Privacy policy
Updated 24 October 2026
1. Who processes your data
DUMAN ORIENTAL BUSINESS SRL, tax identification number 45905620, registered with the Trade Register under no. J40/6292/2022, with its registered office in Bucharest, District 3, 13 Decebal Boulevard, ground floor, section 3, building S15, operates Duman Oriental Cuisine Decebal and dumanorientalcuisine.ro.
Contact: office@dumanorientalcuisine.ro · 0738 170 063. Restaurant: 13 Decebal Boulevard, Bucharest. Open daily, 11:00–00:00.
2. Data we receive
Our contact form collects your name, email address, telephone number, subject and message. Event enquiries also collect your company, if provided, the event type and date, estimated guest numbers and the preferences you share. Technical data needed for operation and security may include your IP address, browser, device and access logs.
Only provide information relevant to your enquiry. Do not include other guests’ data or medical information in the message field. Please discuss allergies directly with the restaurant team before ordering.
3. Purposes and legal bases
- Responding to bookings, preparing proposals and organising events: steps taken at your request before entering into a contract and performance of that contract, under Article 6(1)(b) GDPR.
- General enquiries, complaints and website security: our legitimate interest in responding and protecting our services, under Article 6(1)(f), provided your rights do not override that interest.
- Documents and requests subject to a legal obligation: Article 6(1)(c).
- Optional analytics or marketing cookies: consent under Article 6(1)(a), managed through the preferences panel.
The checkbox beside the form confirms that you have read this notice. It does not subscribe you to a newsletter or give consent to advertising. Required information is necessary for us to respond to your enquiry.
4. Who may receive the data
Access is limited to authorised restaurant staff and providers involved in hosting, email, maintenance and handling enquiries, to the extent needed to deliver those services. We may disclose data to authorities where required by law.
Bookings made through the ialoc widget are also subject to the platform provider’s privacy information. When you choose WhatsApp, Google Maps, social networks or a delivery platform, data sent to those services is processed under their respective policies. Google tools used for analytics or marketing are also subject to the Google privacy policy.
5. Transfers outside the European Economic Area
Some third-party platforms may process data outside the EEA. Such transfers must have an applicable legal mechanism, such as an adequacy decision or standard contractual clauses. You can request information about recipients and safeguards applying to your data using our contact address.
6. How long we retain data
For correspondence and enquiries handled through the website, we retain the general maximum period of 2 years stated in the previous notice, except where documents are subject to a different statutory period or data is needed to resolve a dispute. Data should not be kept longer than necessary for its purpose. Cookie lifetimes depend on their category and provider; see our Cookie policy.
7. Your rights
Under the conditions of the GDPR, you have rights to information, access, rectification, erasure, restriction, portability and objection. You can withdraw consent at any time without affecting the lawfulness of processing before withdrawal. We do not use the forms for automated decisions producing legal effects concerning you.
Send requests to office@dumanorientalcuisine.ro. We normally respond within one month; any extension permitted by law will be explained. You can lodge a complaint with ANSPDCP and apply to the competent court.
8. Updates
This notice concerns the Decebal website and restaurant. Updates will be published here together with the revision date.