Privacy policy

Introduction

Starting on May 25, 2018, Regulation No. 679/2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC, is applicable in all Member States of the European Union.

Scope

Respecting the right to the protection of personal data, as well as the right to privacy, is one of the fundamental missions of GANESHA CAFFE, thus the provisions of the GDPR apply to the website https://ganeshacaffe.ro/, with the aim of informing its users about the processing of personal data by the company GANESHA BRAND S.R.L, with its registered office in Bucharest, Sector 2, Blvd. Barbu Vacarescu no. 71, registered with the Trade Register under number J40/1791/2013, with CIF RO31225453 („Ganesha”).

Thus, we take all necessary steps to process your personal data in accordance with the principles established in the data protection legislation applicable in Romania, including Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as „GDPR”).

Personal data means any information relating to an identified or identifiable natural person („person data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to his or her physical, physiological, genetic, mental, economic, cultural or social identity.

If you have any questions or requests regarding the processing of personal data, you can contact us by sending us an e-mail to:

How we collect personal data

Directly: We usually process personal data that you have voluntarily provided to us:

• when you contact us to request information regarding our activity, to the e-mail address: ganeshacaffegarden@gmail.com;
• when you contact us to make a reservation by phone/to obtain information regarding certain events organized by our company, at the phone number +40764263742;

Indirectly: We may process personal data that you have not voluntarily provided to us:

• when you visit our website https://ganeshacaffe.ro/;
• when you interact in any way with our website https://ganeshacaffe.ro/;

What categories of personal data we process

If you are a customer or potential customer, we collect personal data from most interactions with you, as well as in other aspects of our business. Among the types of personal information that we collect directly include:

1. your first and last name, email address and telephone number;
2. information you provide regarding your marketing preferences or during your participation in certain contests, raffles or promotional offers;
3. personal data you provide in order to enroll in a program dedicated to our members and/or in a loyalty program;
4. reviews and opinions regarding our services offered through our social media pages;
5. photos taken in our restaurants on the occasion of certain events;
6. any other types of information you choose to provide us

Also, surveillance cameras and other security measures on our property may capture or record images of guests in public places (such as the entrance to the restaurant, hallways, etc.), as well as your location data (through images captured by surveillance cameras and through the use of loyalty cards).

You can choose at any time what personal data you wish to provide to us. However, if you choose not to provide certain personal data, if the basis of our request is compliance with a contractual obligation or obligations necessary for the conclusion of a contract, there is a possibility that we will not be able to provide you with certain services, for example: if you do not provide us with your name, surname, e-mail address/telephone number if you wish to make a reservation, we will not be able to make the reservation.

If you are the owner of a loyalty card, Ganesha also processes the data obtained through this program. The data processed are the following: name, surname, telephone number, email address, location data (when using the card in Ganesha Caffe locations). Regarding the processing of this personal data, we inform you that they are processed by GANESHA BRAND S.R.L. together with GANESHA VICTORIEI S.R.L (with registered office in Bucharest, Sector 2, Calea Victoriei no. 16-18-20, Ground floor, Sector 3, registered with the Trade Register under number J40/14613/2018, with CIF RO39986140), they operate as associated operators, considering that the benefits offered by the loyalty card are valid in all locations under the brand “Ganesha Caffe”.

If you are a representative or contact person of a legal entity client, we collect your name, surname, position as well as any other data provided by you or the company you represent during negotiations and/or in the contracts we conclude.

If you are a potential employee and send us your CV to the e-mail address displayed on the site, we collect the information from the CV you sent as well as any other information sent with the CV.

In addition to the personal data mentioned above, our company involuntarily collects the following data: IP addresses, time of visit to the site/access to the site, operating system and other technical parameters.

Also, when you interact with our website through various social media networks, such as when you like the page on Facebook or when you follow or share our content on Facebook, Twitter, LinkedIn, Instagram or other similar, we may receive personal data from those social networks, including your profile data and the username associated with your account. To the extent that you contact us through the messaging service of the social network, our company processes data regarding your identity as well as your telephone number/email address, username and any other information provided to our company through the social network by you.

We may obtain information regarding your general use of the internet using cookies. A cookie is a small file stored on your computer's hard drive. The use of cookies helps us to improve our website and provide a better and more personalized service, which allows us to:

• estimate audience size and usage patterns;
• store information about your preferences, which allows us to personalize our website according to your individual interests;
• recognize you when you return to our website.

You can refuse to accept cookies by activating the appropriate setting on your browser. If you select this setting, you may not be able to access certain parts of the website.

For more details, please access the Cookies Policy.

We will not collect or process sensitive personal data about you (for example, information about racial or ethnic origin, political opinions, religious or philosophical beliefs, health, sex life or sexual orientation).

What are the legitimate grounds for processing the data?

We may base our processing activities on the following grounds:

• On a contractual basis in accordance with the provisions of art. 6 para. (1) letter b) of the GDPR Regulation: We may process personal data for the performance of the contract concluded between the parties/in order to conclude a contract between the parties;
• On the basis of legitimate interest in accordance with the provisions of 6 para. (1) letter f) of the GDPR Regulation: We may process personal data based on legitimate interest, when, according to our assessment, we consider that the processing is correct, reasonable and proportionate to the purpose of the processing.
• On the basis of a legal obligation in accordance with the provisions of 6 para. (1) letter c) of the GDPR Regulation: We may process personal data in order to fulfill our legal obligations as a professional.

Why do we need personal data?

We process personal data transparently, for the following purposes:

• processing any requests received through the site, including for the provision of services;
• to communicate our offers to you and to promote our services and events, in compliance with the legislation on relations with individuals;
• to evaluate and improve the site, the services offered as well as our relationship with site users;
• cafe reservations or in the case of requests for offers sent by you for certain events organized or that may be organized by our company. We process your personal data (i) to reserve a place for you at the venue and (ii) to respond to requests for offers submitted by you;
• Feedback: we process your personal data to ensure that you are satisfied with your experience at Ganesha Caffe;
• Marketing: we process your personal data for marketing purposes, such as directing advertising activities through social media networks with reference to new products and services or other offers that we believe may be of interest to you. We base our processing on the legitimate interest of promoting our services by sending you offers that we consider to be of interest to you (see Section“Your Rights”). In situations where we base our marketing activities on our legitimate interest to promote and develop our commercial activity, in any situation where we use information about you, we take care to take all necessary measures so that your fundamental rights and freedoms are not affected, as required by applicable law.

If necessary, in accordance with applicable law, we will obtain your consent before processing your personal data for direct marketing purposes. In this case, we inform you that you can withdraw your consent for processing for marketing purposes at any time, in which case you will no longer receive any direct marketing communication from us.

Also, when organizing certain events at our location, we may take photos, and some of these could be distributed online to show others what our events are like.

To the extent that photographs will be taken within our premises, we take care that the photographs do not highlight certain persons (who do not wish to be photographed) and we will do our best to inform you that photographs will be taken (for any objections to your being photographed within our premises, please consult the “Right to object”” in the “Your rights”” Section).

The processing of your data for these purposes is in most cases necessary for the conclusion and performance of a contract between Ganesha and you.

However, you can ask us at any time to stop the processing your personal data for marketing purposes  directly, and we will respond to your request as soon as possible, without affecting your interests.

If you are a potential employee and proceed to send your CV via the e-mail address displayed on the site, we collect and process the data provided in order to evaluate your application.

Do we transmit personal data to third parties?

We may communicate personal data collected through the site to third parties in order to improve the quality of the services we provide or to benefit from the help of specialists in fulfilling obligations that are incumbent on us according to specific legislation in a certain field or according to ongoing contracts.

Your data may be transmitted to partners who provide us with marketing, accounting, site maintenance, payment service providers as well as hosting service providers, etc.

These third parties have, in turn, obligations similar to ours in terms of regarding the protection of personal data, they are either personal data controllers or authorized persons who process data on behalf of Ganesha.

We constantly ensure that our partners provide sufficient guarantees for the implementation of appropriate technical and organizational measures, so that the processing of your personal data meets all legal requirements.

The personal data indicated above may also be made available or transmitted to third parties in the following situations: (i) public authorities, auditors or institutions with competence in carrying out inspections and controls on our activity, which require us to provide information, by virtue of legal obligations; (ii) to comply with a legal requirement or to protect our rights and assets.

Do we transfer personal data outside the European Union?

To facilitate our global operations and in accordance with applicable law, we may transfer or, where appropriate, allow our partners to access your personal data from several countries, including the United States, as set out in the Cookies Policy.

Each transfer is subject to specific and appropriate rules to ensure the protection of personal data.

Processing of data of children under 18

All personal data processing activities refer, in principle, to persons over 18 years of age.

To the extent that our company receives information relating to minors under 16 years of age, we are committed to protecting the confidentiality of the data obtained. If you are under 16 years of age, you must obtain the consent or authorization of your parents or guardian for any provision of personal data.  

Your rights

As a data subject, we respect the following rights:

• Right of access: you may request from us (i) confirmation as to whether or not personal data is being processed and, if so, access to and information about that data, as well as (ii) a copy of the personal data we hold ( 15 of the GDPR);
• the right to request that we rectify any inaccurate or outdated personal data;
• the right to request that personal data be deleted when we no longer need them;
• if the processing is based on your consent, a contract or automated decision-making, the right to request that we provide the personal data obtained directly from you and, where possible, transmit those data directly to another controller (right to portability data);
• the right to withdraw your consent to the processing, when the processing is based on consent, without affecting the lawfulness of the processing activities carried out up to that moment;
• in the event of a dispute regarding the correctness of the processing of personal data, the right to restrict the processing;
• if the processing is based on legitimate interests, the right to object to the processing of personal data (where applicable);
• the right to file a complaint with the supervisory authority: the National Authority for the Supervision of Personal Data Processing, at the address B-dul G-ral. Gheorghe Magheru, no. 28-30, sector 1, postal code 010336, Bucharest, Romania or by e-mail at anspdcp@dataprotection.ro.

The above rights can be exercised at any time. To exercise these rights, we encourage you to send us a written, dated and signed request or in electronic format to the following address: ganeshacaffegarden@gmail.com

Security of personal data

We have adopted technical security procedures in order to protect personal data against loss, unauthorized use, destruction or alteration. We ensure that access to personal data is limited and authorized only to persons who have the right to use it. These persons are obliged to ensure the confidentiality of the data.

For how long will we keep personal data

We will store your personal data only for the period of time necessary to achieve the processing purposes set out above, while complying with the legal requirements in force.

We estimate that the processing activities detailed above will require the storage of personal data for the following periods:

Purpose	Duration
Data collected voluntarily	3 years from the date of collection, unless there is a legal obligation that provides otherwise.
Image data (photographs)	minimum 5 years from the date of collection, following which after the aforementioned period, a reassessment of this data will be carried out, and to the extent that they are only relevant in terms of promoting commercial activity, they will be deleted.
Data collected involuntarily through website	3 years from the date of collection

Once the processing period indicated above expires and we no longer have legal or legitimate grounds to process your personal data, they will be deleted in accordance with the operator's internal procedures.

Review of the Privacy Policy

We will review this Policy periodically, depending on the changes that occur in the personal data processing activity and we will publish the updated version of the document.