Privacy Policy

Sahste (hereinafter "we", "our" or "the Company"), an authentic Italian bistro located in Salicea (Ciurila commune, Cluj County), respects the privacy of our website visitors and customers. This Privacy Policy explains how we collect, use, store and protect your personal information in accordance with the General Data Protection Regulation (GDPR) and applicable Romanian legislation.

The data controller is: • Company name: SC SAHSTE SRL • Headquarters address: Nr. 88R, Sat Sălicea, Comuna Ciurila, jud. Cluj, 407236, România • Tax ID (CUI): 34910701 • Trade Registry No.: J12/2494/2015 • GDPR contact email: rezervari@sahste.ro

We collect the following categories of personal data: **Automatically collected data:** • Language preferences (saved in browser localStorage) • Anonymous technical data for website operation **Data you voluntarily provide:** • First and last name (when booking or contacting us) • Email address (when booking) • Phone number (when booking or contacting us via WhatsApp) • Reservation details (date, time, party size, dietary preferences) • Content of messages sent **We do not collect:** • Location data • Tracking or marketing cookies • Data for profiling or advertising

We process your personal data for the following purposes: • **Table/event reservations**: Processing reservation requests and confirmations • **Website functionality**: Saving language preferences for a better experience • **Communication**: Responding to your questions and requests • **Legal obligations**: Compliance with applicable legal requirements

We process your data based on the following legal grounds: • **Consent** (Art. 6(1)(a) GDPR): For saving preferences in browser • **Legitimate interest** (Art. 6(1)(f) GDPR): To respond to communications initiated by you • **Contract performance** (Art. 6(1)(b) GDPR): For processing reservations • **Legal obligation** (Art. 6(1)(c) GDPR): For compliance with applicable laws

We keep your personal data only as long as necessary: • **Language preferences**: Until you delete browser data or revoke consent • **Correspondence**: Maximum 2 years from last communication • **Reservation data**: According to legal archiving requirements (up to 5 years)

Under GDPR, you have the following rights: • **Right of access**: Request a copy of the personal data we hold about you • **Right to rectification**: Request correction of inaccurate data • **Right to erasure** ("right to be forgotten"): Request deletion of data • **Right to restriction of processing**: Request limitation of how we use your data • **Right to data portability**: Request transfer of data to another organization • **Right to object**: Object to data processing • **Right to withdraw consent**: Withdraw consent at any time To exercise these rights, contact us at: rezervari@sahste.ro

Our website uses only essential functional cookies: • **Language preferences**: We save your language choice (RO/EN/IT) in localStorage • **Cookie consent**: We save cookie acceptance to not show the banner repeatedly **We do not use:** • Tracking or analytics cookies • Advertising or marketing cookies • Third-party tracking pixels • Google Analytics or other analytics tools

We do not sell, rent or share your personal data with third parties for marketing purposes. Data may be shared only in the following situations: • **Service providers**: Vercel (hosting), Supabase (database), Brevo (transactional email) • **WhatsApp/Meta**: When you contact us via WhatsApp, communication is subject to their privacy policy • **Authorities**: When required by law All our service providers are obligated to protect data according to GDPR.

We implement appropriate technical and organizational measures: • Secure HTTPS connection for the entire website • Restricted access to data on a need-to-know basis • Regular security updates • Encrypted passwords (bcrypt) for administrative accounts

Our website is not intended for persons under 16 years of age. We do not knowingly collect personal data from minors. If you are a parent or guardian and believe your child has provided us with personal data, please contact us.

We reserve the right to update this Privacy Policy. Any significant changes will be communicated by: • Posting the new policy on the website • Updating the "Last updated" date

For any questions or requests regarding personal data: • **Email**: rezervari@sahste.ro • **Address**: Nr. 88R, Sat Sălicea, Comuna Ciurila, jud. Cluj, 407236, România If you believe your data protection rights have been violated, you have the right to file a complaint with: **Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)** • Website: www.dataprotection.ro • Email: anspdcp@dataprotection.ro • Phone: +40 318 059 211