Skip to main content
Mandarin Hostel in Haapsalu — a comfortable stay above the restaurant. See the rooms

Privacy Policy

Last updated: 16.07.2026

1. Overview

Mandarin Restoran ("we") respects the privacy of visitors to mandarin.ee. This privacy policy explains what personal data we collect, how we use it and what your rights are. The data controller is Mandarin Restoran, which operates restaurants at Endla 23a, Tallinn and Lihula mnt 2, Haapsalu.

We process personal data in accordance with the General Data Protection Regulation (GDPR), the Estonian Personal Data Protection Act and the Estonian Electronic Communications Act.

2. What data we collect

We collect as little data as possible:

  • Analytics cookies – only with your consent. They help us understand how the website is used.
  • Server logs – the web server automatically records technical data (IP address, browser type, request time) to keep the site secure and running.

We do not collect contact forms, payment or order data on this website. Table bookings and food orders are made by phone or through external partners (Wolt, Bolt), who have their own privacy terms.

3. Cookies

Cookies are small text files stored on your device by the website. We use two types:

  • Necessary cookies – remember your cookie choice. These cannot be switched off.
  • Analytics cookies (Google Analytics) – _ga and _ga_*. Loaded only after you click "Accept". Stored for up to 2 years.

Until you consent, no analytics or marketing cookies are loaded. You can change your choice later by deleting the cookies stored in your browser – we will then ask for consent again.

4. Google Analytics

We use Google Analytics 4, provided by Google Ireland Limited (Ireland), to analyse visits. Data may be transferred to Google LLC servers in the United States under the EU–US Data Privacy Framework. Google Analytics does not store your full IP address and does not allow us to identify you personally. Read Google's terms: policies.google.com/privacy.

5. Legal basis

  • Consent (GDPR Art 6(1)(a)) – analytics cookies.
  • Legitimate interest (GDPR Art 6(1)(f)) – server logs to keep the website secure.

6. Data retention

Analytics cookies remain on your device for up to 2 years or until you delete them. Server logs are kept for up to 12 months. Aggregated Google Analytics statistics are retained for the period set by Google.

7. Your rights

You have the right to:

  • access your data and receive a copy;
  • request correction of inaccurate data;
  • request erasure ("right to be forgotten");
  • restrict or object to processing;
  • withdraw your consent at any time;
  • lodge a complaint with the Estonian Data Protection Inspectorate (www.aki.ee).

8. Contact

For data protection questions or to exercise your rights, write to juhataja.tallinn@mandarin.ee or call +372 646 0019.

9. Changes

We may update this privacy policy from time to time. The current version, with the date of the last update, is always available on this page.