Informativa sulla privacy

Controller

SC Arnaldo Dory Impex SRL, Str. Carpaților nr. 23, bl. R7, sc. A, ap. 7, Brașov, jud. Brașov, CUI 37367929. Contact for data protection: treog@yahoo.com.

What we collect and why

When you book: name, email, phone, pickup address, number of guests, notes and the trip details. We use them to carry out the trip and to contact you about it (legal basis: contract, GDPR art. 6(1)(b)).

The box you tick in the booking form confirms that you accept our terms and have read this policy. It is not a request for consent: we process booking data because we need it to provide the trip.

To keep the booking form from being abused, we store with each booking a one-way code derived from your IP address, which cannot be turned back into the address (legal basis: legitimate interest, GDPR art. 6(1)(f)).

The booking form also runs Cloudflare Turnstile, a check that tells people from automated programs. For this, Cloudflare receives your IP address and technical details of your browser; we receive only the result (legal basis: legitimate interest in keeping the form free of abuse, GDPR art. 6(1)(f)). Cloudflare also uses these signals on its own account, as a separate controller, to improve its bot detection.

Booking requests that were cancelled or expired without any payment are deleted 90 days after they ended. Every other booking we keep for as long as Romanian accounting law requires, 10 years from the end of the year of the trip, then delete it. The code derived from your IP address is deleted after 30 days.

Who receives your data

Stripe (card payments; we never see your card number), Cloudflare (the security check on the booking form), our email provider (booking emails), and our hosting and database providers. They process data only on our instructions, except for Cloudflare’s own use described above.

Some of these providers process data outside the European Economic Area, for example in the United States. Where they do, they are bound by the safeguards the GDPR requires for such transfers.

Google Maps is loaded only when you click “Show the map”. Google reviews are fetched by our server, so your browser does not contact Google for them.

Cookies

The public site sets no analytics or advertising cookies. The details are in our cookie policy.

Your rights

You can ask for access, correction, deletion, restriction or a copy of your data, and object to processing, by writing to us. You can also complain to the Romanian data protection authority (ANSPDCP, dataprotection.ro).