GDPR

We are very preoccupied with guaranteeing the confidentiality and full protection of your personal data in accordance with the rules, principles and regulations in force in the European Union in this area, including Regulation no. 679 of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data.

Personal data means any information about an identified or identifiable individual, and an identifiable person is that person identifiable, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, localization, an online identifier, or one or more specific elements that are specific to its physical, physiological, genetic, psychological, economic, cultural or social identities.

This Policy refers to the personal data of our customers, business partners, other people who come in contact with us or who visit our locations, employees or people in the process of hiring, collaborators, etc. and applies to personal data collected by: email, directly to our locations, various forms, CVs, video recordings, web-sites, social media. For the purpose of carrying out the activity, Transylvania Turist may collect, process and store certain legally required personal data, for the conclusion of a contract or for a legitimate interest. These data may be, but are not limited to: name, surname, nationality, address, telephone, e-mail address, moving images, etc.

This Privacy Policy describes:

• The purpose for which we collect and how we use your personal data;
• How we collect personal data;
• The basis of processing for the above purpose;
• The categories of personal data that we collect and process;
• The storage period for processing;
• Your rights and how you can exercise them;
• To whom can we transmit this data.

We also want to let you know the steps we take to ensure the security of your personal data, as well as how you can contact us on issues related to privacy and protection of your personal data.

1. How we are

SC Turist in Transilvania SRL, with its headquarters in Medias, 14A Stadionului Street, Sibiu County, Romania (hereinafter referred to as Tourist in Transylvania) offers tourist accommodation services, airport transfers and daily tours in Transylvania.

Our company collects data in the following cases:

1. If you are a customer or potential customer of our services:

We have an obligation to safely manage and for the specified purposes only the personal data you provide to us about you.

1.1. To offer you our services

We request data to provide you with our services:

- to book rooms in our accommodations or other services offered by the Tourist in Transylvania; the basis for data processing is in this case the execution of a contract;

- to accommodate our accommodations; the processing of personal data is, in this case, based on a legal obligation;

1.2. To communicate with you

It is important for us to be able to communicate with you for various purposes, such as to find out what your opinions on our services are, to address your various complaints or to provide personalized services in a timely manner , in electronic format.

1.3. Legal obligations

In some situations, we may request some personal information under a legal obligation imposed by applicable law.

1.4. Sending information (newsletter)

We request data to send you commercial / newsletters in electronic format. We ask for your consent / consent and we ask for your e-mail address expressly; we have legitimate interest in our processing.

You can withdraw your consent at any time, expressing your option not to receive our newsletter in the future by clicking "unsubscribe" when you receive the e-mail.

The data categories processed in the context of our relationship with you are your name, telephone number, fax number, address/ home address, e-mail address (optional) and other personal data you can provide directly to us.

2. If you are a visitor to Turist in Transylvania locations

We use your personal data to ensure our security, property and staff. In this case, we base our processing of data on the legitimate interest of Turist in Transylvania, namely the protection of these spaces, active and personal.

The categories of data processed in this context are your name as well as other personal data that you can provide us directly upon our request as well as your recorded images using the video surveillance system.

3. If you are a user of our websites - www.turistintransilvania.com, etc.

We use personal data that we collect from you when you visit our nosastre websites to monitor traffic and improve site content. We rely on this data processing activity on our legitimate interest in ensuring the smooth operation and improvement of our websites. The data categories processed in this context are the time and date of access to an Internet site and the IP address from which the site was accessed.

The basis for the processing of personal data may be: a legal obligation (if a Tourist in Transylvania is legally obliged to disclose certain personal data to public authorities), the execution of a contract concluded by the Tourist in Transylvania in the context of a particular transaction; or the legitimate interest of Turist in Transylvania to make a transaction in the most efficient way.

The online booking service is provided through its own website; when you access this service, the terms and conditions that apply are those listed on that website. We advise you to consult it.

4. Provision of personal data

When personal data is requested directly from you, Transylvania Tourist asks you to provide all the data categories we request for the above mentioned purposes, otherwise we will not be able to perform our specific activity.

If you provide a Tourist in Transylvania with personal data of other individuals, please let them know before such data is provided how the Tourist in Transylvania intends to process their personal data as described in this privacy policy.

5. Transmission of personal data to third parties

Although, as a general rule, we do not disclose your personal data to third parties, it is possible:

- to disclose contact details to our marketing service providers (only with your consent);

- to disclose contact details to our Satisfaction Survey service providers (only with your consent);

- if there is a legal obligation to transmit relevant personal data to public authorities, in the context of providing us with the services you request;

6. Processing time

We intend to keep your personal data for as short a period of time, as long as the minimum necessary for the proper conduct of our business - usually 24 months. However, there are situations where the legislation in force requires that certain sets of data be retained for longer periods of time.

7. Your rights

As a personal data holder, GDPR gives you a number of rights, including:

• the right of access - allows you to obtain confirmation that your personal data is processed by us and, if so, what are the relevant details of these processing activities;
• right of rectification - allows you to rectify your personal data if it is incorrect;
• the right to delete - allows you to obtain the deletion of your personal data in certain cases, such as:
• if the data are no longer required for the purposes for which they were collected;
• whether the processing was based on your consent and whether you have withdrawn your consent, or has expired, or where there is no longer a legal basis for processing your personal data;
• a court or a regulatory authority has decided that your personal data in question must be deleted;
• if it is proven that your personal data has been processed unlawfully;
• the right to restrict - allows you to obtain the restriction of processing your personal data in certain cases, for example when you contest the accuracy of your personal data for a period that allows us to verify this accuracy;
• the right to object - allows you to object to the further processing of your personal data under the conditions and within the limits set by law;
• the right to data portability - allows you to receive the personal data you have provided to us in a structured, commonly used and readable format, or to send these data to another data operator.

We are happy to ensure that you exercise these rights, unless this proves impossible or involves a disproportionate effort.

You may exercise the above rights and learn more about such rights by submitting to us, in our capacity as data controller, a written request to SC Turist in Transilvania SRL, 14A Stadionului Street, Mediaş, Sibiu, Romania or by e-mail at contact@turistintransilvania.com

You also have the right to lodge a complaint with the National Supervisory Authority for Personal Data Processing, in its capacity as an autonomous central public authority with general competence in the field of personal data protection.

We are committed to always addressing your requests with the utmost care and to address any questions you may have to receive an answer as soon as possible.

8. Version of this policy

This Privacy Policy enters into force on May 25, 2018. It may be updated depending on the legislative changes that may occur. Any updates will apply within 15 days of site publishing.

Revised: 13 August 2020