Privacy policy
Please find below our Privacy Policy which defines how we collect, store and use your personal data when you access or interact with our websites www.pensiuneadracula.ro or www.campingdracula.ro and how we obtain or collect your data
This Privacy Policy is applicable as of 20 May 2018.
Contents
Summary
Details about our company
What information we collect when you visit our website
What information we collect when you contact us
What information we collect when you interact with our website
What information we collect when you place an order on our website
Using automated decision-making systems
How we collect information about you from third parties
Disclosure and additional uses of your data
Duration of your data storage
Securing your information
Transfer of your data outside the European Economic Area
Your rights over your personal data
Your right to object to data processing for certain purposes
Sensitive personal data
Changes to our privacy policy
Confidentiality of minors
Copyright
Summary
This section summarises how we obtain, store and use your data This summary is only intended to provide an overview of our privacy policy. This section is not a complete description and it is necessary to read the additional chapters present in this document for completeness.
Data operator: SC CRISTINA PROD COMIMPEX SRL - COMPLEX DRACULA
How we collect or obtain information about you:
- when you provide the respective data (e.g. by contacting us, by accessing, ordering or purchasing various services and products SC CRISTINA PROD COMIMPEX SRL - COMPLEX DRACULA, by filling in the offer request form, by creating an account on the website, by registering in the company's database to receive marketing information about our services and products, by filling in online or offline forms in order to register for advertising lotteries and events (e.g. fairs)
- When you access our website, some data is collected through cookies;
- from third parties: tour operators and resellers
What information we collect: name, surname, telephone number, home address, e-mail address, ID card series and no., passport series and no., CNP, IP, date of birth, age of children, trade union membership, place of work, company name (if applicable), VAT registration number (if applicable).
How we use your data: for business and administrative purposes (in particular to contact you and to process the orders you place on our website), to fulfil our contractual obligations, to promote our goods and services and in connection with our legal rights and obligations.
Disclosure of user data to third parties: the minimum necessary to fulfil our contractual obligations to you - the provision of hotel, tourist, business, business, legal obligations.
Your data is not sold to third parties.
For how long your information is stored: no longer than necessary - depending on our legal obligations (e.g. to maintain accounting records), or depending on any other basis on which we use the information (e.g. consent, contractual obligations, legitimate interests). Information about specific periods of storage of user data can be found in the section Duration of storage of your data
How your data is secured: by using technical and organisational solutions such as: storing information on secure servers, encrypting data transfers to and from our servers using SSL technology, encrypting payment transactions on the site using SSL technology, allowing access to your personal data only when necessary, encrypting personal data, encrypting e-mails, pseudonymisation and/or anonymisation of personal data.
Use of cookies and similar technologies: we use cookies and similar information-gathering technologies, such as web beacons, on our website including essential, functional, analytical and targeting cookies.
Transfer of your personal data outside the European Economic Area: we will only transfer your personal data outside the European Economic Area if we are required to do so by law or in order to fulfil our contractual obligations to you - when we do so, we ensure that adequate safeguards are in place, for example: the protection of personal data to partners outside the European Union is governed by standard contractual clauses for the transfer of personal data from the Community to third countries.
Use of automated decision making processes: we use automated decision making processes in connection with our website, e.g. the use of web analytics tools, cookies, web beacons or the use of targeting cookies to display adverts to people visiting our website on other websites (for example, by using the Google AdSense network).
Your rights in relation to your personal data:
- you have the right to access your data and to receive information about their use
- you have the right to ask for the information to be corrected and/or completed (right of rectification)
- you have the right to request deletion of data (right to be forgotten)
- you have the right to restrict the use of your data
- you have the right to receive the data in a portable format
- you have the right to object to the processing of your data
- you have the right to withdraw your consent to the processing of your data
- you have the right to appeal to a supervisory authority
Sensitive personal information: we collect what is commonly referred to as “sensitive personal data”, e.g. trade union membership data. For more information, see the main section entitled “Sensitive Personal Information”.
Details about our company
The data operator of our website is: SC CRISTINA PROD COMIMPEX SRL - COMPLEX DRACULA, with headquarters in Arefu Commune, Capatanenii Ungureni village nr 190, Arges, Romania. You can contact the data controller by writing to the above address or by e-mail at pensiunea_dracula@yahoo.com
If you have any questions about this privacy policy, please contact your data controller.
What information we collect when you visit our website
We collect and use information from website visitors in accordance with this section and the section entitled Disclosure and further uses of your data
Web server log information
We use a third-party server to host our website, called Net design SRL, whose privacy policy is available here: https://www.mxhost.ro/politica-confidentialitate-gdpr/ . Our website server automatically logs the IP address you use to access our website, as well as other information about your visit, such as the pages accessed, the information requested, the date and time of the request, the source of the access to our website (for example, the website or URL (link) that referred you to our website) and the version of your browser and operating system.
Use of website server log information for IT security purposes
Our provider collects and stores server logs to ensure IT network security. This includes analysing the log files to help identify and prevent unauthorised access to our network, distribution of malicious code, prediction of DDOS and other cyber-attacks by detecting unusual or suspicious activity.
Unless we are investigating suspicious or potential criminal activity, we do not make, nor do we allow our provider to make, any attempt to identify you based on information collected through server logs.
Legal basis for processing: compliance with the legal obligations to which we are subject (Article 6(1)(c) of the General Data Protection Regulation).
Legal obligation: logging access to our website using server log files is a technical measure to ensure an adequate level of security to protect the information collected from our website in accordance with Article 32(1) of the General Data Protection Regulation.
Cookies and similar technologies
Cookies are data files that are sent from a website to a browser to record information about users for various purposes.
We use cookies on our website, including essential, functional, analytical and targeting cookies and web beacons.
You can reject some or all of the cookies we use on our website by modifying your browser settings or you can disable non-essential cookies by using our cookie control tool, but by rejecting them you may affect the functionality of the website or some features of the website.
Information we collect when you contact us
We collect and use information from people who contact us in accordance with this section and the section entitled Disclosure and additional uses of your information
When you send a message to the email address displayed on our website, we collect your email address and any other information you provide in that email (such as your name, your telephone number and the information contained in any signature block in the email).
Legal basis for processing: our legitimate interests (Article 6(1)(f) of the General Data Protection Regulation).
Legitimate interest: to reply to the questions and messages we receive and to keep records of correspondence.
Legal basis for processing: it is necessary for the performance of a contract or to initiate the process of entering into a contract at your request (Article 6(1)(b) of the General Data Protection Regulation).
The reason why it is necessary for the performance of a contract: where your message is about the supply of goods or services or taking action at your request before we supply you with our goods and services (for example, providing you with information about such goods and services; we will process your information in order to do so).
Transferring and storing your information
We use a third-party email provider to store the emails you send us. Our email provider is Yahoo Mail. Its privacy policy is available here: https://policies.oath.com/ie/ro/oath/terms/otos/index.html
Contact form
When you contact us using the contact form, we collect: name, surname, e-mail, telephone number. We also collect any other information you provide when you fill in the contact form in the comments field.
If you do not provide the information requested by the contact form, you will not be able to submit it and we will not receive your enquiry, therefore we will not be able to reply.
Legal basis for processing: our legitimate interests (Article 6(1)(f) of the General Data Protection Regulation).
Legitimate interest: to respond to the questions and messages we receive and to keep records of correspondence.
Legal basis for processing: it is necessary for the performance of a contract or to initiate the process of entering into a contract at your request (Article 6(1)(b) of the General Data Protection Regulation).
The reason why it is necessary for the performance of a contract: if your message is for the supply of goods or services or for taking action at your request before we supply you with our goods and services (for example, providing you with information about such goods and services); we will process your information in order to do so.
If you contact us by post, we will collect any information you provide to us in any postal communications you send us.
Legal basis for processing: our legitimate interests (Article 6(1)(f) of the General Data Protection Regulation)
Legitimate interest: to respond to the questions and messages we receive and to keep records of correspondence.
Legal basis for processing: it is necessary for the performance of a contract or to initiate the process of entering into a contract at your request (Article 6(1)(b) of the General Data Protection Regulation).
The reason why it is necessary for the performance of a contract: where your message is for the supply of goods or services or for taking action at your request before we supply you with our goods and services (for example, providing you with information about such goods and services; we will process your information in order to do so).
Information we collect when you interact with our website
We collect and use data from individuals who interact with certain features of our website in accordance with this section and the section entitled Disclosure and Additional Uses of Your Information
Newsletter