Privacy Policy

This Privacy Policy applies to holztreppe.ro owned and operated by Buzoianu Residence. This Privacy Statement describes how we collect and use information, which may include personal data you provide on our website: holztreppe.ro. It also describes the choices available to you regarding how we use your personal data and how you can access and update this data.

Data Collection

The types of personal information we collect include:

• Your first name, last name, email address, phone number, and address;
• Credit card details (card type, credit card number, cardholder’s name, expiration date, and security code);
• Information about your stay, including arrival and departure dates, special requests, notes about your service preferences (including room type preferences, facilities, or any other services used);
• Information you provide regarding your marketing preferences or during participation in surveys, contests, or promotional offers.

You may choose at any time which personal data (if any) you wish to provide us. However, if you choose not to provide certain details, some of your transactions with us may be affected.

Data We Collect Automatically

When our website is used, we also automatically collect information, some of which may be personal data. This includes data such as language settings, IP address, location, device settings, device operating system, authentication information, usage time, requested URL, status report, user agent (browser version information), operating system, result (visitor or buyer), browsing history, user booking ID, and types of data viewed. We may also automatically collect data through cookies. For information about the use of cookies, click <a href=”https://holztreppe.ro/gdpr/”>here</a>.

Purposes of Processing

We use your personal data for the following purposes:

• A. Reservations: We use your personal data to complete and manage your online reservation.
• B. Customer Service: We use your personal data to provide necessary customer service.
• C. Customer Feedback: We may use your contact details to invite you via email to write a review for guests after your stay. This can help other travelers choose the accommodation that best suits them. If you submit a review, it may be posted on our website.
• D. Marketing Activities: We also use your data for marketing activities, as permitted by law. If we use your personal data for direct marketing purposes, such as commercial newsletters and marketing communications regarding new products and services or other offers we believe may be of interest to you, we will include an unsubscribe link that you can use if you do not wish to receive further messages.
• E. Other Communications: There may be other times when we will contact you via email, mail, phone, or SMS, depending on the contact details you share with us. These communications may be for various reasons:
  • We may need to respond to and resolve requests you have made.
  • If you have not completed an online reservation, we may send you an email reminder to continue your reservation. We believe this additional service is useful as it allows you to continue a reservation without having to search for accommodation again or fill in all reservation details from scratch.
  • When you use our services, we may send you a survey or invite you to write a review about your experience on our website. We believe this additional service is useful for you and for us, as it helps us improve our website based on feedback received.
• F. Analysis, Improvement, and Research: We use personal data for research and analysis purposes. We may involve a third party to do this on our behalf. We may share or disclose the results of such research, including to third parties, in an anonymous, aggregated form. We use your personal data for analytical purposes, to improve our services, enhance user experience, and improve the functionality and quality of our online travel services.
• G. Security, Detection, and Prevention of Fraud: We use information, which may include personal data, to prevent fraud and other illegal activities or copyright infringements. We also use this information to investigate and detect fraud. We may use personal data for risk assessment and security purposes, including user authentication. For these purposes, personal data may be shared with third parties, such as law enforcement authorities, in accordance with applicable law and external advisors.
• H. Legal Reasons: In certain cases, we need to use the information provided, which may include personal data, to resolve legal disputes or claims, for investigations and compliance with regulations, or to enforce an agreement or comply with legal requests from law enforcement authorities as required by law.

If we use automated means to process personal data that have legal effects or significantly affect you, we will implement appropriate measures to protect your rights and freedoms, including the right to obtain human intervention.

Legal Bases

• For purposes A and B, we rely on the fulfillment of a contract: The use of your data may be necessary to perform the contract you have with us. For example, if you use our services to make an online reservation, we will use your data to fulfill our obligation to complete and manage this reservation under the contract we have with you.
• For purposes C-H, we rely on legitimate interests: We use your data for our legitimate interests, such as providing the most relevant content for the website, emails, and newsletters, improving and promoting our products and services, and content on our website, as well as for administrative, fraud detection, and legal purposes. When using personal data for our legitimate interests, we will always balance your rights and interests in protecting your information against our rights and interests.
• For purpose H, we also rely, where applicable, on our obligation to comply with applicable laws.
• Where necessary, in accordance with applicable legislation, we will obtain your consent before processing your personal data for direct marketing purposes.

If required by applicable legislation, we will seek your consent. You may withdraw your consent at any time by contacting us at any of the addresses at the end of this Privacy Statement. If you wish to object to the processing described in purposes C-F and no opt-out mechanism is directly available (e.g., in account settings), to the extent possible, please contact office@holztreppe.ro.

International Data Transfers

The personal data transfers described in this Privacy Statement do not include transfers of personal data abroad.

Security

We follow reasonable procedures to prevent unauthorized access to and misuse of personal information. We use appropriate systems and procedures to protect information, including personal data. We also employ security procedures and technical and physical restrictions for accessing and using personal data on our servers. Only authorized personnel are allowed access to personal data in the course of their duties.

Data Retention

We will retain your information, which may include personal data, as long as we deem necessary to provide you with services, comply with applicable laws, resolve disputes with any party, and otherwise as necessary to operate our business, including for detecting and preventing fraud or other illegal activities. All personal data we retain will be subject to this Privacy Statement. If you have a question about a specific retention period for certain types of personal data we process about you, please contact us using the contact details included below.

Your Choices and Rights

We want you to control how your personal data is used by us. You can do this in the following ways:

• You can request a copy of the personal data we hold about you;
• You can inform us about any changes to your personal data or request us to correct the personal data we hold about you;
• In certain situations, you can request us to delete, block, or restrict the processing of the personal data we hold about you or to object to certain ways in which we use your personal data; and
• In certain situations, you may also request us to send the personal data you provided to a third party.

If we use your personal data based on your consent, you have the right to withdraw this consent at any time, subject to applicable law. Moreover, if we process your personal data based on legitimate interest or public interest, you have the right to object at any time to the use of your personal data in accordance with applicable legislation. We rely on you to ensure that your personal data is complete, accurate, and up-to-date. Please promptly inform us of any changes or inaccuracies to your personal data by contacting office@holztreppe.ro. We will address your request in accordance with applicable law.

Questions or Complaints

If you have any questions or concerns regarding the processing of your personal data or if you wish to exercise any of your rights under this notice, you are welcome to contact us at office@holztreppe.ro. You may also contact your local data protection authority if you have questions and complaints.

Changes to the Notice

As our business constantly evolves, this privacy statement may change from time to time. If you wish to review changes to this privacy statement periodically, we encourage you to visit this privacy statement to see the changes. If we make significant changes that will impact you (e.g., when we begin processing your personal data for purposes other than those specified above), we will contact you before starting this processing.