Privacy policy

1. Data controller

The data controller is Oyabun, located at 33 Regina Elisabeta Boulevard, 050012 Bucharest, Romania. For privacy enquiries, please call us at 0790 866 000.

2. What we collect

We may collect your name, email address, phone number, reservation details (date, time, party size, notes) and the content of messages sent through our contact or reservation forms.

Our servers may automatically record basic technical information such as IP address, browser type, pages visited and access time, for security and operational purposes.

3. Purpose of processing

We use data to respond to requests, manage reservations, communicate with guests, improve the website experience and comply with applicable legal obligations.

4. Legal basis

We process data based on your request (reservations, contact), Oyabun’s legitimate interests (website security, operational communication) and, where applicable, legal obligations.

5. Retention

We keep data only as long as necessary for the purposes described or as required by law. Reservation requests and messages may be retained for a reasonable period to manage the guest relationship.

6. Sharing data

We do not sell personal data. We may share information with service providers who help us operate the website, email or reservation systems, under confidentiality obligations and only as needed.

7. Your rights

Under the GDPR, you have rights of access, rectification, erasure, restriction, objection and portability, and the right to lodge a complaint with your local data protection authority.

To exercise your rights, please contact us using the phone number listed on the website.

8. Security

We apply reasonable technical and organisational measures to protect data. However, no online system can guarantee absolute security.

9. Changes

We may update this policy from time to time. The current version will be published on this page with the date of the latest update.