1. Introduction

The confidentiality of our clients’ personal data is one of the main concerns of TRAsat Sub Piatră, no. 510A, Alba County, CUI (Tax Identification Number) RO29663664, J2021001132017. This document is intended to inform you about the processing of your personal data, how it is used, and what your options are regarding this processing. It also explains how we will respect your rights as a data subject in accordance with personal data protection legislation, including the General Data Protection Regulation (EU) 2016/679 (“GDPR”), in the context of using the ravensnest.eu website or other services offered by our company.

2. Your Privacy

During our relationship with you, we will collect and process personal information about you. Personal information includes any details that allow us to identify you as an individual, such as your name, email address, or phone number. We are committed to protecting your privacy and will use your personal information in accordance with all applicable data protection and privacy laws and regulations, including the GDPR.

3. What Information Do We Collect?

If you visit our website or use a service provided by TRANSILVANIA RAVEN SRL, we will process the following personal data:

• Data provided directly by you when using the website. For example, the data provided by a client to the email address contact@ravensnest.eu when attempting to reach out to us. This processing complies with Art. 6, para. 1, lit. a) of the GDPR.
  Device-related information, such as your IP address, collected while using the website.
• Name, surname, signature, contact details (personal phone number, email address), home/residence address, ID card series and number, CNP (Personal Identification Number), date of birth, nationality, as well as check-in and check-out dates, collected in the context of booking our accommodation spaces, pursuant to Art. 6, para. 1, lit. b) of the GDPR.
• Images and video footage captured by video surveillance cameras located on the exterior premises of the accommodation. These are not published on our social media accounts without your prior consent, according to Art. 6, para. 1, lit. f) of the GDPR, as this constitutes a legitimate interest of our company as a data controller.
• Banking details necessary for processing reservation payments, under Art. 6, para. 1, lit. f).

This collected information is necessary to provide you with comprehensive accommodation services and to properly address any requests that may arise. If you refuse to provide this information, you will not be able to fully utilize our services.

4. Purpose of Data Processing

We will use your personal data to provide TRANSILVANIA RAVEN SRL services for your benefit, for purposes including:

• Processing reservations.
• Preparing necessary documentation for the provision of our accommodation services.
• Processing your payments.
• Generating and facilitating the use of vouchers.
• Conducting data analysis, testing, and research, monitoring usage and activity trends, and developing safety features.
• Evaluating your satisfaction level regarding our services.
• Communicating with you regarding information requested through our contact forms.
• Delivering specialized newsletters and commercial information to you in electronic format.
• Providing support services for any of your requests.

5. How Do We Protect Stored Personal Data?

We are required by law to retain personal information only for as long as necessary for the purpose for which it is used. If you are a client, we will process your data for the entire duration of our contractual relationship, strictly for the period needed to provide our services, resolve your requests or disputes, and subsequently to fulfill our legal obligations. (For instance, financial-accounting supporting documents must legally be kept for 5 years from the end of the financial year in which they were issued, while video surveillance footage is kept for a maximum of 30 days).

6. Who Do We Share Your Personal Information With?

We will not transfer your personal data to third parties. However, to carry out the processing operations described in section 4, we may grant access to our subcontractors or collaborators. Examples include online payment processors, website operators, or other entities essential to the proper functioning of our Company (e.g., accounting firms, legal counsel, public authorities).

7. Your Rights

Under personal data protection laws, you, as a data subject, have the following rights:

• The right to information: The right to receive details about the processing activities carried out by TRANSILVANIA RAVEN SRL, as outlined in this document.
• The right of access: The right to obtain confirmation from TRANSILVANIA RAVEN SRL regarding the processing of your personal data, along with details such as how data is processed, the processing purpose, and the recipients or categories of recipients.
• The right to rectification: The right to have inaccurate or unjustified personal data corrected by TRANSILVANIA RAVEN SRL without undue delay, as well as to have incomplete data completed.
• The right to erasure (“right to be forgotten”): The right to have data deleted without undue delay, subject to certain conditions. Following a deletion request, we may anonymize this data (stripping it of its personal identifiable nature) and continue processing it for statistical purposes.
  +1
• The right to restriction of processing: Applicable under certain conditions.
• The right to data portability: The right to receive your personal data in a structured, commonly used, and machine-readable format, and the right to transmit that data to another data controller, provided legal conditions are met.
• The right to object: To object to certain processing activities.
• The right to file a complaint: The right to address the National Supervisory Authority for Personal Data Processing or the competent courts, if you consider it necessary.

 

8. How Can You Contact Us?

To exercise the rights mentioned above or if you have any questions regarding data processing, you can send a request to our e-mail address: contact@ravensnest.eu.

9. Protecting Personal Information

We take all necessary measures to maintain the security of processed personal data. However, please note that transmitting information via the internet is never completely secure. This is a general risk associated with internet use and is not specific to our services. We cannot guarantee the security of data (including personal information) transmitted to our services; any such transmission is done at your own risk.

If you choose to provide us with the personal data of other individuals—such as booking a room on someone else’s behalf or transferring a voucher—you assume responsibility for how you obtained that data and guarantee that you have a lawful basis for processing their personal data under the GDPR. Consequently, we are not responsible for fully protecting the rights of those respective individuals.

10. Updates to this Privacy Policy

If circumstances require, we may revise this Privacy Policy in the future. If changes are made, we will publish the revised policy on our website and indicate the updated version by changing the “Last updated” date. Continuing to access our website after the updated Privacy Policy goes into effect will constitute your acceptance of the revised policy.

11. Processing Special Data or Data Based on Consent

When processing is based on Article 6(1)(a) or Article 9(2)(a) of the GDPR, you have the right to withdraw your consent at any time. This withdrawal will not affect the lawfulness of any processing carried out based on your consent prior to its withdrawal. You may modify or withdraw your consent at any time, and we will act accordingly without delay, unless there is a legal requirement or a legitimate interest that prevents us from doing so.