Last update on 25.08.2023
We appreciate your interest in our Restaurant. The confidentiality and protection of your personal data is one of the main concerns of SC METALTIM SA, with headquarters at Divizia 9 Cavaleriei str. 68, Jud. Timiș, Romania, as data operator (hereinafter referred to as Restaurant 23).
It is important to us that you are fully informed about the personal data we collect when you use our online offers and services and that you are familiar with how we use them.
Please check this section regularly as the policy may undergo changes or updates.
By continuing to browse this website, filling in the data from the existing forms on it or sending us any kind of personal data, by any means, you give your express and unequivocal consent to all the provisions of this document.
“Site” – this website (including the sub-sites, text, images, video files, software, products, services, tools and information contained or presented on the website, hereinafter collectively referred to as the “Site”) , managed by METALTIM S.A
„Operator” – METALTIM S.A
“Visitor” – people who access and browse the Site, without using the services offered
“User/Client” – people who visit the Site, but who also use the contact forms, sending information/questions/requirements to the site operator
“Partners” – commercial companies that operate in collaboration with the operator
“Content” – any text, graphics, images, sounds, software, audio, video, information or other materials presented on the Site and subject to intellectual property rights laws.
The personal data provided with your consent are and will be collected and processed by us exclusively for the purposes that we will present below.
The categories of personal data we collect are:
You can choose at any time what personal data you want to provide us. However, failure to provide certain personal information, if the basis of our request is compliance with a legal obligation, contractual obligations or obligations necessary to conclude a contract, determines our inability to process your reservation. For example, if you refuse to give us your name, identification data, length of stay, phone number, e-mail address, we will not be able to process your reservation.
The collected data can be processed for purposes of legitimate interest to create statistics that allow us to develop new products, make certain adjustments, make better business decisions or meet the expectations of customers or potential customers to the highest possible standards.
Also, the surveillance cameras and other security measures located on our property can capture or record images of guests in public places (such as entrances, halls, etc.), as well as your location data (through the images captured by the surveillance cameras ).
Simply accessing our website will not lead to the collection of your personal data unless you voluntarily enter certain data (for example online reservations).
If you are a customer of the Website, the operator will process your personal data, such as name and surname, telephone, e-mail address, billing address, delivery address, data related to how you use the Website , for example your behavior/preferences/habits within the site, as well as any other categories of data that you provide directly in the context of creating the user account, in the context of placing an order through the site or in any other manner resulting from the use of the Site.
If you use your Facebook or Google account to create a user account on the Site, the operator will process the following public profile data displayed by the respective applications: username, email address.
If you choose to create your user account only before completing the order of a product available on the Site, your email address will be requested and an account will be created automatically. If you do not complete the order, the e-mail address and other data provided will not be stored by the operator, and the created account will be deleted automatically.
If you are a visitor to the Site, the operator will process your personal data that you provide directly in the context of using the Site, such as the data that you provide in the contact / questions / complaints section, to the extent in which you contact us in this way.
We process your personal data regarding feedback/reviews to ensure that you had a pleasant experience in our establishment. The basis is our legitimate interest to constantly improve the services we offer and to offer services that are as suitable and compliant as possible with the standards of our clients.
Other communications, by e-mail, post, phone or SMS, will be made for a specific reason such as: to respond to your requests, if you have not completed an online reservation or a request for an offer, to inform you about the way in which they complaints and/or incidents that occurred during your stay have been resolved. Our basis is our legitimate interest in providing services at the highest standards by resolving any requests/complaints and to assure you of our full availability.
In order to constantly ensure the qualitative evolution of our services, we take care to analyze every complaint/suggestion from you, so we draw up statistical reports to identify the problems, the degree of repetition and to find the best solutions to remedy them. We rely on our legitimate interest to provide services that meet your standards.
In order to provide you with high-quality services, we may collect information about you from our business partners and other third parties, as detailed below:
We assure you that your data collected from third parties will be processed under the same conditions as if they were collected directly from you. Also, we will only collect what is necessary to fulfill our purposes. When we contact you for the first time, we will first of all inform you of the source from which we obtained your personal data.
Your data are stored on servers in Romania and will only be used in Romania and on the territory of the European Union. If the processing of personal data includes the transfer outside the European Union (EU), the transfer will be based on standard contractual clauses approved in the EU, thus ensuring an adequate level of protection of personal data, as required by applicable laws on data protection.
In order to fulfill the processing purposes, SC METALTIM SA may disclose your data to partners, to third parties or entities that support the company in carrying out its activity through the Site (for example courier companies, accounting or audit service providers, IT service providers) , or to the central/local public authorities, in the following exemplary cases listed:
Your personal data is kept for the entire period of achieving the purposes detailed in this policy, if a longer storage period is not required or permitted by applicable law (for example, surveillance camera recordings will not be kept for more than 20 days) .
We constantly review the need to keep your personal data, and to the extent that the processing is no longer necessary and there is no obligation imposed by law to keep the data, we will destroy your personal information as soon as possible and in a way that does not they can still be recovered or reconstituted.
If personal information is printed on paper, it will be destroyed in a secure way, and if it is saved on electronic media, it will be deleted by technical means to ensure that the information cannot be recovered or reconstructed later.
According to the applicable legal provisions, you benefit fromthe right of access, the right to rectification, the right to delete data, the right to restrict processing, the right to data portability, the right to opposition and the automated individual decision-making process.
To exercise your rights, please contact the data protection officer of the company directly at: firstname.lastname@example.org in writing, at the operator’s headquarters or by filing a complaint with the ANSPDCP.
Special or consent-based data processing
When the processing is based on Article 6(1)(a)”the data subject has given his consent to the processing of his personal data for one or more specific purposes” or on Article 9 paragraph (2) letter (a) ”the data subject has given explicit consent to the processing of this personal data for one or more specific purposes, unless Union law or national law provides that the prohibition provided for in paragraph (1) cannot be lifted by the consent of the person CONCERNED” of the GDPR, you have the right to withdraw your consent at any time, without affecting the legality of the processing carried out on the basis of the consent before its withdrawal. You can therefore change or remove consent at any time, and we will act immediately accordingly, unless there is a legal reason or legitimate interest not to do so.
For any additional questions regarding how personal data is processed and to exercise your rights mentioned above, please contact the email address:email@example.com firstname.lastname@example.org.
Information note regarding the processing of personal data by means of video surveillance
Dear Madam / Dear Sir,
METALTIM SA (hereinafter referred to as “METALTIM”), a Romanian legal entity, with its registered office in the municipality of Timișoara, str. Divizia 9 Cavalerie no. 68, Timiș County, registered in the Trade Register under no. J35/227/1991, unique registration code RO 1802770, fiscal attribute “RO,”
In accordance with the provisions of Regulation no. 679/2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and on the repeal of Directive 95/46/EC (“RGPD”), we bring to your attention this Information Note (named in hereinafter “Disclosure”), to provide you with an overview of our practices regarding the collection, recording, organization, structuring, storage, adaptation or modification, retrieval, consultation, use, disclosure by transmission, dissemination or making available provision in any other way, the alignment or combination, restriction, deletion or destruction of personal data processed by means of video surveillance systems (“CCTV”) within the premises of Hotel Atlas and Restaurant 23.
Purpose of personal data processing
Following your presence within one of the METALTIM locations and considering the fact that our premises are permanently monitored, both by security personnel and by video monitoring systems, your personal data (for example, your image and identification data , such as car registration number) are processed in order to ensure the security and integrity of the locations where we carry out our activity.
Also, your personal data is processed in order to comply with legal requirements regarding security and public order.
The processing of your personal data for these purposes takes place:
The processing of your personal data takes place when you enter the building or enter the viewing area of the cameras installed inside the building. The location of the cameras has been carefully revised to ensure the limitation as much as possible of the monitoring of areas that are not of interest for the intended purpose. Areas where there is a high level of expectations regarding private life, such as toilets and other similar locations, are not monitored.
Moreover, as a result of your status as a METALTIM SA customer, your personal data (for example, name and surname, home address, e-mail address, telephone number) are processed in order to provide the services requested by you, and compliance by our company with the rules, legal regulations, codes of conduct or applicable guidelines or in order to apply the law and cooperate with the competent authorities (including, but not limited to, fiscal and judicial authorities).
As a rule, METALTIM SA obtains this personal data directly from you.
We emphasize that the Company’s video system does not aim to capture (for example, through selective focus or orientation) or process images (for example, creating profiles) that reveal special categories of personal data.
Your personal data is disclosed to other third parties
In order to facilitate the carrying out of the activities related to the processing purposes detailed above, we communicate this data to our contractual partners (for example, security service providers), our auditors or consultants, to public authorities and institutions (for example those competent in the matter of ensuring order and public and fiscal tranquility).
Not we will transfer your personal data outside the European Economic Area.
The personal data processed for the purpose mentioned herein will be kept only as long as necessary and proportional to the purpose for which it is processed. Thus, the images captured through the video monitoring system are stored for a period of 20 days from the date of collection, with the exception of situations expressly regulated by law or thoroughly justified cases.
At the end of the storage period, the data are deleted through the automatic procedure in the order in which they were recorded. In the event of a security incident, as well as in thoroughly justified cases, the retention period of the relevant stored data may exceed the term established depending on the time required for the additional investigation of the security incident, these cases being documented in detail.
Security of personal data
The Company makes all reasonable efforts to protect your personal data in our possession or under our control by establishing reasonable security measures to prevent unauthorized access, collection, use, disclosure, copying, modification or deletion, as well as other similar risks.
Your rights regarding personal data
Unless otherwise provided by law, you have the following rights:
With the exception of the right to file a complaint with the ANSPDCP, according to the above, these rights can be exercised by sending a written request: