What do you need to know about re-opening terraces and restaurants? GDPR for restaurants and bars.

Order No 966/1809/105/2020 of the Ministry of Health, the Ministry of Economy, Energy and Business Environment, and the National Sanitary Veterinary and Food Safety Authority laid down specific measures to be applied to terraces or open spaces outside catering establishments.

Thus, by the provisions of Art. 4.1 lit. l) of the Order:

“(l) the existence of a record of client bookings so that, in the event of a case of SARS-CoV-2 infection among clients of the establishment of, there are factual data on which the epidemiological investigation can be based;”

It requires companies carrying out this activity to keep a register of customer bookings.

What exactly does this mean?

Every bar, restaurant, and cafe falling under the rules of this article is obliged to keep records of all persons who will book or physically present themselves in
Establishment to consume the products sold. According to the provisions, reservations may be made on the spot and before arrival at the establishment.

The obligation for catering establishments to keep such a register implies certain aspects that need to be taken into account from a personal data protection point of view.

Specifically, these types of establishments have been required to establish specific rules for protecting personal data since 2018, but few have complied with the EU regulation. Most establishments still need to implement a procedure whereby customers’ personal data is legally collected and stored.

Therefore, food establishments such as bars, terraces, or restaurants are obliged to implement rules on GDPR rules to respect customers’ rights. Failure to do so will result in heavy fines from the National Supervisory Authority of
Processing of Personal Data.

For information on the Booking Register and the establishment of rules on the protection of personal data, you can contact us via the contact.

For more information on GDPR, go to the link!