Privacy policy
Last updated: 13 October 2026
Here we explain, briefly and without needless jargon, what data we process when you use the Nova Lounge & Hookah Bar website, why, who we share it with and what you can do about it.
Who is responsible for your data
The data controller is Hotel Lafayette SRL, tax ID (CUI) RO25132392, registered with the Trade Register under number J40/2049/2009, with its registered office at Strada Olari 10, Sector 2, București, which operates the Nova Lounge & Hookah Bar venue, Bd. Ferdinand I, nr. 1, Sector 2, București.
- Email: novabarconcept@gmail.com
- Phone: +40 733 324 426
What data we process and why
Reservations via ialoc.ro
Reservations are made through a widget provided by the ialoc.ro platform, a third party. The widget loads only when you press a reservation button, not when the page opens. From that moment, the data you enter (for example your name, phone number, date, time and number of guests) is processed by ialoc, which acts as an independent controller for this data and may set its own cookies. The ialoc privacy policy applies to that processing.
The venue receives the reservation through ialoc and uses the data only to honour it and to contact you about it. Legal basis: steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR). Reservations made through ialoc are kept by ialoc, in accordance with their policy. We use the reservation data only for as long as is necessary to honour the reservation.
Contact via WhatsApp
If you tap the WhatsApp link, the conversation takes place in the WhatsApp app, and the data (your phone number, your messages) is processed by Meta/WhatsApp under their terms. We receive only the message you send us and use it to reply to you. We keep messages received on WhatsApp or by email for as long as is necessary to answer your request and organise your visit, and then we delete them. Legal basis: responding to your request (Art. 6(1)(b) or (f) GDPR).
Marketing, only with your consent
If you press “Accept” in the cookie banner, we load Meta Pixel (marketing). It sends Meta information about your visit to the website and sets the _fbp cookie and, if you reached the website through a link carrying an fbclid identifier, the _fbc cookie.
Meta Pixel may also set cookies on the facebook.com domain, which the website cannot delete. You manage these from your Facebook settings or your browser.
Legal basis: your consent (Art. 6(1)(a) GDPR and Art. 4 of Law no. 506/2004). If you press “Essential only”, Meta Pixel is not loaded. The retention period for data collected through Meta Pixel is the one configured in Meta's settings. You will find details on each cookie in the Cookie policy.
Data stored locally in your browser
The website stores two values in your browser that it needs in order to work. They contain no data that identifies you and are not sent to us:
- nova-age-v1: the fact that you confirmed you are over 18, or opened the menu directly in the lounge through the QR code on the table (age is checked at the door), kept for 30 days.
- nova-consent-v1: your cookie choice (Accept or Essential only), kept for 180 days.
For the age confirmation, the legal basis is our legitimate interest in complying with the access restriction for persons under 18 (Art. 6(1)(f) GDPR). For the cookie choice, the legal basis is respecting your choice.
Who we share data with
We do not sell data. Depending on what you use, it may reach providers acting as independent controllers or as processors: ialoc.ro (reservations) and Meta/WhatsApp (messages and, with your consent, Meta Pixel). Some of these providers may transfer data outside the European Economic Area, on the basis of the safeguards they provide, in accordance with their policies.
Your rights
Under the GDPR, you have the right of access to your data, the right to rectification, to erasure, to restriction of processing, to data portability and to object. You can withdraw your consent to marketing at any time, using the “Cookie settings” button in the page footer. Withdrawal takes effect the next time the page loads and does not affect processing carried out before the withdrawal.
For the data we process, write to us at novabarconcept@gmail.com. For data processed by ialoc or Meta, use the channels they provide.
Complaints to the authority
If you believe we have infringed your rights, you may lodge a complaint with the Romanian Data Protection Authority, the National Supervisory Authority for Personal Data Processing (ANSPDCP), at www.dataprotection.ro. We kindly ask you to write to us first, so we can try to resolve the matter.
Changes to this policy
If we change the way we process data, we will update this page and the date at the top.