This policy explains how Symphony Urban Living ("we") handles your personal data when you visit this website or book a table. We follow the EU General Data Protection Regulation (GDPR, Regulation (EU) 2016/679) and Romanian Law no. 190/2018.
Who is responsible for your data
The data controller is Symphony Urban Living SRL, registration no. J00/0000/2026, VAT RO00000000, Str. Moților nr. 16, Sector 3, București, Romania. For any privacy question, write to privacy@symphony-urban-living.example.
What we collect and why
Table reservations. Your name, phone number, email, date and time, party size, seating preference and — only if you choose to give them — the occasion and notes (such as dietary requirements or allergies).
- Purpose: to manage your reservation, contact you about it (confirmation, changes, cancellation) and prepare your visit.
- Legal basis: taking steps at your request before entering into a contract (Art. 6(1)(b) GDPR). Allergy or dietary information can reveal health data; we process it only because you give it to us voluntarily and with your explicit consent (Art. 9(2)(a) GDPR), so we can serve you safely.
- Consent record: we store the time you accepted this policy and its version, to demonstrate compliance.
Security logs. To prevent abuse of the booking form we keep a one-way (hashed) version of your IP address for up to 24 hours. We cannot turn it back into your IP address. Legal basis: our legitimate interest in keeping the service secure (Art. 6(1)(f)).
We do not use advertising or analytics trackers, and we never sell your data or use it for marketing without asking first.
How long we keep it
Reservation details are kept for up to 24 months after your visit so we can recognise returning guests and handle any questions, then deleted or anonymised. Notes about allergies are deleted earlier on request. Data we must keep for accounting or legal reasons is kept for the period required by law.
Who we share it with
Only with service providers that help us run the website, bound by data processing agreements:
- website hosting (Netlify, Inc.);
- database hosting (e.g. Neon Inc. / Supabase Inc., EU region);
- transactional email delivery (e.g. Resend / our email provider).
Some providers are based in the United States. Transfers are protected by the EU–US Data Privacy Framework or the European Commission's Standard Contractual Clauses.
Your rights
You have the right to:
- access the personal data we hold about you;
- have it corrected or deleted;
- restrict or object to its processing;
- receive it in a portable format;
- withdraw your consent at any time (this doesn't affect processing that already happened).
To exercise any right, email privacy@symphony-urban-living.example. We reply within one month. You can also complain to the Romanian data protection authority, ANSPDCP (dataprotection.ro).
Cookies
We only use a strictly necessary cookie for the staff login area, and Google Maps only loads if you choose to show it. Details in our cookie notice.
Changes
If we change this policy in a meaningful way we will update the date above and, for future bookings, ask for your consent again.