Politica de Confidențialitate

1. Introduction This Privacy Policy explains how Daliro SRL collects, uses, and protects the personal data of visitors and guests who use the official website of Hotel Piscul Negru, our online booking platform, and the related accommodation services. We are committed to respecting your privacy and protecting all personal data in accordance with Regulation (EU) 2016/679 (GDPR) and the national legislation in force.

2. Data Controller Information Data Controller: Daliro SRL (Hotel Piscul Negru) Registered Office: Sat Barasti 168, Com. Cicanesti Tax ID (CUI): RO 4464283 Trade Register No.: J1992002419034 Email: [email protected] Phone: +40726722479

3. What Data We Collect Depending on how you interact with our website and hotel services, we collect the following categories of data:

• Identification and Booking Data: first name, last name, nationality, series and number of identity document / passport (required by law at check-in), period of stay, number of guests, and special preferences transmitted through the booking platform.
• Contact Data: email address, phone number, home or billing address.
• Financial Data (Payments): For online card payments, card hold or payment data is collected and processed exclusively and directly by our partner, Stripe. Hotel Piscul Negru / Daliro SRL does not collect or store card numbers, CVV codes, or other sensitive banking data.
• Usage Data: IP address, device type, browser used, pages visited on our website, and the duration of the visit.
• Commercial Data: messages, inquiries, or feedback voluntarily sent via contact forms or email.

4. How We Collect Data Your data is collected through:

• The integrated online booking platform on our website;
• The contact form available on the website;
• Direct correspondence via email, phone, or at the hotel reception (by filling out the Arrival and Departure Notification Form);
• Cookies and web traffic analytics tools.

5. Purpose of Data Processing We process this data for legitimate and legal purposes, including:

• Taking, confirming, and managing your accommodation bookings;
• Communicating details related to your stay, cancellations, or modifications;
• Processing online payments securely;
• Fulfilling legal obligations for guest records (reporting accommodated persons to the authorities) and accounting (issuing invoices);
• Responding to inquiries received through the contact form;
• Sending special offers or updates (only if you have given your explicit consent by ticking the marketing box).

6. Legal Basis for Processing

• Performance of a contract: Booking and providing the requested accommodation and catering services.
• Legal obligation: Registering guests in the accommodation forms according to Romanian legislation and archiving financial-accounting documents.
• Your consent: For direct marketing communications or the use of certain non-essential cookies.
• Legitimate interest: Ensuring the security of the hotel and guests (e.g., video surveillance in common areas, if applicable) and optimizing website performance.

7. Data Retention Period Personal data is kept only for as long as necessary. Data included in accounting documents (invoices) or in statutory accommodation forms are kept for the strict periods imposed by the fiscal and administrative legislation in Romania.

8. Disclosure of Data to Third Parties Your data may only be shared with strictly verified partners, such as:

• Payment Processor Stripe: Which securely manages credit card transactions.
• IT Service Providers: Companies providing website hosting or maintenance for the booking software platform (PMS/Channel Manager).
• Accounting and Advisory Services.
• Public Authorities: (Police, ANAF - Tax Administration, local tourism authorities) when there is a legal reporting obligation.

9. Data Security and Stripe The security of your data is a priority. The website uses secure encrypted connections (HTTPS/SSL).

Note on payments: All online transactions are processed through Stripe, a global leader in secure payments, certified according to the PCI-DSS Level 1 security standard (the highest level of security in the payment industry). Your card data is encrypted directly in your browser and sent to Stripe, ensuring that no one within our hotel has access to it.

10. Your Rights (GDPR) In accordance with the GDPR, you benefit from the following rights:

• The right of access and rectification of data;
• The right to erasure ("the right to be forgotten"), except for data that we are legally required to keep;
• The right to restriction of processing or data portability;
• The right to object to processing (including withdrawing consent for marketing);
• The right to lodge a complaint with the National Supervisory Authority (ANSPDCP) at www.dataprotection.ro.

To exercise any of these rights, you can contact us via a written request sent to: [email protected] (Note: You can use the general email or replace this with a dedicated one).

11. Changes to the Policy We reserve the right to update this Privacy Policy whenever changes occur in the way data is processed or in legislation. Any new version will be published on this page.

12. Contact For additional questions regarding the processing of your data, you can contact us at:

Email: [email protected]

Phone: +40726722479