Privacy policy

The data controller is KNITWEAR IMPEX SRL, the company that runs the Nihao restaurant:

• Name: KNITWEAR IMPEX SRL
• Registered office: Str. Brăilei nr. 183, bl. S1, sc. 1, ap. 1, 800579 Galați, jud. Galați
• Tax identification code: RO12904857
• Trade Register number: J2000000245175
• The Nihao restaurant (place of business): Strada Brăilei 39, 800306 Galați
• Phone: 0236 430 055

The website has no forms, accounts, newsletter, traffic statistics or advertising. We do not sell or rent your data. We mainly receive personal data when you call us for an order or a table booking.

• Delivery orders: name, phone, delivery address and what you ordered. We use them to prepare and deliver the order. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
• Table bookings: name, phone, date, time and number of people. We use them to get your table ready. Legal basis: steps towards and performance of a contract (Art. 6(1)(b) GDPR).
• Tax and accounting documents: the data shown on them. Legal basis: legal obligation (Art. 6(1)(c) GDPR).
• Complaints and messages: the data you give us, so we can answer you. Legal basis: our legitimate interest in resolving requests (Art. 6(1)(f) GDPR) or, where applicable, a legal obligation.
• Visiting the website: IP address, browser type, page visited and time, in the server's technical logs. We use them to run and secure the website. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).
• Photos of the restaurant: the gallery may show guests or team members. If you appear in a photo and want it removed, tell us and we will remove it.

The map loads from OpenFreeMap when you reach it on the page. For this, your browser sends your IP address to that provider. The map does not use cookies.

Links to Facebook and Google Maps send nothing until you click them. After you click, those services' policies apply.

Data only goes to those who need it: the staff who take and deliver the order, the website's hosting provider, the accountant and, where the law requires it, the authorities. We do not intentionally transfer personal data outside the European Economic Area.

• Order and booking data: only as long as needed to fulfil them and resolve any complaints.
• Tax and accounting documents: for the period set by accounting law.
• The server's technical logs: a short period, set by the hosting provider.

You have the right to access your data, to rectification, to erasure, to restriction of processing, to data portability, to object, and to withdraw consent where processing is based on it.

To exercise your rights, contact us by phone on 0236 430 055, or in writing at the restaurant's address (Strada Brăilei 39, 800306 Galați). We reply within one month at most.

You can also complain to the Romanian data protection authority (ANSPDCP): B-dul G-ral Gheorghe Magheru nr. 28-30, sector 1, București, email anspdcp@dataprotection.ro, www.dataprotection.ro.

We take technical and organisational measures to protect data. The website uses an encrypted connection (HTTPS). Our services are not aimed specifically at children and we do not knowingly collect data about them.

We may update this policy. The version in force is the one on this page, with the date above.