Confidentiality Policy (GDPR)

Politica de Confidențialitate cu privire la prelucrarea datelor cu caracter personal (GDPR)

This confidentiality policy on the processing of personal data applies for www.hotelcitrin.ro, held and operated by MARTAX GROUP S.R.L., headquartered in Mun. Brașov, str. Roșiorilor, nr. 18, jud. Brașov, registered with the National Trade Register Office under no. J08/915/2004, TIN: RO 16373952, phone no.: 0268 322 717, e-mail: office@hotelcitrin.ro.

We are concerned with guaranteeing the protection of your personal data in accordance with the norms and principles of Regulation (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data.

What personal data categories we process

We generally collect your personal data directly from you, so you have control on the information you provide us with.

Personal data we collect:

• First name, surname, e-mail account, phone number, ID / passport series and number, country and city of residence
• Credit card data (card type, credit card number, holder’s name, date of expiry and security code)
• Information on the customer’s vacation, including the check-in and check-out dates, special requests (allergens, special diets), observations on the preferences regarding the services provided to you (including your preference for the type of room, facilities or other services used)

When you use our website, even if you don’t make a reservation or order a product/service, it’s possible that we collect certain personal data, such as: IP address, the browser you use and information on the operating system, the app version, language settings and pages you have been displayed. If you use a mobile device, it’s possible we also collect data which identify the mobile device, the settings and specific features of the device, and the details on latitude and longitude.

When you make a reservation, our system records the means and websites you made the reservation through. If these data can identify you as a natural person, they are considered personal data under this confidentiality policy on the protection of personal data. You can choose any time what personal data (if applicable) you wish to provide.

The purpose of collection and the way we use your personal data

We request data in order to be able to make reservations, to obtain a confirmation of the reservation and other services within our hotel.

We request data in order to be able to check you in at our hotel; in this case, the processing of personal data is made under a legal obligation.

We request data in order to be able to communicate with you before, during and after your vacation: in order to find out which are your opinions on our services for the purpose of solving various claims of yours.

We might request personal data based on a legal obligation imposed by the legislation in force.

We might request personal data in order to send you electronic commercial information and for these purposes we expressly ask for your consent and request your e-mail account. You may withdraw your consent any time, thus expressing your wish not to receive our newsletter any more, by clicking the “unsubscribe” button when you receive said e-mail.

You may withdraw your consent any time, thus expressing your wish not to receive our newsletter any more, by clicking the “unsubscribe” button when you receive said e-mail.

We collect additional personal information during the registration/check-in at our unit, including information that may be requested by law. We may use video cameras or CCTV and other security measures in our unit which may record images of our guests and visitors in public places.

It’s possible to collect information on you from third parties, including information from travel agencies, card partners and other partners of ours.

Changing and accessing your personal data

In accordance with the legislation in force, you have the right to access and intervene upon your data, the right not to be subjected to an automated individual decision and the right to initiate a lawsuit. You may request of us to inform you on the personal data we keep of you, and, if necessary, you may ask that we update, correct or delete your personal data we keep in our active database. We will make all the necessary updates and changes within the statutory deadline and if permitted by law, we may request a proper fee in order to cover the costs incurred for dealing with your request. Please send these requests in written form at office@hotelcitrin.ro.

We intend to answer any valid requests within one month at the most, except for very complicated situations or if you made more than one request, case in which we will answer within two months at the most.

You may ask us to delete your personal data, but only if: they are no longer necessary for the purposes for which they were collected, you have withdrawn your consent, you obey a legal right to oppose, they were processed illegally or we have a legal obligation to do so. We do not have the obligation to comply with your request to delete your personal data if the processing of personal data is necessary for the observance of a legal obligation or for establishing, exercising or protecting a right before a court of law.

You have the right to submit a complaint before the National Supervisory Authority for Personal Data Processing. In Romania, the contact details of the National Supervisory Authority for Personal Data Processing are the following:

Autoritatea Națională De Supraveghere a Prelucrării Datelor Cu Caracter Personal (The National Supervisory Authority For Personal Data Processing)

B-dul G-ral. Gheorghe Magheru nr. 28-30, Sector 1, cod poștal 010336, București Phone no.: +40 318 059 211 or +40 318 059 212

E-mail: anspdcp@dataprotection.ro