Privacy policy
Effective from 13.11.2026
Who we are
The data controller is Osteria Moderna OÜ (registry code 14463494, Pärnu mnt 106-46, 11312 Tallinn). The restaurant is at Tina 21, Tallinn. Questions: write to [email protected] or call +372 5387 8848.
What we collect
When you book a table: name, phone, e-mail, date and time, number of guests and your requests (e.g. allergies or an occasion). Allergy information is used only to prepare your food safely.
Technical data: an encrypted short code of your IP address (to prevent abuse and spam bookings) and where you booked from (e.g. Instagram, Google).
Why and on what basis
To handle your booking and send the confirmation and changes — performance of a contract (GDPR Art. 6(1)(b)).
To send news and offers by e-mail — only with your separate consent (Art. 6(1)(a)). Consent is optional and does not affect your booking. You can withdraw it at any time via the link in every e-mail, on your booking page or by writing to us.
To keep the service secure and for visit statistics — legitimate interest (Art. 6(1)(f)).
Who sees the data
Only restaurant staff. We use processors: Cloudflare (web hosting and database) and Resend (sending e-mails). Both may process data outside the EU, under safeguards approved by the European Commission (EU–US Data Privacy Framework or standard contractual clauses). The page also embeds a Google Maps map and Google Fonts, which receive your IP address. We never sell your data.
How long we keep it
Booking data is kept for up to 24 months after your visit, then deleted or anonymised.
Newsletter consent is kept until you withdraw it. After that we keep your e-mail on a suppression list so that you are not e-mailed again.
Your rights
You have the right to access, correct or delete your data, to restrict or object to processing, to data portability and to withdraw consent at any time. Write to [email protected].
You can also complain to the Estonian Data Protection Inspectorate (www.aki.ee).
Cookies
We use no tracking or advertising cookies for visitors. Only the source you came from is kept in your browser's session storage (until the session ends). A necessary cookie is used for staff login.