This policy explains what personal data we process when you visit bucovinaharmony.ro, send us a request or stay with us, and what rights you have under Regulation (EU) 2016/679 (GDPR).
Data controller
Bucovina Harmony, Gura Humorului area, Suceava County, Romania · [email protected]. The controller's full identification details are provided in the booking confirmation.
What data we process and why
| Situation | Data | Purpose | Legal basis |
|---|---|---|---|
| Availability / booking request | name, email, phone, stay dates, number of guests, your message | to reply and manage the booking | contract / pre-contractual steps |
| The stay itself | ID document details of adults | tourist registration required by law, invoicing | legal obligation |
| "SPA opening" list sign-up | email address | to notify you once when the SPA opens | consent (withdrawable at any time) |
| Visiting the website | technical data (IP address, browser type, pages visited), only if you accept analytics cookies | aggregated statistics about site usage | consent |
| WhatsApp / email / phone messages | the content of the conversation | to reply to you | legitimate interest / contract |
We do not profile or make automated decisions, and we do not sell data to third parties.
How long we keep data
- Unconfirmed booking requests: 12 months.
- Confirmed booking data and invoices: the statutory archiving period (generally 5–10 years).
- The "SPA opening" list: until the opening announcement is sent or until you unsubscribe.
- Web analytics data: at most 14 months, in aggregated form.
Who we share data with
Only providers that help us run the website and bookings, under data-processing agreements: web hosting and infrastructure (including the database where requests are archived), the notification email service, Google Maps (the map shown on the site) and, only with your consent, Google Analytics. Some of these providers may process data outside the EU, based on the European Commission's standard contractual clauses.
We pass data to public authorities only when the law requires it (e.g. tourist registration).
Your rights
You have the right of access, rectification, erasure, restriction, portability and objection, and the right to withdraw consent at any time without affecting prior processing. Write to [email protected] and we reply within 30 days. You may also lodge a complaint with the Romanian supervisory authority (ANSPDCP, www.dataprotection.ro) or your local data protection authority.
Security
The website uses an encrypted connection (HTTPS). Requests are stored in access-restricted systems and emails are sent through specialised providers. We keep only the data we need.
Cookies
See the Cookie policy.
Changes
We may update this policy; the current version and the date of the last update are shown on this page.