Privacy Policy

Paradisul Transilvaniei Resort SRL respects your privacy and processes personal data in accordance with Regulation (EU) 2016/679 (“GDPR”) and applicable Romanian law. This policy explains what data we collect, why, and what rights you have.

1.Data we collect

• Reservation data: name, contact details, ID/passport data required by law at check-in, stay dates, room and guest details.
• Payment data: processed through secure payment providers; we do not store full card numbers.
• Communication data: messages sent via phone, email, WhatsApp, or contact forms.
• Technical data: IP address, device and browser information, and usage data collected through cookies (see our cookie banner).

2.Purposes & legal basis

• to make and manage your reservation and provide our services — performance of a contract;
• to comply with legal obligations (guest registration, accounting, fiscal) — legal obligation;
• to answer enquiries and provide support — legitimate interest;
• for analytics and marketing — only with your consent.

3.Recipients

Data may be shared with service providers acting on our behalf (booking and channel-management platform, payment processors, IT and hosting/CDN providers) and with public authorities where required by law. We do not sell your personal data.

4.International transfers

Some providers (for example content-delivery or analytics services) may process data outside the EEA. In such cases we rely on appropriate safeguards such as European Commission adequacy decisions or Standard Contractual Clauses.

5.Retention

We keep personal data only as long as necessary for the purposes above and for the periods required by law (e.g. accounting and fiscal records for the legally mandated term). Data no longer needed is deleted or anonymised.

6.Your rights

You have the right to access, rectify, erase, restrict, or object to processing, the right to data portability, and the right to withdraw consent at any time. To exercise these rights, contact us at [email protected]. You may also lodge a complaint with the Romanian Data Protection Authority (ANSPDCP, dataprotection.ro).

7.Cookies

This website uses cookies. Strictly necessary cookies are always active; analytics and marketing cookies are loaded only after you accept them via the cookie banner. You can change your choice at any time from the banner’s preferences.

8.Security

We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or misuse.

9.Changes

We may update this policy. The current version is the one published on this page.