Privacy policy

Who is responsible for your data

The controller of the personal data processed through this website and in connection with a stay at Vila Seva is:

• ROTUR SRL, registered office at Str. Republicii 8, Vatra Dornei, jud. Suceava, Romania
• trade register number: J1992000640331
• tax identification number: 743536
• e-mail: [email protected]
• telephone: +40 722 265 960

For any question about your data, write to us at [email protected].

What data we process, for what purpose and on what basis

• Booking. Name, e-mail address, telephone number, country, dates of stay, number and ages of guests, estimated arrival time and any special requests — to conclude and perform the accommodation contract (art. 6(1)(b) of Regulation (EU) 2016/679).
• Arrival and departure registration form. Name, date of birth, citizenship, home address and identity document details of each guest, on arrival or filled in beforehand through the booking link — a legal obligation of accommodation units (art. 6(1)(c)).
• Payments and invoicing. Amounts paid, payment method, billing details — performance of the contract and tax and accounting obligations (points (b) and (c)). For card payments, card details are entered directly on the payment processor's page; we only receive the payment confirmation.
• Messages sent through the contact form or by e-mail. Name, e-mail address, telephone (if you provide it) and the content of the message — to reply to you (point (b) when the message concerns a booking, or point (f), our legitimate interest in answering enquiries).
• Technical data. IP address, browser type and server logs — for the operation and security of the website and to prevent abuse (point (f)).
• Visit measurement. Only if you have given consent through the cookie banner (point (a)); details in the Cookie policy. Consent can be withdrawn at any time.

We do not use the data for automated decisions with legal effect and we do not build profiles. We do not send marketing messages without your consent.

Who receives the data

The data reaches only those who need it for the purposes above:

• the providers of our website hosting, network protection and delivery, booking e-mail delivery and, if you pay online, payment processing — acting as processors, under contract;
• public authorities, where the law requires it (for example guest records, tax authorities);
• the provider of the map shown on the website, which receives the IP address of the device when the map loads.

Some of these providers may also process data outside the European Economic Area; in that case the transfer relies on an adequacy decision of the European Commission or on standard contractual clauses. We do not sell or rent your data.

How long we keep the data

• booking data, invoices and payment documents: for the period required by tax and accounting law;
• arrival and departure registration forms: for the period laid down by law for guest records;
• contact form messages not related to a booking: no more than 12 months after the last reply;
• technical server logs: for a limited period, as long as needed for security and troubleshooting;
• your cookie choice: 180 days.

Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability, the right to object to processing based on legitimate interest and the right to withdraw consent at any time, without affecting earlier processing.

To exercise them, write to us at [email protected]; we reply within one month at most. If you consider that your data is being processed unlawfully, you may lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (dataprotection.ro).

Data security

The website uses encrypted connections (HTTPS), access to the administration panel is limited to the villa's staff, on individual accounts with roles, and the databases are backed up regularly.

Children

Bookings are made by adults. Children's data (age and, on arrival, the details in the registration form) is provided by the parent or companion making the booking and is processed only for accommodation and the related legal obligations.

Updates

We may update this policy when the website's services or the law change. The date of the last update is shown at the top of the page.