Privacy Policy

La-Vali – la-vali.com
Last updated: November 2, 2026

1. Who we are

This Privacy Policy describes how the personal data of individuals visiting the La-Vali website and using the services available on it is collected, used, stored and protected.

The data controller is:

PICDOMINIC BESTSERV SRL
Tax Identification Number (CUI): 37163406
Trade Register Number: J2017000104346
Registered office: Strada Dunării nr. 220, bl. BM1, sc. A, et. 10, ap. 40, Alexandria, Teleorman County, Romania.

For questions regarding the processing of personal data or to exercise your rights under the GDPR, you can contact us at:

Email: servicii366@gmail.com

Hereinafter, the company will be referred to as "La-Vali", "we" or "the controller".

2. What personal data we collect

The data we collect depends on the services used and the role associated with the user's account.

Depending on the circumstances, we may process:

• First and last name;

• Email address;

• Telephone number;

• Home address or delivery address;

• Information required for account authentication and administration;

• Information regarding requested or assigned user roles;

• Information relating to orders placed;

• Data concerning communications and notifications associated with orders.

For online orders, we do not repeatedly request the same information. The required details are retrieved from the authenticated user's profile.

We do not currently request users' dates of birth for birthday discounts. If this functionality is introduced, we will inform users by updating this Privacy Policy.

3. Account creation and user verification

Creating an account and logging in are required to use the online ordering services.

The process of activating the Client role involves:

1. Creating a user account;

2. Verifying the email address;

3. Requesting the Client role;

4. Checking the address to establish eligibility within the delivery area;

5. Telephone confirmation by restaurant staff;

6. Approval or rejection of the request by an administrator.

These checks are intended to confirm that the user is eligible to benefit from the restaurant's services in the areas served and that the contact details provided are usable.

These checks do not constitute an official identity verification procedure.

The approval decision is made by an administrator and is not based on automated decision-making.

4. Processing data for orders and deliveries

Personal data is used for:

• Receiving and managing orders;

• Identifying the customer;

• Preparing the ordered products;

• Arranging and communicating delivery details;

• Contacting the customer regarding an order;

• Confirming delivery completion;

• Handling potential issues or complaints;

• Internal record-keeping and reporting on restaurant activities.

Orders are associated with the user's account through an internal user identifier.

Currently, orders are paid for in cash upon delivery, directly to the courier. La-Vali does not request or store bank card details for these orders.

Delivery is free of charge for customers approved within the restaurant's service area.

The restaurant's opening hours and order availability are managed by the restaurant. Online orders are unavailable outside operating hours.

5. Email and Telegram notifications

For the proper operation of the restaurant, we use email and Telegram notifications.

5.1. Private operational notifications

La-Vali uses a private Telegram group exclusively for restaurant administration and operations.

Depending on the event, notifications may contain:

• The order number or identifier;

• The customer's name;

• Telephone number;

• Delivery address;

• Ordered products;

• Order amount;

• Information regarding delivery status;

• Information about new accounts and role requests.

The group is private and accessible only to authorized individuals who need this information to manage the restaurant.

Telegram is an external platform used to transmit these notifications. The data transmitted may also be processed by Telegram in accordance with its own terms and privacy policies.

5.2. Customer notifications

Customers may receive email communications relating to their orders and, when necessary, may also be contacted by telephone.

These communications are necessary for the fulfilment and administration of orders and do not constitute newsletter subscriptions.

6. Email newsletter

Users may voluntarily subscribe to the La-Vali newsletter.

Subscribers may receive messages about:

• New articles published on the blog;

• Publication of the daily menu;

• News and information about restaurant activities.

Newsletter subscriptions are separate from account creation and order placement.

Contact details are not used for newsletter communications without the subscriber's voluntary choice.

Subscribers may stop receiving these communications at any time using the unsubscribe mechanism available in the messages received or by contacting us at the email address provided in this policy.

Withdrawing newsletter consent does not affect the ability to use the restaurant's other services.

7. Public Telegram channel

La-Vali also provides a public Telegram channel through which information about the restaurant, menu and news is shared.

Subscription to this channel is voluntary and independent of the email newsletter.

The channel is public. Information published there may be viewed by anyone accessing the channel.

We do not publish personal information relating to individual orders or other customers in this channel.

Channel subscriptions are managed through the Telegram platform.

8. Order history and account deletion

Users may request the deletion of their accounts.

Following such a request, the account enters a 30-day grace period. During this period, the user may return and reactivate the account, in accordance with the platform's functionality.

After the grace period expires, the profile is deleted from the users database table, and the personal data associated with the profile is removed from that record.

Historical order records may be retained in the database for restaurant activity records and reporting, as well as to fulfil applicable legal obligations.

These records may retain an internal technical identifier of the former user, without an associated active profile in the users table. This does not automatically mean that all remaining information is anonymous; its retention and use must comply with applicable data protection obligations.

Documents and information that must be retained under legal obligations will not be deleted before the mandatory retention periods expire.

9. Cookies and similar technologies

The La-Vali website uses a privacy and cookie preference centre through which visitors can configure the categories of cookies they accept.

The website interface currently displays the following categories:

9.1. Strictly necessary cookies

These are required for the platform to function, including:

• Navigation;

• Secure authentication;

• Remembering language preferences;

• Session protection and functionality.

These cookies are marked as permanently active because they are necessary for the operation of the services.

9.2. Analytics and statistics cookies

This category is intended to measure website traffic and performance.

The preference interface indicates the use of anonymized statistics concerning visitor numbers and traffic sources.

9.3. Marketing and preference cookies

This category is intended to remember display preferences and personalize content or recommendations.

Visitors can configure the available preferences through the privacy and cookie preference centre.

Optional cookies must be managed according to the choices expressed by visitors and the requirements of applicable legislation.

To change your preferences, use the privacy and cookie preference centre available on the website.

10. Who may receive your data

Personal data is accessible only to individuals and services that need it to perform their respective duties.

Depending on the circumstances, recipients may include:

• Authorized restaurant staff;

• Couriers involved in deliveries;

• Hosting and technical infrastructure providers;

• Email service providers;

• Telegram, for the transmission of operational notifications;

• Public authorities and competent institutions, when disclosure is required by law.

We do not sell users' personal data or make it available to third parties for commercial purposes.

11. International data transfers

The use of external platforms, such as Telegram, may involve the processing of data outside the European Economic Area.

Where such transfers occur, the mechanisms and safeguards provided by data protection legislation apply, depending on the service used and the provider's terms.

12. How long we retain data

Personal data is retained only for as long as necessary for the purposes for which it was collected or for as long as there is a legal obligation to retain it.

Retention periods depend on the category of data:

• Profile data: until account deletion, subject to the 30-day grace period and any applicable legal obligations;

• Order data: according to operational requirements and applicable legal obligations;

• Newsletter data: until consent is withdrawn or the user unsubscribes, while retaining any information necessary to record the unsubscribe request;

• Operational notifications: according to administrative needs and applicable retention rules;

• Technical and security data: for as long as necessary to protect and maintain the platform.

13. How we protect your data

La-Vali implements technical and organizational measures designed to protect personal data against unauthorized access, loss, alteration or improper disclosure.

Access to customer information is restricted according to the responsibilities of authorized users and the roles available on the platform.

No electronic transmission or storage method can guarantee absolute security. However, we make reasonable efforts to protect the information we process.

14. Your data protection rights

Under Regulation (EU) 2016/679 – the General Data Protection Regulation (GDPR), individuals whose personal data is processed have the following rights, subject to the conditions established by law:

• Right of access: you may request confirmation that your data is being processed and obtain a copy of it;

• Right to rectification: you may request the correction of inaccurate data;

• Right to erasure: you may request the deletion of your data in situations provided for by law;

• Right to restriction of processing: you may request restrictions on the use of your data in certain circumstances;

• Right to data portability: you may request the data you have provided in a structured format, where legally applicable;

• Right to object: you may object to certain processing activities based on legitimate interests;

• Right to withdraw consent: you may withdraw consent for processing activities based on your consent;

• Right to lodge a complaint: you may contact the competent supervisory authority.

To exercise these rights, you can send us a request at:

servicii366@gmail.com

We will respond to requests within the period provided by the GDPR, generally within one month of receiving the request. In circumstances permitted by law, this period may be extended.

Certain requests may be refused or limited where legal grounds require us to continue processing the data, such as mandatory record-retention obligations.

15. Supervisory authority

If you believe that your data protection rights have been violated, you have the right to lodge a complaint with:

The National Supervisory Authority for Personal Data Processing (ANSPDCP)

Website: https://www.dataprotection.ro/
Email: anspdcp@dataprotection.ro
Address: B-dul G-ral Gheorghe Magheru nr. 28–30, Sector 1, Bucharest, Romania.

You have the right to contact the competent supervisory authority directly. Exercising this right is not conditional upon first submitting a request to La-Vali.

16. Features that may be introduced in the future

The La-Vali platform may receive new features, including online reservations, loyalty programmes or other services.

As of the date of the latest update to this policy, online reservations are not available to customers, and tables cannot be selected to make a reservation.

If new services are introduced that involve processing additional personal data or processing data for different purposes, this policy will be updated before the new processing activities are implemented, where required.

17. Changes to this Privacy Policy

La-Vali reserves the right to update this policy when legislative, technical or operational changes occur.

The updated version will be published on https://la-vali.com/.

We recommend checking this page periodically to stay informed about how personal data is processed.

PICDOMINIC BESTSERV SRL
Operator of the La-Vali website
https://la-vali.com/