Privacy Policy

Last updated:

This English version is provided for convenience. In case of any difference, the Romanian version prevails.

On this page we explain, briefly and clearly, what personal data we process when you contact us, stay with us or organise an event at Pensiunea Cristina, for what purpose, to whom we may disclose it and what rights you have. We are subject to Regulation (EU) 2016/679 (“GDPR”) and to Romanian data protection law.

1. Who is the controller of your data

The controller of your data is SC Luc Antonio SRL (CUI 25739050, Trade Register no. J16/917/2009), with its registered office at Sat Preajba, Str. Stejarului nr. 22, Com. Malu Mare, jud. Dolj, 207365 (“we”, “the guesthouse”).

  • Phone: 0749 155 547
  • Email: pensiuneacristina2015@yahoo.com
  • We have not appointed a data protection officer (DPO). For any question about your data, you can write to us at the email address above.

2. What data we process, why and on what legal basis

We process only the data needed to run a small guesthouse. This website does not offer online bookings or payments.

  • Bookings, offers and communication (phone, WhatsApp, email): name, contact details, dates and number of people, your requests. Purpose: to reply to you, send you an offer and manage the booking. Legal basis: steps taken before entering into a contract or performance of a contract (Art. 6(1)(b) GDPR) and, for general enquiries, our legitimate interest in answering requests (Art. 6(1)(f) GDPR).
  • Accommodation and guest records: the data in the guest registration form (arrival/departure notification), to the extent required by law (for example name, identification data, citizenship, period of stay). Purpose: compliance with the legal obligations of a tourist accommodation establishment. Legal basis: legal obligation (Art. 6(1)(c) GDPR).
  • Events (weddings, christenings, parties): the contact person’s data and the details of the event. Purpose: the offer, and the organisation and running of the event. Legal basis: Art. 6(1)(b) GDPR.
  • Accounting and tax obligations: data in invoices, receipts and other supporting documents (name or company name, address, tax ID if you ask for an invoice in the name of a company, amounts, dates). Legal basis: legal obligation (Art. 6(1)(c) GDPR).
  • Complaints and defence of our rights: messages and documents related to a complaint or a dispute. Legal basis: legitimate interest (Art. 6(1)(f) GDPR) or legal obligation, as the case may be.

We usually receive the data directly from you. If you do not provide the data required by law for accommodation, we cannot accommodate you; for the rest, providing the data is necessary so that we can reply or honour the booking.

3. What happens on this website

  • The website does not use cookies of its own and has no analytics or advertising tools. Details on the Cookies and third-party resources page.
  • The contact form does not send your data to a server of ours. When you press the button, the WhatsApp app or your email program opens with a prepared message, which you send yourself. WhatsApp belongs to WhatsApp Ireland Ltd. / Meta and has its own privacy policy; email is handled by your email provider and by the guesthouse’s provider.
  • The Google Maps map loads only if you press “Show map”; at that moment your browser connects to Google.

4. To whom we may disclose your data

  • Persons who provide services to us and who process data on our behalf, for example the accountant or IT/email service providers, under confidentiality obligations.
  • Public authorities, when the law requires us to or when lawfully requested (for example tax, tourism or public order authorities).
  • The communication service providers that you choose yourself (WhatsApp/Meta, your email provider).

We do not sell your data. Some providers (for example WhatsApp/Meta or Google) may transfer data outside the European Economic Area; in that case the safeguards and policies of those providers apply, which we recommend you read.

5. How long we keep the data

We keep data only for as long as necessary for the purpose for which it was collected:

  • data from the guest registration form and guest records: for the period required by the applicable legislation;
  • accounting and tax documents: for the period required by the applicable legislation (accounting and tax records);
  • booking messages and offers: for as long as necessary for the booking and for possible complaints or legal obligations, after which we delete or archive them within the limits of the law;
  • data related to a dispute or complaint: until final resolution and for the applicable legal time limits.

6. Your rights

Under the GDPR (Art. 15–22), you have the right:

  • of access to the data we process (Art. 15);
  • to rectification of inaccurate or incomplete data (Art. 16);
  • to erasure of data, when the legal conditions are met (Art. 17);
  • to restriction of processing (Art. 18);
  • to data portability, where applicable (Art. 20);
  • to object to processing based on our legitimate interest (Art. 21);
  • not to be subject to a decision based solely on automated processing (Art. 22): we do not make such decisions;
  • to withdraw your consent at any time, where processing is based on consent, without affecting the lawfulness of the processing carried out before withdrawal (Art. 7(3)).

To exercise your rights, write to us at pensiuneacristina2015@yahoo.com or at our registered office address. We will reply within the period set by the GDPR (in principle, within one month of receiving the request) and we may ask you to confirm your identity.

7. Complaint to the supervisory authority

If you consider that we have infringed your rights, you can lodge a complaint with ANSPDCP — the Romanian National Supervisory Authority for Personal Data Processing: B-dul G-ral Gheorghe Magheru nr. 28–30, Sector 1, București; website: www.dataprotection.ro; email: anspdcp@dataprotection.ro. We encourage you to contact us first, so that we can clarify the situation.

8. Minors

We do not target children directly and we do not offer services for minors on the website. For minors staying with us, the data is provided by their parents or legal representatives.

9. Data security

We take reasonable technical and organisational measures to protect data against unauthorised access, loss or destruction, and we give access only to persons who need it for the purposes above.

10. Video surveillance cameras

If and to the extent that video surveillance cameras are installed inside or around the guesthouse, the filmed areas are marked with information signs, the images are used only for the security of persons and property and are kept only for as long as strictly necessary. For details, you can contact us.

11. Links to other websites

The website contains links to Facebook, TripAdvisor, WhatsApp, Google Maps and ANPC (the Romanian National Authority for Consumer Protection). Once you access them, the policies of those websites apply, over which we have no control.

12. Changes

We may update this policy, for example if the law or the way we work changes. The version in force is the one on this page, with the date of the last update shown above.