Privacy policy

This page explains what personal data we receive through this website, why, and what happens to it. The data controller is the company that runs the guesthouse; its contact details are at the end of this page.

What we receive

Only what you send us through the booking form: your name, phone number, e-mail address, arrival and departure dates, the number of adults, the children's ages, the room type you prefer and your message, if you write one. We also keep the time you gave your consent and the version of the text you accepted.

If you book online, in the booking frame on the booking page, what you fill in there goes straight to 5StarDesk, the guesthouse's booking system.

Our own form does not ask for card details.

Why we use it

To answer your request and, if you book, to prepare your stay (article 6(1)(b) GDPR: steps taken at your request before a contract). We do not use it for advertising and do not sell it.

Who else sees it

• The e-mail service through which we receive the request and send you an acknowledgement.
• The server that runs the website, where the request is stored.
• 5StarDesk, the guesthouse's booking system, for bookings made online on the booking page. It processes them on our behalf.
• Cloudflare Turnstile, the spam check in the form. It receives technical data about your browser, not the contents of the form.

How long we keep it

Booking requests are deleted automatically 12 months after the departure date. If you book, invoice data is kept for as long as accounting law requires.

Visit statistics

To count visits we use Umami, a tool that sets no cookies and does not store your IP address. We only see totals: how many visits a page had, from which country and on what kind of device.

Your rights

You can ask to see your data, have it corrected or deleted, restrict its use or receive it in a portable format. You can object to its processing and withdraw your consent at any time. Write to us at the e-mail address below; we reply within one month.

If you are not satisfied with our answer, you can complain to the Romanian data protection authority, ANSPDCP (dataprotection.ro).

The data controller