For restaurants Log in ROEN

Privacy (GDPR)

Last updated:

This is an English translation for convenience. In case of any difference, the Romanian version prevails.

Here we explain what personal data TopRestaurante.ro receives, why we use it, who we share it with and how you can delete it.

1. Data controller #

Web Base Soft SRL, CUI 52574286, str. Școlii 13, Vânători, Vrancea. Contact for personal data: [email protected].

2. What data we process and why #

  • Account: display name, email address, password (stored only encrypted) or the Google account identifier, if you sign in with Google. Purpose: creating and managing the account. Legal basis: performance of the contract.
  • Votes and reviews: the score, the text, the date and the restaurant. Your name appears publicly as “First name I.”. Purpose: the rankings. Legal basis: performance of the contract and legitimate interest.
  • IP address: we keep it next to votes and sign-in attempts, to stop abuse and multiple votes. Legal basis: legitimate interest.
  • Contact messages: name, email and the message. Purpose: replying to your request.
  • Claiming a profile: the contact details used for verification and, if you send it, the company registration document.
  • Payment for the Premium plan (restaurants only): payment is made on the NETOPIA Payments page. We receive only the payment result. Card details do not pass through our servers. If you choose the monthly subscription, NETOPIA automatically collects the following payments from the card used for the first payment, until you cancel from the dashboard or until the chosen number of payments is reached; we keep a payment token issued by NETOPIA (not the card number), together with the last digits of the card and its expiry date, until you cancel or delete your account. For the invoice we keep the company name, tax ID and address, and invoices are issued and stored through Oblio, in line with legal accounting obligations.
  • Usage statistics: we count visits per day, without cookies and without identifying people. If you accept the analytics and measurement cookies, we also use Google Analytics and Meta Pixel (see Cookie policy). Legal basis: your consent, which you can withdraw at any time.

3. Signing in with Google #

If you choose “Continue with Google”, we receive only the following from Google:

  • your email address and the fact that Google has confirmed it;
  • the name on your Google account;
  • the Google account identifier, so that we recognize you the next time you sign in.

We ask only for the basic permissions (openid, email and profile). We have no access to Gmail, Drive, contacts, calendar or any other data in your Google account, and we do not store your profile picture. We use this data only to create your account and sign you in. We do not sell it, we do not use it for ads and we do not share it with other companies, apart from the providers we need to run the service (section 4).

TopRestaurante.ro's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. You can withdraw access at any time from your Google account settings and you can ask us to delete your account with us (section 6).

4. Who we share data with #

  • Hosting: the server that runs the site and the database.
  • Sending emails: the service we use to send account confirmation and password reset messages.
  • NETOPIA Payments: the payment processor, only for restaurants that choose the Premium plan. NETOPIA receives the data needed for payment and processes the card details.
  • Oblio: the invoicing software used to issue invoices for the Premium plan. Oblio receives the company's billing details (name, tax ID, address) and the account email.
  • SMS (Twilio): only if you choose SMS verification when claiming a profile. Twilio receives the phone number we send the code to.
  • OpenStreetMap: the map loads images from OpenStreetMap, which receives the visitor's IP address.
  • Google: when you sign in with Google, as above. Information about restaurants (name, address, ratings) comes from Google Places and is not personal data of users. Google Analytics is loaded only if you accept the analytics cookies and receives the IP address and data about the pages visited.
  • Meta (Facebook and Instagram): Meta Pixel is loaded only if you accept the measurement cookies. Meta Platforms Ireland Limited receives the IP address, data about the browser and the pages visited, and uses them to show us the results of our ads, according to Meta's policy. You can withdraw your consent at any time from “Cookie settings”.

We do not sell personal data. If you accept the measurement cookies, Meta Pixel sends Meta data about your visit, so that we can measure our ads.

5. How long we keep data #

  • Account, votes, reviews and favorites: as long as the account exists. They are deleted along with the account.
  • Sign-in attempts (IP address and email): 2 days.
  • IP address from a vote: as long as the vote exists.
  • Log of emails sent (recipient and subject, no content): 90 days.
  • Contact messages: as long as needed to reply to you. We delete them on request.
  • Claim documents: we delete them 90 days after the request was approved or rejected, or earlier, on request.
  • Visit statistics: per day, with no personal data, for up to 13 months.

6. Your rights #

You have the right of access, rectification, erasure, restriction, portability and objection, as well as the right to lodge a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP). From My account › Settings you can download a copy of your data (JSON file) and delete your account. For any other request, use the contact page. We reply within 30 days.