Privacy Policy

This page describes which personal data of guests and website visitors Restaurant Bomond Edinet processes, why and on what legal basis, who it is shared with, and how you can manage your own data. This policy is drawn up in accordance with Law No. 195/2024 of the Republic of Moldova on the protection of personal data.

Who processes your data

The personal data controller is Restaurant Bomond Edinet. Full details can be requested via the contacts below.

Phone: +37360010206

Address: or. Edinet str. Independentei 37a

What data we process and why

We only collect the data needed for a specific purpose. The legal basis for processing is stated for each purpose.

Delivery and pickup orders

Data: name, phone number, delivery address, order contents, comment

Legal basis: performance of a contract: placing, preparing and delivering the order

Table reservations

Data: name, phone number, visit date and time, number of guests, requests

Legal basis: pre-contractual relations and performance of a contract: booking at your request

Loyalty program

Data: name, phone number, date of birth (if you provided it), history of bonus accrual and redemption

Legal basis: performance of a contract: the loyalty program terms

Reviews and inquiries

Data: phone number, rating and review text

Legal basis: legitimate interest of the controller: responding to your inquiry and improving service quality

Job applications

Data: name, phone number, resume, and any details you provided yourself

Legal basis: pre-contractual relations: reviewing your application at your request

Marketing mailings

Data: phone number and your decision (consent or refusal)

Legal basis: your consent. It is not required to place an order or a reservation, and can be withdrawn at any time

Advertising cookies (Meta Pixel)

Data: cookie identifiers, pages viewed, order amount

Legal basis: your consent given in the cookie banner. You can change your decision at any time via the “Cookie settings” link

Website operation and security

Data: IP address, browser type, technical request logs

Legal basis: legitimate interest of the controller: protecting the website from abuse and failures

When you give or withdraw consent, we keep a record of the decision: the date, the policy version, and where it was given. This is needed to demonstrate the lawfulness of processing.

Who receives the data

Data is shared only with those who help provide the service, and only to the extent necessary. We currently use:

  • The website and online ordering platform (hosting and database) — processes data on the controller's behalf
  • Syrve (iiko) restaurant management system — orders and the loyalty program
  • Telegram — notifications to restaurant staff about new orders
  • Telegram — notifications to restaurant staff about reservations
  • Telegram — notifications to responsible staff about job applications
  • Google Calendar — backup copy of the reservation log
  • Meta Platforms — advertising cookies, only with your consent
  • SMS provider SMS.md — confirmation codes and notifications about orders and reservations

In addition, data may be shared with government authorities where directly required by law.

Transfer outside the Republic of Moldova

Some of the listed services may process data outside the Republic of Moldova. Such transfers are carried out only with the safeguards provided for by Law No. 195/2024: an adequacy decision or standard contractual clauses.

How long we keep data

Data is kept no longer than necessary for the purpose it was collected for, or as long as required by law (for example, accounting records). The consent record is kept for as long as the consent is valid, and after withdrawal, for as long as needed to demonstrate the lawfulness of processing.

Your rights

You may:

  • find out whether your data is being processed and obtain a copy of it
  • correct inaccurate data
  • request deletion of your data
  • restrict processing
  • receive your data in a machine-readable format
  • object to processing based on legitimate interest
  • withdraw your consent at any time — this does not affect the lawfulness of processing before the withdrawal

To exercise these rights, write to us using the contacts in the “Who processes your data” section. We will respond within 30 days.

If you believe your rights have been violated, you may file a complaint with the National Center for Personal Data Protection of the Republic of Moldova (datepersonale.md).

Cookies

Which cookies the website uses and how to change your decision is described on a separate page: Cookie Policy

Changes to this policy

We may update this policy. In the event of material changes, we will ask for your consent to advertising cookies again. Current version: 2026-09-md195-v1.