Privacy Policy

This page describes which personal data of guests and website visitors Restaurant Bomond Chisinau processes, why and on what legal basis, who it is shared with, and how you can manage your own data. This policy is drawn up in accordance with Law No. 195/2024 of the Republic of Moldova on the protection of personal data.

Who processes your data

  • Personal data controller: „SMILEBAR” S.R.L.
  • IDNO: 1025600046662
  • Registered address: mun. Chișinău, str. Mitropolit Varlaam 65, of. 236, MD-2001
  • E-mail for personal data matters: mosu1985@gmail.com
  • Phone: +37379822220

What data we process and why

We only collect the data needed for a specific purpose. The legal basis for processing is stated for each purpose.

Delivery and pickup orders

Data: name, phone number, delivery address, order contents, comment

Legal basis: performance of a contract: placing, preparing and delivering the order

Measuring the effectiveness of our advertising

Data: the source tag (utm) of the advertising link, saved with the order

Legal basis: the operator's legitimate interest in knowing which advertising brings orders; not shared with third parties

Table reservations

Data: name, phone number, visit date and time, number of guests, requests

Legal basis: pre-contractual relations and performance of a contract: booking at your request

Loyalty program

Data: name, phone number, date of birth (if you provided it), history of bonus accrual and redemption

Legal basis: performance of a contract: the loyalty program terms

Reviews and inquiries

Data: phone number, rating and review text

Legal basis: legitimate interest of the controller: responding to your inquiry and improving service quality

Job applications

Data: name, phone number, resume, and any details you provided yourself

Legal basis: pre-contractual relations: reviewing your application at your request

Marketing mailings

Data: phone number and your decision (consent or refusal)

Legal basis: your consent. It is not required to place an order or a reservation, and can be withdrawn at any time

Advertising cookies (Meta Pixel)

Data: cookie identifiers, pages viewed, menu dishes and categories viewed, menu search queries, items added to cart, order amount

Legal basis: your consent given in the cookie banner. You can change your decision at any time via the “Cookie settings” link

Website operation and security

Data: IP address, browser type, technical request logs

Legal basis: legitimate interest of the controller: protecting the website from abuse and failures

When you give or withdraw consent, we keep a record of the decision: the date, the policy version, and where it was given. This is needed to demonstrate the lawfulness of processing.

Who receives the data

Data is shared only with those who help provide the service, and only to the extent necessary. We currently use:

  • The website and online ordering platform (hosting and database) — processes data on the controller's behalf
  • Syrve (iiko) restaurant management system — orders and the loyalty program
  • Telegram — notifications to restaurant staff about new orders
  • Telegram — notifications to restaurant staff about reservations
  • Telegram — notifications to responsible staff about job applications
  • Google Calendar — backup copy of the reservation log
  • Voice assistant service and IP telephony operator — calling the guest to confirm the reservation
  • ElevenLabs — the AI chat on the website (messages you write in the chat)
  • Meta Platforms — advertising cookies, only with your consent
  • SMS provider SMS.md — confirmation codes and notifications about orders and reservations

In addition, data may be shared with government authorities where directly required by law.

Transfer outside the Republic of Moldova

Some of the listed services may process data outside the Republic of Moldova. Such transfers are carried out only with the safeguards provided for by Law No. 195/2024: an adequacy decision or standard contractual clauses.

How long we keep data

Data is kept no longer than necessary for the purpose it was collected for, or as long as required by law (for example, accounting records). The consent record is kept for as long as the consent is valid, and after withdrawal, for as long as needed to demonstrate the lawfulness of processing.

Personal data in orders (amounts remain in accounting)3 years
Reservations and waitlist2 years
Reviews and inquiries2 years
Resumes and candidate forms6 months

Once the period expires, the data is anonymized: name, phone number and other personal details are deleted, and anonymized statistics remain.

Your rights

You may:

  • find out whether your data is being processed and obtain a copy of it
  • correct inaccurate data
  • request deletion of your data
  • restrict processing
  • receive your data in a machine-readable format
  • object to processing based on legitimate interest
  • withdraw your consent at any time — this does not affect the lawfulness of processing before the withdrawal

To exercise these rights, write to us using the contacts in the “Who processes your data” section. We will respond within 30 days.

You can view, download and delete your data, and unsubscribe from mailings, yourself on the "My data" page

If your number isn't Moldovan, write to us at mosu1985@gmail.com

If you believe your rights have been violated, you may file a complaint with the National Center for Personal Data Protection of the Republic of Moldova (datepersonale.md).

Menu view statistics

We collect anonymous menu view statistics: which dish was opened, whether a photo or a video was shown, how many seconds it was viewed and whether the dish was added to the cart. To link events of one visit we use a random identifier in the browser tab's sessionStorage, which disappears when the tab is closed. The statistics contain no IP address, phone number or profile data. The IP address is used briefly only for abuse protection and is not stored with the statistics. In the Telegram app we verify the Telegram signature to confirm the source, but we do not store your profile data. Records are kept for 180 days and then deleted automatically.

Cookies

Which cookies the website uses and how to change your decision is described on a separate page: Cookie Policy

Changes to this policy

We may update this policy. In the event of material changes, we will ask for your consent to advertising cookies again. Current version: 2026-09-md195-v1.