Privacy policy

We consider ensuring the right to the protection of personal data as a fundamental commitment of our company, therefore we will dedicate all necessary resources and efforts to process your data in full compliance with Regulation (EU) 2016/679 (“General Data Protection Regulation”). or “GDPR”), as well as with any other legislation applicable in Romania. As one of the key principles of this legal framework is transparency, we have prepared this document to inform you of how we collect, use, transfer and protect your personal data when you interact with us in connection with your products and services. including through our website or telephone.

 

We reserve the right to periodically update and modify this Privacy Policy to reflect any changes to the way we process your personal data or any changes to legal requirements. In the event of any such changes, we will display the modified version of the Privacy Policy on our website, for which reason please check the contents of this Privacy Policy periodically.

 

The current version entered into force on 25.03.2022.

1. Who are we?

 

The data operator is PFA Ovesea George Emilian, organized and operating in accordance with Romanian legislation, having its registered office in Brasov, 52 Cloșca Street, with CUI 23921080, represented by OVESEA GEORGE EMILIAN – Administrator who can be contacted at Mobile 0744 321 093, Phone 0268 410 921, E-mail contact@riunione.ro .

The Privacy Policy explains PFA Ovesea George Emilian’s practices regarding the application of the provisions of the GDPR, as well as the rights you enjoy regarding the way your information is collected, processed and stored, through the site and offline interaction with our employees.

If you have any questions about this privacy policy or what is derived from it, please contact your data controller.

2. What personal data do we collect?

Through the contact form on the site we collect:

  • Name and surname
  • Email Address
  • Phone
  • your message

We collect through e-mails / phone calls received for a reservation

  • Name and surname
  • Email Address
  • Phone
  • your message
  • Bank information for refund

We collect on our site

  • Information about your behavior while visiting our website, in order to personalize your online experience and provide you with offers tailored to your profile, in accordance with the Cookies Policy .

 

 

At the accommodation we collect and process national identification data, included by the General Regulation on data protection in special categories of personal data according to the legal provisions, on the basis of interest

 

We also collect or process data about minors such as name, age.

 

3. What is the purpose of the collection and what are the legal grounds?

 

Data obtained through the contact form

Legal basis for processing : our legitimate interests (Article 6 (1) (f) of the General Data Protection Regulation).

Legitimate interest : To answer questions and messages we receive and to keep track of correspondence.

 

Data obtained by e-mail / phone call for an order

Legal basis for processing : required for performance of a contract (Article 6 (1) (b) of the General Data Protection Regulation).

The reason why it is necessary to perform a contract : if your message. aims at providing services / delivering products or taking action at your request. We will process your information before we provide you with our services (for example, the provision of information about such services). to do this).

Data collected on the site

Legal basis for processing: our legitimate interests (Article 6 (1) (f) of the General Data Protection Regulation).

Legitimate interest: Improving our site for users of our site and knowing the preferences of site users so that our site can better meet their needs and desires.

 

4. Where do we store and how long do we keep your data?

 

The data obtained through the contact form and by e-mail are kept for 1 year

The data obtained through the contact form is hosted by romarg who are in the EU and are not transferred outside the EU.

Data obtained by telephone call for a reservation – is kept for 1 year if the request for offer does not materialize and in accordance with the tax rules if an invoice is issued

This data is stored in a spreadsheet located on a computer belonging to our company, secured with the password, to which only employees have access.

The data collected on the automatic site – is kept according to the Cookies Policy, by categories –

5. Disclosure of personal data to third parties

 

Disclosure of User Data to Third Parties: If you agree to a firm reservation and enter into a Contract, your data is provided to third parties in order to fulfill the purpose of the contract. The personal data entered in the fiscal documents are processed by third parties (accounting firm) in order to fulfill the legal fiscal obligations.

User data is not sold to third parties.

If you would like further information about the identity of your service providers, please contact us directly via our contact form or by email and we will provide you with such information if you have a legitimate reason to request it).

For continuous compliance with laws, regulations and other legal requirements

We will use and process your information. to comply with the legal obligations to which we are subject. For example, we may need to disclose your information. based on a court order or subpoena, if we receive one.

Legal basis for processing : compliance with a legal obligation (Article 6 (1) (c) of the General Data Protection Regulation.

Legal obligation: legal obligations to disclose information that is part of Romanian law or if it has been integrated into Romania’s legal framework (for example in the form of an international agreement that Romania has signed).

6. What rights do you have?

 

Targeted rights Description
access You can ask us:

  • to confirm if we process your personal data;
  • provide you with a copy of this information;
  • provide you with other information about your personal data, such as the data we hold, what we use it for, to whom we disclose it, whether we transfer it abroad and how we protect it, how long we keep it, what rights you have , how to file a complaint, where we obtained your data, to the extent that the information has not already been provided to you by this information.
correction You may ask us to correct or complete your inaccurate or incomplete personal data.

We may try to verify the accuracy of the data before correcting it.
Deleting data You can ask us to delete your personal data, but only if:

  • they are no longer necessary for the purposes for which they were collected; or
  • you have withdrawn your consent (if the data processing is based on consent); or
  • exercise a legal right to oppose; or
  • they have been processed illegally; or
  • we have a legal obligation in this regard.

We have no obligation to comply with your request. to delete your data personal processing of your data personal information is required:

  • for compliance with a legal obligation; or
  • for the establishment, exercise or defense of a right in court.

There are certain other circumstances in which we are not required to comply with your request. data deletion, although these are the two most likely circumstances in which we could deny you this request.
Restricting data processing You can ask us to restrict the processing of personal data, but only if:

  • their accuracy is challenged (see rectification section) to allow us to verify their accuracy; or
  • processing is illegal, but you do not want the data to be deleted. or
  • they are no longer needed for the purposes for which they were collected, but you need them to establish, exercise or defend a right in court; or
  • You have exercised your right to object, and verification that our rights prevail is ongoing.

We may continue to use your data. as a result of a request for a restriction, if:

  • we have your consent; or
  • to establish, exercise or ensure the defense of a right in court; or
  • to protect our rights or those of another individual or legal entity.
Data portability You can ask us to provide you with personal data in a structured, commonly used, automatically readable format, or you may request that it be “ported” directly to another data controller, but in any case only if:

  • processing is based on your consent. or on the conclusion or execution of a contract with you; and
  • processing is done by automatic means.
opposition You may object at any time, for reasons related to your particular situation, to the processing of your data. personal in accordance with our legitimate interest, if you believe that your rights and freedoms are at stake. fundamental prevails over this interest.

You can also object to the processing of your data at any time. for the purpose of direct marketing (including profiling), without giving any reason, in which case we will cease this processing as soon as possible.
Automatic decision making You may request that you not be subject to a decision based solely on automatic processing, but only when that decision:

  • produces legal effects on you; or
  • it affects you in a similar way and to a significant extent.

This right shall not apply if the decision reached following the automatic decision-making:

  • we are required to enter into or enter into a contract with you;
  • is authorized by law and there are adequate safeguards for your rights and freedoms; or
  • is based on your consent. explicit.
Complaints You have the right to file a complaint with the supervisory authority regarding the processing of your data. personal. In Romania, the contact details of the data protection supervisory authority are as follows:

National Authority for the Supervision of Personal Data Processing

B-dul G-ral. Gheorghe Magheru no. 28-30, Sector 1, postal code 010336, Bucharest, Romania

Phone: +40.318.059.211 or +40.318.059.212;

E-mail: anspdcp@dataprotection.ro

Without prejudice to your right to contact the supervisory authority at any time, please contact us in advance, and we promise that we will make every effort to resolve any issue amicably.

Response time. We intend to respond to any valid requests within a maximum of 30 days, unless this is particularly complicated or if you have made multiple requests, in which case we will respond within a maximum of 45 days. We may ask if you can tell us exactly what you want to receive or what you are concerned about. This will help us to act faster and shorten the response time to your request.

 

CHANGES TO OUR PRIVACY POLICY

We regularly update and change our privacy policy.

Minor changes to our privacy policy

If we make minor changes to our privacy policy, we will update the Privacy Policy with a new effective date mentioned at the beginning. Processing your information will be governed by the practices set out in the new version of the Privacy Policy from its effective date.

 

Major changes to our privacy policy or the purposes for which we process your information.

If we make major changes to our privacy policy or intend to use your data. for a new purpose or for a purpose other than the purposes for which we originally collected it, we will notify you by email (if possible) or by posting an ad on our website.

We will provide you with information about the change in question and the purpose and any other relevant information before we use your information. for the new purpose.

Whenever necessary, we will obtain your consent. before using your information for a purpose other than the purposes for which we originally collected it.