Privacy policy

We, Transylvanian Inn, guarantee the confidentiality and full protection of personal data by the rules, principles, and regulations in force in the European Union in this field, including Regulation No. 679 of April 27, 2016, on the protection of natural persons about the processing of personal data and on the free movement of such data.

Personal data means any information relating to an identified or identifiable natural person, and an identifiable person is that person whose identity can be ascertained, directly or indirectly, in particular by reference to an identifying element such as a name, an identification number, location data, an online identifier or one or more elements specific to its physical, physiological, genetic, psychological, economic, cultural or social identity.

This Policy refers to the personal data of our customers, business partners, other people who come into contact with us or who visit our locations, employees or people in the process of hiring, collaborators, etc., and it applies to personal data collected by: e-mail, directly at the reception, various forms, CVs, video recordings, website, social media. For the purpose of carrying out the activity, Transylvanian Inn may collect, process, and store certain personal data legally necessary for the conclusion of a contract or for legitimate interest. This data may be, but is not limited to: name, surname, nationality, address, telephone, e-mail address, moving images, etc.

The privacy policy describes:

The purpose for which we collect and how we use your personal data;
How we collect personal data;
The basis of processing for the above purpose;
The categories of personal data we collect and process;
The storage period for processing;
Your rights and how you can exercise them.

To whom we may transmit this data

We also want to inform you about the measures we take to ensure the security of your personal data and how you can contact us in matters related to confidentiality and personal data protection.

The purpose for which we collect and how we use your personal data

We must manage securely and only for the specified purposes the personal data you provide us about you.

Our organization collects personal data in the following instances:

1. For the Services we Offer You

We request your personal data for:

to be able to book rooms and other services in our villa; the basis for data processing is, in this case, the execution of a contract;
to be able to accommodate you in our villa; in this case, the processing of personal data is done based on a legal duty;
to enroll you in the loyalty program (optional), with Transylvanian Inn’s legitimate interest as the basis of processing.

1.1. To Communicate with You

It is important to communicate with you for various purposes, such as knowing your opinions about our services, resolving your complaints promptly, in electronic format, or providing personalized services.

1.2. Legal Duty

In certain situations we may request some personal data from you based on a legal obligation, imposed by the legislation in force.

1.3. Sending Information (newsletters)

We request your data to send you commercial information/newsletters, in electronic format. For this, we ask for your consent/agreement and expressly ask for your e-mail address; the basis of the processing is, in this case, our legitimate interest.

You can withdraw your consent at any time by clicking “unsubscribe” when you receive one of our newsletters and thus express your option not to receive further notices from us.

2. The categories of data processed in our relationship with you are: name and surname, telephone, fax, home address, e-mail address (optional) and other personal data that you can provide us directly

2.1. To Enter into Contractual Relations with Us (e.g., Individual Employment Contract, etc.)

In order to conclude employment contracts with us, we request your personal data based on a legal obligation: name, surname, home address, date and place of birth, identity document data, educational documents, and criminal record (when applicable).

2.2. To Communicate with You

In order to communicate with you timely, we may request your phone number and e-mail address.

3. If You Wish to Apply for a Position at Transylvanian Inn

We use the personal data contained in the resumes we receive to assess the qualifications of applicants for a position within the Transylvanian Inn, including for our internship programs. We base our processing on the interest of potentially concluding and carrying out an employment contract.

The categories of data processed in our relationship with you are the following: name, e-mail address, telephone, fax, address, personal data included in the CV, details of education and training, professional qualifications, as well as other personal data that you give us you can provide directly.

4. If You are a Business Partner/Supplier

4.1. To Keep in Touch with You

We use your personal data to maintain direct contact and keep the contractual relationship with you. We collect this data based on the conclusion of commercial contracts.

4.2. To Communicate with You

We use your contact details to communicate about any relevant issues related to our contractual relationship.

4.3. Legal Duty

In certain situations we may request some personal data from you, based on a legal obligation, imposed by the legislation in force.

5. If You Are a Visitor to the Transylvanian Inn Premises

We use your personal data to ensure the security of our assets and personnel. In this case, we base our data processing on Transylvanian Inn’s legitimate interest, namely the protection of its premises, assets and staff.

The categories of data processed in this context are your name and other personal data that you can provide us directly, at our request, as well as your images recorded using the video surveillance system.

6. If You Are a User of Our Websites – transylvanianinn.ro etc.

We use data we collect from you to monitor traffic and improve the content of our websites. In processing this data we rely on our legitimate interest to ensure the proper functioning of the sites and the improvement of the materials presented. The categories of data processed in this context are the time and date of accessing a website and the IP address from which it was accessed.

The grounds for processing personal data may include: a legal obligation (in cases where Transylvanian Inn is legally required to disclose certain personal data to public authorities), the performance of a contract entered into by Transylvanian Inn in the context of a specific transaction, or Transylvanian Inn’s legitimate interest in carrying out a transaction in the most efficient manner.

The online booking service is provided through our website. When you access this service, the applicable terms and conditions are those stated on the website; we recommend you to read them.

7. Provision of Personal Data

When we directly request that you provide us with personal data, we do so in consideration of the previously mentioned categories and purposes, as otherwise, we would be unable to fulfill our specific activities.

If you provide us with the personal data of other individuals, please inform them in advance about how Transylvanian Inn processes their data, as described in this privacy policy.

8. Transferring Personal Data to Third Parties

Although, as a general rule, we do not disclose your personal data to third parties, there may be instances where:

we disclose contact information to our marketing service providers (only with your consent);
we disclose contact information to our IT service providers conducting satisfaction surveys (only with your consent);
we are legally obligated to provide relevant personal data to public authorities in order to deliver the services you have requested.

9. Duration of Processing

We intend to retain your personal data for the shortest time possible, just enough to ensure the smooth operation of our activities—typically 24 months. However, there are situations where current legislation requires certain sets of data to be kept for longer periods.

10. Your Rights

As the owner of personal data, the GDPR grants you a series of rights, including:

the right of access – allows you to obtain the confirmation of whether your personal data is being processed by us and, if so, to receive relevant details regarding these processing activities;
the right to rectification – allows you to correct your personal data if it is inaccurate;
the right to erasure – allows you to request the deletion of your personal data in certain cases, such as:
if the data is no longer necessary for the purposes for which it was collected;
if the processing was based on your consent and you have withdrawn that consent, or it has expired, or if there is no longer a legal basis for processing your personal data;
a court or regulatory authority has ruled that the personal data in question must be deleted;
if it is proven that your personal data has been processed unlawfully;
the right to restriction – allows you to request the restriction of processing of your personal data in certain cases, for example, when you contest the accuracy of your data for a period that enables us to verify its accuracy;
the right to object – allows you to object to the further processing of your personal data, under the conditions and within the limits established by law;
the right to data portability – allows you to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format, or to transfer this data to another data controller.

We are pleased to ensure that you can exercise these rights, except in cases where this proves impossible or would involve a disproportionate effort.

You can exercise the aforementioned rights and learn more about your rights by sending us, as the data processor, a request via email at contact@transylvanianinn.ro.

You also have the right to file a complaint with the National Supervisory Authority for Personal Data Processing, as the autonomous central public authority with general competence in personal data protection.

We are committed to handling your requests with the utmost care at all times. You can ask us any questions, and we will respond as quickly as possible.

11. Versions of this Privacy policy

This Privacy policy takes effect on January 22, 2020. It may be updated in accordance with any legislative changes that may occur. Any updates will apply 15 days after being posted on the website.

Reviewed on: January 22, 2020.