Privacy policy

01 // Controller

S.R.L. “HOOKAH SMOKE”, IDNO 1015600026706. Registered address: mun. Chișinău, sec. Rîșcani, str. Alexandru cel Bun 97, ap. 27. This policy applies to imperator.kamoragroup.md.

02 // Data we collect

• Bookings: name, phone, date, time, guest count and comment.
• Job applications: vacancy, name, phone, optional email, experience and message.
• Reviews: rating, impressions, selected factors, response preference and contact.
• Technical data: IP, browser, device, URL, date and time, error and security information.
• On your device: language, performance mode, preloader state and privacy choice.

03 // Purposes and legal bases

• Bookings and messages — steps requested before a contract, performance of arrangements and contacting you.
• Job applications — your voluntary request and our legitimate recruitment interest.
• Reviews — handling feedback and improving service under legitimate interest; contact is used to respond.
• Security, logs and rate limiting — legitimate interest in protecting the site and users.
• Google Maps — your consent only. Refusing does not limit the rest of the site.
• We do not make solely automated decisions with legal or similarly significant effects.

04 // Cookies and external content

The optional external service does not load before your choice.

05 // Recipients and transfers

• Requests are available to authorized staff and stored in the secured IMPERATOR database.
• Copies are sent through Telegram for the team’s operational work.
• Hetzner and Cloudflare provide hosting, delivery and protection. Cloudflare Web Analytics uses no cookies and, according to its description, does not create individual profiles.
• When you allow the map, Google receives technical data. Providers may process data outside Moldova; required contractual and legal safeguards are used.
• We do not sell personal data.

06 // Retention

• Bookings and job applications — up to 12 months; reviews — up to 24 months.
• Telegram business correspondence — no more than 12 months after handling, except for disputes or legal obligations.
• Web server logs rotate daily and are kept for up to 15 days.
• Local preferences remain until deleted; the external content choice is kept for 180 days.

07 // Your rights

• You may request access, correction, erasure, restriction, object to processing and request portability where applicable.
• Consent can be withdrawn at any time through “Privacy”, as easily as it was given.
• We respond without undue delay and generally within one month. We may request proof of identity.

08 // Security and changes

We use HTTPS, access control, backups, rate limiting and updates. No method removes all risk. The version date changes when this policy is materially updated.