not a list of names.

Photographs taken on the premises that show children are made only with the written consent of the parents, obtained beforehand.

Security

The site loads only over an encrypted connection. Access to the panel holding form submissions is limited to the people in the company who handle bookings, each with their own account.

We never ask for and never store card details, national identification numbers or copies of documents. If a form ever asks you for those, it is not ours.

Changes

We may update this policy. The version in force is the one published here, with the date shown above. If something material changes — a new purpose, a new recipient — we will say so visibly, not merely by changing the date.