Privacy policy
Last updated: 7 June 2026
This policy explains how [COMPANY NAME] SRL (the “Controller”) processes personal data, in accordance with Regulation (EU) 2016/679 (GDPR) and Romanian Law no. 190/2018.
1. Data controller
[COMPANY NAME] SRL, VAT [CUI], registered office [ADDRESS]. For any request regarding personal data: [DPO/CONTACT EMAIL].
2. What data we process
Identification and contact data (first name, last name, email, phone), location address, property and service details, booking history and, where applicable, payment data processed by third-party providers.
For website visitors (whether or not they have an account): if you accept the "Analytics" category in the cookie banner, we collect the pages visited, device/browser type, language, timezone, traffic source and an approximate location (country/city). Full details in the Cookie Policy, section 2.1.
3. Purposes and legal basis
Providing services and managing bookings — performance of a contract (Art. 6(1)(b) GDPR).
Transactional communications (confirmations, reminders) — performance of a contract.
Legal obligations (invoicing, accounting) — legal obligation (Art. 6(1)(c)).
Traffic analytics and website visit monitoring (analytics cookies, including our own activity tracking) — based on consent (Art. 6(1)(a)), withdrawable anytime from "Cookie settings" or the "Don't track my visits" link (footer).
4. Recipients
Data may be shared with processors (hosting, email, payment processors) that process data solely on our instructions and with appropriate safeguards.
To resolve visitors' approximate location (country/city), the anonymized IP address is sent to the external service ip-api.com — see the Cookie Policy, section 2.1.
5. Retention period
We keep data as long as necessary for the purposes above and in accordance with legal terms (e.g. financial documents per accounting law). After expiry, data is deleted or anonymized.
6. Your rights
You have the right of access, rectification, erasure, restriction, portability and objection, as well as the right to withdraw consent at any time. You can exercise them by writing to [DPO/CONTACT EMAIL].
You have the right to lodge a complaint with the Romanian Data Protection Authority (ANSPDCP, dataprotection.ro).
7. Security
We apply appropriate technical and organizational measures (encryption of sensitive data, access control, access logging) to protect data against unauthorized access.
8. Cookies
The use of cookies and similar technologies is detailed in the Cookie Policy. Non-essential cookies are enabled only with your consent.