Privacy Policy
Last updated: 31.07.2026
Introduction
This policy explains how GOGIYA Korean BBQ restaurant collects and processes personal data of guests who use this website. We follow Regulation (EU) 2016/679 (GDPR) and Law No. 133/2011 of the Republic of Moldova on the protection of personal data.
Data controller
The controller who decides why and how your data is processed:
- Name: GOGIYA Korean BBQ
- Address: Or.Chişinău, str.Mitropolit Gavriil Bănuiescu-Bodoni 45
- Email: info@gogiya.md
- Phone: 068991119
What data we collect
We only collect what is needed to accept and confirm your booking:
- Name — so we know who the table is booked for
- Phone number — to confirm the booking and contact you about changes
- Booking details: date, time, number of guests
- For the Teppanyaki Experience: the dishes each guest selects in advance
- Special requests you choose to send (e.g. allergies or an occasion)
- Technical data: IP address in hashed form (spam protection) and cookies described in the Cookie Policy
We do not ask for an email address, date of birth, or payment data on this website, and we do not collect special categories of data. Please do not include health information in the free-text field beyond what is necessary for your meal.
Purposes and legal bases
Each processing purpose has its own legal basis:
| Purpose | Data | Legal basis |
|---|---|---|
| Accepting and confirming a table booking | Name, phone, date, time, guests, requests | Steps taken at your request prior to a contract — GDPR Art. 6(1)(b) |
| Preparing the Teppanyaki Experience (the chef buys and prepares exactly the selected dishes) | Selected dishes per guest | Steps taken at your request prior to a contract — GDPR Art. 6(1)(b) |
| Protecting the booking forms from spam and abuse | Hashed IP address, request timestamps | Legitimate interest — GDPR Art. 6(1)(f) |
| Measuring the effectiveness of Google Ads campaigns | Cookies and online identifiers | Your consent — GDPR Art. 6(1)(a), withdrawable at any time |
Who receives the data
Booking details are delivered to restaurant staff and processed by the following providers:
- Telegram Messenger Inc. — delivery of booking notifications to the restaurant's internal chat
- The email provider that hosts our mailbox — duplicate booking notification by email
- Our hosting provider — operation of the website and its server logs
- Google Ireland Limited — advertising measurement, only if you consent to marketing cookies
We never sell your data and do not use it for unrelated marketing.
International transfers
Some providers (Telegram, Google) process data outside the Republic of Moldova and the European Economic Area. Such transfers rely on the safeguards those providers offer, including the European Commission's standard contractual clauses. If you do not wish your data to be transferred this way, you can book by phone instead.
How long we keep data
We keep data only as long as it is needed:
- Booking requests in the staff chat and mailbox — up to 12 months after the visit, then deleted
- Technical server logs — up to 30 days; they contain no name or phone number
- Your cookie choice — up to 180 days, after which we ask again
Your rights
In relation to your personal data you have the right to:
- Access — obtain confirmation and a copy of the data we hold
- Rectification — correct inaccurate data
- Erasure — ask us to delete your data
- Restriction — limit how we use the data
- Objection — object to processing based on legitimate interest
- Portability — receive your data in a machine-readable format
- Withdraw consent — at any time, without affecting past lawful processing
To exercise any of these rights write to us at the address below. We reply within 30 days. Withdrawing consent is as easy as giving it:
Complaints
If you believe your data is processed unlawfully, you may lodge a complaint with a supervisory authority:
- Republic of Moldova: National Center for Personal Data Protection (datepersonale.md)
- European Union: the data protection authority of your country of residence
Cookies
The website uses necessary cookies and, only with your consent, Google Ads cookies. Details, retention periods and how to change your choice are in the Cookie Policy.
Data security
The website runs over an encrypted HTTPS connection. Access to booking notifications is limited to restaurant staff who need it for their work. Server logs are kept to a minimum and contain no guest names or phone numbers.
Automated decision-making
We do not make decisions about you by automated means and do not build profiles. Every booking is confirmed by a person.
Children
The website is not directed at children. A booking should be made by an adult; we do not knowingly collect data of children under 16 without parental involvement.
Changes to this policy
If this policy changes we update the date at the top of the page. Where changes affect consent-based processing, we ask for your choice again.
Contact us
For any question about this policy or about your data:
Email: info@gogiya.md
Phone: 068991119