We want to offer hotel services respecting data protection at the highest professional standards, but also to implement the highest standards of confidentiality and transparency regarding the personal data we process in our current activity. Our core values are defined by total protection and transparency regarding the processing of your personal data in the provision of our services and in contractual matters.
The Personal Data Processing Policy describes the categories of your personal data that we process, the ways and purposes in which we collect them, in which situations we transfer personal data, as well as the rights and options you have in this regard. At the same time, the Personal Data Processing Policy details how we process personal data in customer relationship management, most often to keep you informed of the latest developments or events in your field of interest.
Please also consult the Cookies Policy where it is detailed how we use cookies and other similar technologies through our website.
The operator of your personal data
The operator in relation to your personal data is SC Star Turism SRL, based in Str. Poiana Brasov, Brasov county, Romania.
Categories of personal data that we process
The personal data we process may include:
- Contact information, such as your name, postal address, including home address if you have provided it to us, work address, telephone number, mobile telephone number, fax number and mailing address email;
- Additional information processed in the context of a contractual relationship with us or voluntarily communicated by you, such as: instructions given, payments made, information regarding any legal matters, disputes, litigation or other actions in which you are involved in any quality;
- Details of your visits to our offices, by us to you or any other details about how you interact with us;
- Data resulting from your browsing on our website collected through cookies and similar technologies, according to the Cookies Policy.
The legal grounds for the processing of personal data
Any processing operation of your personal data will be carried out on the basis of one of the legal bases below:
- The processing is necessary for the conclusion or execution of a contract/invoice to which you are a party;
- The processing is necessary in order to comply with a legal obligation of the provider;
- Processing is carried out based on your consent;
- The processing is necessary to protect your interests or that of another natural person;
- The processing is necessary for the purposes of our or a third party’s legitimate interests (e.g. when the processing is necessary for the performance of a contract to which your organization is a party);
In the case of special categories of data, the processing will be done if, in addition to a general legal basis for data processing, one of the following specific processing conditions will be met:
- The consent of the person concerned has been obtained;
- We have a legal obligation to process these categories of data;
For what purposes do we process your personal data?
We may use your personal data for the following purposes (“Permitted Purposes”):
-
- Providing services specific to our field of activity;
- Management and administration of the contractual relationship with our customers;
- Complying with our legal obligations (such as anti-money laundering and anti-terrorist financing obligations, reporting obligations to tax authorities);
- Managing security and access to our offices, managing the use of IT systems used by us (e.g. the website, data management platforms, communication systems used), including the prevention and detection of security threats, fraud or other activities unauthorized or malicious;
- For the purpose of complying with court orders and exercising and/or defending our rights and interests;
- Analyzing and improving our services and communications to you, including (as we have a legitimate interest in continually improving our services) conducting customer surveys about customer satisfaction with our services;
>
- For any purpose related and/or ancillary to any of the above, or for any other purpose for which your personal data was provided to us, subject to applicable law.
We may also, based on your consent, send you various communications through the channels you have approved to keep you informed of the latest industry developments, announcements and other information regarding our services, products, events and projects or other promotional events.
Updating your personal data
If any of the personal data you have provided to us changes, for example if you change your first name, last name or email address or if you wish to cancel any request to us, or if you become aware that we hold any incorrect personal data about you, please contact us by email at: hotelruia@gmail.com.
We will not be liable for any loss arising from incorrect, unauthentic, insufficient or incomplete personal data that you provide to us.
How long do we keep your personal data?
We will stop processing personal data when it is no longer reasonably necessary for the Permitted Purposes, or when you withdraw your consent (if applicable) and (i) there are no longer legitimate and compelling reasons justifying further processing by us (including the legal obligation to continue to store that data) and which prevail over your interests, rights and freedoms or (ii) if they are no longer necessary for us to establish, exercise or defend a right in court.
Your rights regarding the processing of personal data
Subject to certain legal conditions, you have the following rights in relation to the processing of your personal data:
- The right to request a copy of the personal data we hold about you;
- The right to rectify any incorrect or incomplete personal data;
- The right to object or to restrict our use of your personal data;
- The right to withdraw your consent for the processing of data processed on the basis of consent;
- The right to delete your personal data, in situations where you have withdrawn your consent, the processing is no longer necessary or the said processing is contrary to the law;
- The right to data portability which allows you to receive a copy of the processed data that we have received from you or to transmit it to another entity indicated by you;
- The right to withdraw your consent for processing carried out on the basis of consent. The withdrawal of your consent will not affect the lawfulness of the processing based on the consent before its withdrawal. In cases where you withdraw your consent, we will no longer process your personal data and will take appropriate measures to delete your personal data. We may, however, process your personal data if there is another legal basis for that processing.
If you wish to exercise the rights set out above, please contact us using the following contact details:
- Hotel Ruia, Poiana Brasov
- E-mail: hotelruia@gmail.com
In relation to marketing communications received from us, you can also withdraw your consent at any time by simply accessing the “unsubscribe” link at the bottom of each email message you receive from us or by replying to email with the text: Unsubscribe.
In order to comply with our legal data security and confidentiality obligations, when you exercise one of your rights as a data subject, we may ask you to prove your identity by providing us with a copy of an identification document or any other information necessary to verify that the request comes from the relevant data subject.
We will consider any requests or complaints we receive and provide you with a response within the time limits provided by law. If you are not satisfied with our answer or consider that the processing is done in violation of the applicable legislation, you can file a complaint with the data supervisory authority in Romania: the National Supervisory Authority for the Processing of Personal Data – based in Bd. Gheorghe Magheru no. . 28-30, Bucharest, Romania.
Updates to this personal data processing policy
This Personal Data Processing Policy was last updated in May 2018. We reserve the right to periodically update and amend this Personal Data Processing Policy to reflect any changes in how we we process your personal data or any changes to legal requirements. In the event of any such change, we will display the modified version of the Personal Data Processing Policy on our website and/or otherwise make it available to you.