Privacy Policy
Last updated: 31 July 2026
1. Data controller
The controller of the personal data collected through this website is [Company legal name], tax ID (CUI) [RO00000000], registered at [Registered address] ("the Company").
2. What data we collect
When you fill in the reservation form, we collect: name, email, phone, preferred date, number of guests, the requested service (tour, stay, or both) and your message. This data is sent through our website's server to a Google Sheet, so we can contact you about your booking; the server does not permanently store your data, it only forwards it.
3. Purpose of processing
We use this data solely to respond to your reservation request and to organize the requested tour.
4. Legal basis
Processing is based on your consent (filling in and submitting the form) and, once a booking is confirmed, on the performance of a service contract.
5. Retention period
We keep correspondence related to your booking for as long as necessary to organize the tour and to meet any legal obligations (e.g. accounting), typically no more than [X] years.
6. Third parties and external services
We store reservation form data in a Google Sheet so we can manage incoming requests - in this context Google acts as a data processor. That processing happens through our server and sets no cookie in your browser.
7. Cookies and similar technologies
Strictly necessary storage (remembering your language choice and your cookie decision) works without consent, because without it we could not deliver what you asked for. Beyond that, exactly one thing asks for consent: audience measurement (Google Analytics), which sets the _ga and _ga_* cookies with a 2-year lifetime and measures which pages are viewed and where visitors arrive from. It loads only if you agreed in the banner shown on your first visit; you can withdraw at any time, in the same number of clicks, through the "Cookie settings" button in the footer. On withdrawal, measurement stops and any Google Analytics cookies already set are deleted. The Google Maps frame on the contact and stay pages sets no cookies and reads nothing stored in your browser, so it is not subject to consent; loading it does disclose your IP address to Google, which we rely on legitimate interest to do so that we can show you where to find us (Google's own privacy policy: policies.google.com/privacy).
8. Your rights
Under Regulation (EU) 2016/679 (GDPR) you have the right to access, rectify, erase, restrict and object to the processing of your data, and the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP), www.dataprotection.ro.
9. Contact
For any question about your data, write to us at lovasturakkorond@gmail.com.