Termeni și condiții

Politica de confidențialitate GDPR + Termeni și condiții cookie pentru Pensiunea Casa Bobu

Last updated: 20/01/2026

This Privacy Policy explains how Pensiunea Casa Bobu (“we”, “us”, “our”) collects and processes personal data when you visit our website, contact us, or make an enquiry/booking.

1) Who we are Bobu Gheorghe

Data Controller: Pensiunea Casa Bobu SRL. operating as Pensiunea Casa Bobu
Registered address: 210 Izvorul Muntelui Street, 615100, Izvorul Muntelui, Romania
Contact: pensiuneabobu@yahoo.com | +40 766 269 731
VAT / Company registration: 41067881

If you have questions about this policy or your data, contact us using the details above.

2) What personal data we collect

Depending on how you interact with us, we may collect:

Identity & contact details: name, surname, phone number, email address, address (if required for invoicing).
Booking/enquiry details: dates of stay, number of guests, preferences, messages, special requests.
Payment data: if you pay by card, payment is typically processed by a payment provider; we may receive confirmation/transaction references but not full card details (depending on your provider/solution).
Technical data: IP address, device/browser information, approximate location, website usage data (via cookies/analytics).
Legal/administrative data: where required by Romanian law for guest registration and invoicing.

We do not intentionally collect special category data (e.g., health) unless you voluntarily share it (e.g., accessibility needs). If you share it, we use it only to respond to your request.

3) Why we process your data (purposes) and legal bases

We process personal data under GDPR Article 6 on the following bases:

To handle enquiries and bookings (Article 6(1)(b) – contract / steps before contract)
- responding to your messages, availability checks, reservations, confirmations, stay administration.
To comply with legal obligations (Article 6(1)(c))
- guest registration, accounting, invoicing, tax records, reporting where required by Romanian law.
To manage and improve our services and website (Article 6(1)(f) – legitimate interests)
- website security, preventing fraud/abuse, basic analytics to understand how our site is used.
Marketing communications (Article 6(1)(a) – consent, where applicable)
- only if you explicitly opt in (e.g., email offers). You can withdraw consent at any time.

4) How we collect your data

Directly from you (forms, email, phone, messaging apps, in-person).
Automatically through website technologies (cookies, server logs).
From booking platforms/partners if you use them (e.g., OTA channels), according to their terms.

5) Who we share data with (recipients)

We do not sell your personal data. We may share it with:

Service providers (processors) who help us operate (e.g., website hosting, email provider, analytics, booking engine, payment provider).
Professional advisors (accountant, legal counsel) as required.
Authorities where legally required (e.g., tax or public authorities).

Processors act under our instructions and appropriate contractual safeguards.

6) International transfers

If any providers store/process data outside the EEA, we ensure an adequate transfer mechanism (e.g., EU Commission adequacy decision or Standard Contractual Clauses) and additional safeguards where required.

7) Data retention (how long we keep data)

We retain personal data only as long as necessary for the purposes above:

Enquiries (no booking): typically up to 12 months.
Bookings and stay records: for the duration of the relationship and afterwards as needed for disputes.
Accounting/invoicing records: kept for the period required by Romanian law (commonly several years).
Guest registration records: kept as required by applicable Romanian regulations.
Website logs/analytics: typically up to 14 months (or as configured).

Exact retention periods may vary depending on legal requirements and operational needs.

8) Your GDPR rights

Subject to conditions and exceptions under GDPR, you may request:

Access to your personal data
Rectification of inaccurate data
Erasure (“right to be forgotten”)
Restriction of processing
Data portability (where applicable)
Objection to processing based on legitimate interests
Withdraw consent (if processing is based on consent)

To exercise your rights, contact us using the details in Section 1. We may need to verify your identity.

9) Complaints

You have the right to lodge a complaint with the Romanian supervisory authority:

ANSPDCP (Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal).
(You can find their current contact details and complaint procedure on their official website.)

10) Security

We use appropriate technical and organisational measures to protect personal data (e.g., access controls, secure hosting, limited data access, backups). No method of transmission or storage is 100% secure, but we take reasonable measures to reduce risk.

11) Children

Our services and website are not directed to children under 16. If you believe a child has provided data, contact us so we can delete it where appropriate.

12) Changes to this policy

We may update this policy from time to time. The “Last updated” date will reflect changes. Material changes will be posted on this page.

Cookie Policy (EU)

Last updated: 20/01/2026

1) What are cookies?

Cookies are small text files stored on your device when you visit a website. They help the site work and provide information to the site owner.

2) Types of cookies we use

We may use the following categories:

Strictly necessary cookies
Required for the website to function (e.g., security, page navigation). These do not require consent.
Preferences cookies
Remember settings (e.g., language).
Analytics cookies
Help us understand website usage (e.g., pages visited, time spent) to improve performance. Used only with consent where required.
Marketing cookies
Used to deliver relevant ads or measure advertising. Used only with consent where required.

3) Managing cookie consent

On your first visit, you may see a cookie banner allowing you to accept, reject, or customise non-essential cookies. You can change your choices at any time by [link to cookie settings] or by adjusting your browser settings.

4) Third-party cookies

Some cookies may be set by third parties (e.g., analytics providers, embedded maps, booking widgets). These providers may process data according to their own privacy policies.

5) How to control cookies in your browser

Most browsers allow you to delete or block cookies. If you block necessary cookies, parts of the website may not work.

Website Terms of Use (short)

Owner: Pensiunea Casa Bobu, Romania

By using this website, you agree that:

Content is provided for general information and may change without notice.
You will not misuse the website (e.g., attempt unauthorised access).
We are not liable for external websites linked from our site.
Bookings/enquiries are subject to confirmation by Pensiunea Casa Bobu.