OfficeBites logo OFFICEBITES
Order Catering

YOUR DATA PRIVACY

Privacy Policy

Last updated: 25 September 2026

Straight answers about what we collect when someone at your company requests catering, applies as a restaurant, or writes to us. We follow the GDPR and Romanian data protection rules.

What information do you actually take?

Depends on what you do on the site:

  • Catering request: name, email, phone, company name, CUI/CIF, billing and delivery addresses, date, headcount, menu choices, notes
  • Restaurant application: kitchen / business details, contact person, services you offer, whether you can invoice companies
  • Contact form: name, email, optional company, topic, message
  • Technical: basic browser/device info and, if you allow them, cookies (see Cookies)

Why do you need my CUI?

So the restaurant can invoice your company correctly. OfficeBites does not issue fiscal invoices and does not run e-Factura for you. We pass billing fields to the partner kitchen that accepts the order.

Do you process payments or card data?

No. Payment is agreed and settled between your company and the restaurant. We do not store card numbers and we do not run an online checkout.

Who else sees this data?

The restaurant partner that needs it to confirm, cook, deliver, and invoice. We may also use basic service providers (hosting, email delivery) under standard processing terms. We do not sell personal data.

On what legal basis?

Mostly to take steps toward a catering arrangement you request (contract / pre-contract), plus legitimate interests such as securing the site and answering support messages. Where the law asks for consent (some non-essential cookies), we rely on that separately.

How long do you keep it?

Catering requests and related contact records are typically kept up to 12 months for coordination and support, unless a longer period is needed for a dispute or legal requirement. We then delete or anonymise where possible. Fiscal invoices themselves are kept by the restaurant that issues them, not by us as your invoicing provider.

What rights do I have?

You can ask for access, correction, deletion, restriction, portability, or object to certain processing, and withdraw consent where consent was the basis. You can also complain to ANSPDCP (the Romanian supervisory authority).