Stay and Play

Terms and Conditions

Agreement regarding the information contained in the site and its use:

Please read carefully the terms and conditions of use presented below before using or obtaining any materials, information, products or services through www.nationalgolf.ro. By accessing www.nationalgolf.ro., you agree to accept, without limitation or qualification, all these terms and conditions of use. If you do not accept these terms and conditions, please leave the www.nationalgolf.ro site.

1. Introduction. This document establishes the terms and conditions for the reservation and rental of the 5 villas within the National Golf & Country Club through our online reservation platform with electronic payment.

These conditions represent the contract between the owner of the villas (hereinafter referred to as the Provider) and the person making the reservation (hereinafter referred to as the Client) for the accommodation services offered.

By making a reservation on the site, the Client confirms that he has read, understood and fully accepted these terms and conditions.

The Provider reserves the right to modify the terms and conditions in the future, but any modifications will be published on the site, and reservations already confirmed will be governed by the version in force on the date of their confirmation.

2. Reservation and payment.

• All reservations will be paid in advance.
• Reservations are made online, through our reservation system on the site, by email: contact@nationalgolf.ro, by phone: 0783.003712.
• All reservations made are accompanied by a confirmation email, which we ask you to check.
• If there is a discrepancy between the request and the confirmation, please notify the reservations department at the email address contact@nationalgolf.ro for remediation.
• The reservation is considered valid only after completing the reservation form with real data and paying in full for the stay through the available online payment platform (by bank card). The client is responsible for the correctness and authenticity of the data provided when booking (last name, first name, contact details, etc.) – any error (e.g. incorrect email address or phone number) may lead to the impossibility of honoring and confirming the reservation. All rates displayed on the site are in RON (lei) and include applicable taxes (VAT and any local taxes).
• We reserve the right to change the prices displayed depending on the season or other criteria, without prior notice. However, such changes will not affect reservations already confirmed at a certain rate.
• Payment is made exclusively online, via a secure connection (SSL) to our authorized payment processor; major credit/debit cards are accepted, and the transaction is processed securely. Once the payment is confirmed, the Customer will receive a booking confirmation email, which details the accommodation services booked, the period, the total price paid and relevant information for the stay – this email constitutes proof of the firmly confirmed reservation.

3. Check-in and Check-out. Check-in begins at the standard time of 14:00 on the day of arrival, and the villa must be vacated no later than 11:00 on the day of departure. If the Client requires an earlier check-in or a late check-out, the Client must contact the Provider in advance, who can approve it based on availability (additional costs may apply). Upon arrival, all guests must present a valid ID (ID card or passport) for registration, according to the legislation in force, the minimum age for accommodation is 18 years.

The number of people accommodated in the villa cannot exceed the number confirmed in the reservation, each additional unannounced guest may result in refusal of accommodation or additional costs. The Provider also reserves the right to allocate a specific villa or room in the villa upon check-in (if there are similar options), depending on availability at the time of arrival, but ensuring the reserved accommodation category.

Rates and Accommodation Conditions for Adults and Children:

1. a) The prices shown are per house/villa, per night and include VAT at the rate applicable at the time of booking. If the VAT rate changes between the date of booking and the date of your stay, we may adjust the VAT rate, but the price you pay will remain the same.
2. b) Meals, drinks and alcohol, as well as any other additional services, are not included in the room price, but you may add them to your reservation during the booking process or they may be available during your stay.
3. c) The rates for one night’s accommodation are 400 euros including VAT for a maximum of 2 people, for more than 2 people an additional fee of 200 euros including VAT will be charged.
4. d) Children under 6 years old benefit from free accommodation; a maximum of 2 children under 6 years old are accepted, for children between 6-12 years old 50% of the adult rate is paid.
5. e) The rate includes breakfast, free access to the swimming pool during the opening hours of the location, free sun loungers and beach towels.
6. f) Lunch and dinner can be served “à la carte” at The Green Restaurant only with prior reservation, phone: +40783.003704.

We note that the availability transmitted may change at any time, depending on the reservations we receive.

4. Client’s obligations and responsibilities. The Client (and all guests in his/her group) is obliged to use the rented villa responsibly and to respect the rules below during the stay:

• Respect for the property: To keep the villa, furniture and equipment in good condition during the stay. Any defect, deterioration or shortage found must be reported as soon as possible. The Client is materially responsible for any damage or loss caused to the villa and agrees to pay the cost of any necessary repairs or replacements. In the event that such damage is discovered after the Client’s departure (without having been reported), the Provider reserves the right to charge the amount of the damage from the credit card left as a guarantee at check-in.
• No smoking and pets: Smoking is strictly prohibited inside the villas, in accordance with applicable health and fire legislation. Violation of the smoking ban in the accommodation premises may result in a cleaning fee or a fixed penalty (e.g. the equivalent of 100–150 euros) for the sanitation of the spaces affected by smoke. Pets are also not allowed in the villas, unless the prior written consent of the Provider has been obtained (in principle, the policy is no pets on the premises).
• Quiet and behavior: The Client undertakes to respect the quiet and privacy of other residents or guests in the resort. Between the hours of 22:00 and 08:00 there is a quiet hour, during which parties, loud music or any activities that may disturb the neighbors are prohibited. Civilized and decent behavior is also required in the villas and in the common areas of the complex. The Provider reserves the right to refuse accommodation or to interrupt the stay of any person who is intoxicated, recalcitrant or who causes discomfort and damage to others or the property. In such extreme cases, the Client may be evicted without reimbursement of the remaining nights, if his behavior seriously violates the rules and norms of civil coexistence.
• Prohibition of unauthorized activities: It is prohibited to use the property for purposes other than tourism (recreational accommodation). It is not allowed to organize events or private parties in the villa without the prior approval of the Provider. It is also prohibited to sublet or transfer the right to use the villa to third parties not provided for in the reservation.
• Security and personal belongings: The Client is responsible for ensuring the security of his personal belongings during the stay. Please lock the doors and windows when leaving the villa and take care of valuables. The provider is not responsible for any lost, forgotten or stolen items from the villas, but will provide support (if possible) in their recovery. The common areas of the resort may be video-surveilled for your safety and the property; by accepting the accommodation, you give your consent to this, within the limits of the law.

The client has the right to receive the villa in good condition, clean and prepared according to the 5-star standards of the complex. If you notice any maintenance or cleanliness issues upon arrival, please notify us immediately for remediation. During the stay, cleaning or maintenance staff will only enter the villa with your consent, except in emergency situations (e.g. flood, fire). For special requests (extra bed, baby cot, extra sets of towels, etc.), please contact us – we will try to satisfy your requirements to the best of our ability.

Limitation of liability. The Provider makes every effort to keep the information on the website about the villas (descriptions, photos, rates, availability) up-to-date and correct. However, we cannot guarantee that the website will always be completely free of technical or display errors. The Provider cannot be held liable for any damages caused by the non-functioning or malfunctioning of the booking website, by any problems with the internet network or the payment processor, which could temporarily prevent bookings from being made. In such cases, we will try to resolve technical problems as soon as possible. Also, force majeure (unforeseen events such as natural disasters, extended power outages, fires, government restrictions, etc.) may lead to the cancellation or modification of the booking; in such a situation, the Provider’s liability is limited to the reimbursement of the amounts paid by the Client for the unexecuted period of the stay or to the offer of a rescheduling, in agreement with the Client.

Applicable law. These terms and conditions are governed by Romanian law. Any disagreements arising between the parties will be resolved amicably; if this is not possible, disputes will be resolved by the competent Romanian courts.

If you’d like to link these terms and conditions please follow this link.

Privacy Policy

This policy describes the personal data collected from customers and users of our booking platform, the purposes for which we use it and how we protect it, ensuring their confidentiality. We are committed to respecting the privacy of our customers and to processing personal data in accordance with applicable data protection legislation.

Personal data collected. In order to make online reservations and provide accommodation services, we may request certain personal information from you. This may include, but is not limited to: first and last name, contact details (telephone, email address), postal address (for billing, if applicable), details required for payment (e.g. bank card or payment transaction details), as well as information regarding the guest’s accommodation preferences or special requirements. Providing this data by you is necessary in order to process the reservation – without it, we would not be able to confirm or honor the accommodation request. In certain situations, we may also collect other data that you voluntarily submit to us (e.g. comments, feedback, information sent via email or contact form).

Purposes of processing. We use the personal data collected exclusively for the purposes for which they were provided, mainly to provide you with the accommodation services you have booked. Thus, we process the data for: managing and confirming reservations (including issuing confirmations and related tax documents), contacting you in connection with the reservation (to send you important information about check-in, access rules to the resort, any changes or offers related to the stay), as well as to fulfill our legal obligations (for example, registering guests according to the requirements of the authorities or statistical reporting of tourist activity). Also, with your prior consent, we may use your contact details (email, telephone) to send you news or promotional offers related to our villas or the National Golf & Country Club services that you may be interested in. At any time, you can unsubscribe from such marketing communications, either using the unsubscribe link in the email, or by contacting us directly with this request. We emphasize that we do not send unsolicited commercial messages – we are 100% against spam and you will only receive marketing communications if you have explicitly chosen this.

Data protection and security. We have taken reasonable technical and organizational measures to ensure the security of your personal data. Our website uses a secure SSL connection for data transmission, which means that the information entered when booking (including payment details) is encrypted and protected against interception. The database that stores customer information is protected by advanced security mechanisms, with access to the data only allowed to authorized and trained personnel in terms of confidentiality. We make every effort to ensure that the information you provide is kept safe and processed carefully, for the legitimate purposes in mind. We also constantly update our internal security policies and ensure that any third party that processes data (for example, the online payment processor) also offers adequate security guarantees.

Disclosure of data to third parties. We respect the confidential nature of data and do not sell, rent or disclose your personal information to third parties for purposes independent of those for which you provided us with this data. We will only transmit your personal data to third parties in the following specific situations: (1) to processors involved in processing the service, for example the company providing the online payment processing service or the reservation system – these partners are in turn obliged to respect the confidentiality of the data and to use it exclusively for the purpose of providing the respective service; (2) to public authorities or institutions, if this is required by law (for example, transmitting accommodation records to the competent authorities or providing information to tax authorities, upon their legal request); (3) in cases of protecting the rights and legal interests of the villa owner or other parties – for example, disclosure to lawyers, consultants or courts, if necessary for the establishment, exercise or defense of a legal right. Outside of these limiting situations, your data will not be shared with third parties without your explicit consent. If in the future it becomes necessary to transmit data to a third party for another purpose (e.g. marketing partners), we will inform you and, if required by law, we will request your consent in advance.

Rights of the data subject. We ensure that we respect your rights regarding the protection of personal data. In accordance with applicable law, you have the following rights: the right of access to personal data (you can request confirmation that we are processing your data and details about it, as well as a copy of the data); the right to rectification of data (you can request the correction of any inaccurate information or the completion of incomplete data); the right to erasure of data (“the right to be forgotten” – you can request the deletion of personal data if they are no longer necessary for the stated purposes, and the law allows us to delete them); the right to restriction of processing (in certain situations you have the right to request the temporary suspension of data processing, for example if you contest their accuracy or if the processing is unlawful); the right to object to processing (you can object to the processing of your data for legitimate reasons related to your particular situation, and in any case you can object at any time to processing for direct marketing purposes, without any justification); the right to data portability (you have the right to receive the data provided by you in a structured, commonly used and machine-readable format, and/or to request the transmission of these data to another controller, if technically feasible). Also, if the processing is based on your consent (for example, subscribing to the newsletter), you have the right to withdraw your consent at any time; the withdrawal of consent will not affect the lawfulness of the processing carried out before the withdrawal. To exercise any of these rights, you can contact us at any time at the contact details provided on the site (e-mail or postal address). We will respond to your requests as soon as possible, but no later than the legal deadline of 30 days, except in justified cases when this period may be extended (you will be informed of any extension, if applicable). If you believe that your data protection rights have been violated, you have the right to file a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP).

However, we encourage you to contact us before contacting the authorities to give us the opportunity to resolve any dissatisfaction you may have with your data amicably.

Data retention. Personal data collected for reservations and accommodation will only be stored for the period necessary to fulfill the stated purposes. In general, we will retain the data for the duration of our contractual relationship (until the end of the stay) and thereafter, for as long as the law requires us to (for example, billing data must be retained according to the accounting law for 5-10 years). Data that is no longer needed will be securely deleted or anonymized. We will periodically update our databases and delete or anonymize information that is no longer current or relevant to the purposes for which it was collected.

Privacy of minors. Our accommodation services are not directly intended for unsupervised minors (persons under 18) – we do not accept reservations made by minors, and minors can only be accommodated together with their parents or legal guardians. We do not knowingly collect personal data from minors, and if we discover that such data has been inadvertently provided, we will delete such information.

Other clarifications. Our site may contain links to other websites (partners, social networks, etc.). This privacy policy applies only to the data collected by us. We recommend that you consult the privacy policies of any third-party sites you visit, as we do not assume responsibility for how they process data.

For any further questions about how we handle your personal data or to request information from us, you can contact us at the email address indicated on the site (contact@…ro) or at the telephone number displayed. We will treat any privacy-related request seriously and will make every effort to respond to you promptly. By continuing to use our booking platform and/or by making a reservation, you confirm that you have read this Privacy Policy and that you agree to the processing of data under the above conditions.

Order delivery policy (provision of accommodation services)

Reserving services. To reserve villas within the National Golf & Country Club, use our online booking platform. It works similarly to an online store, but the object of the “order” is a service (staying at the villa), not a deliverable physical product. Confirming an online reservation involves completing the following steps: selecting the desired period and villa, filling in the requested customer data, accepting the terms and conditions, and paying the cost of the stay online. After successfully completing the payment, you will receive a reservation confirmation email, which contains its details (reserved villa, check-in and check-out dates, number of people, amount paid, etc.) – this email serves as proof of the reserved service and confirms that your “order” (reservation) has been registered.

Please check the accuracy of the data in the confirmation and contact us immediately if you notice any errors or omissions.

Provision of the service (delivery). As it is an accommodation service, its delivery does not involve the shipment of any physical goods, but the provision of the reserved villa at the agreed time. Practically, the service is considered provided/delivered in its entirety when the client arrives at the location and checks in, receiving access to the reserved villa. Thus, the date of the start of the stay (check-in date) represents the time of delivery of the service to the client. The location of the provision is the National Golf & Country Club (Niculești commune, Dâmbovița county, Romania), at the villa specified in the booking confirmation. The client will receive the key (or digital access, as the case may be) and the instructions necessary to use the villa upon arrival – this is the equivalent of handing over the goods in the case of a product, but here the right to use the property for the reserved period is handed over.

“Delivery” conditions. The client is obliged to present himself at the reception/reception office of the complex on the day of the start of the stay, at the time set for check-in (or to announce if he is late/presenting later on the same day). Our staff will ensure that the reserved villa is ready and available for you at the time of check-in. In the unlikely event that, for reasons related to the Provider (e.g. major technical problems at the villa, accidental overbooking or other unforeseen circumstances), we cannot make the reserved villa available to you, we undertake to notify you as soon as possible and to offer you either an alternative accommodation unit with equivalent conditions (if available and agreed by you), or a full refund of the amount paid, if relocation is not possible. Any such exceptional situation will be treated with priority and in a transparent manner, so that the inconvenience created is minimal.

Failure to deliver due to reasons attributable to the client. If the client does not show up at the location on the day of the reservation (no-show) or does not use, for their own reasons, the reserved accommodation service, the Provider will still be considered to have fulfilled its obligation to deliver the service on the agreed date. Failure to show up or voluntarily abandoning the stay on the part of the client does not entitle the client to any refund of the amounts paid, according to the cancellation policy (see below). However, we recommend that the client, if they can no longer honor the reservation, notify us as soon as possible (by email or phone), so that the villa can be offered to other interested parties. Advance notification of cancellation, even without reimbursement, is a courtesy gesture that helps us not to keep the villa unavailable unnecessarily.

Confirmations and tax documents. Once the service is delivered (check-in), the client will be provided, upon request, with the tax invoice for the stay (if it has not already been sent electronically). Typically, the electronic invoice is automatically sent by email when the payment is processed or around the check-in date. This serves as a fiscal document that certifies the payment for the accommodation service. At the end of the stay (check-out), there is no delivery document in the traditional sense (such as a notice), but the customer may be asked to sign an arrival-departure form (in accordance with legal requirements in tourism) confirming that he/she has benefited from the accommodation during that period.

Return/non-refund policy. Given the nature of the service (the provision of accommodation services on a fixed date), there is no material “delivery” that the customer can return. Basically, the return in the case of accommodation services refers to the cancellation of the reservation (renunciation of the services), an aspect detailed in the Cancellation Policy section below. Once the service has been provided (i.e. the stay has been fully consumed), it is no longer possible to “return” it. If, however, you have encountered any major problem related to the service received, we encourage you to notify us immediately in order to find an amicable solution (for example, a possible compensation or special offer for a future visit, depending on the nature of the situation).

Cancellation Policy for the Order (Reservation)

This policy regulates the conditions under which you can cancel a villa reservation at the National Golf & Country Club and the consequences of cancellation in terms of refunding the amounts paid. By making a reservation on our platform, you understand and agree to the cancellation conditions below.

Right to cancel. The client has the right to cancel their reservation at any time, before the check-in date, without any time restriction (we do not impose a deadline for the cancellation notification). Cancellation can be made either by accessing the dedicated section of the online platform (if this functionality is available for your account), or by sending an explicit cancellation request to us, by email to the official contact address or by phone. We strongly recommend that you make the cancellation in writing (email), in order to remain proof of your request and to receive the cancellation confirmation back in writing.

Financial consequences of cancellation – non-refundable reservations. All reservations made through our system are non-refundable, meaning that the amounts paid will not be refunded in the event of cancellation, regardless of when it is requested. This strict policy is motivated by the nature of the offer: our villas have limited availability, and blocking a villa through a reservation prevents other potential customers from planning their stay. Therefore, if you cancel your reservation, the amounts paid will be retained as compensation for the unavailability of the villa during the reserved period and for the losses associated with the impossibility of renting it to other customers. However, no additional cancellation fees will be charged beyond the retention of amounts already paid (for example, there are no cancellation processing fees). Basically, the cancellation penalty is the full value of the stay paid in advance.

For clarity: if you have paid in full for the stay at the time of booking (a mandatory condition on our platform), that amount is fully non-refundable. If, in a special context, a partial advance payment has been agreed upon at the time of booking (rare situation and only with special approval), that advance is also non-refundable. In both scenarios, cancellation will not generate any refund to the client.

Cancellation procedure. If you wish to cancel, please notify us as soon as possible. After receiving the cancellation request, we will send you a cancellation confirmation by email, mentioning the number of the cancelled reservation, the date of cancellation and the amount withheld (100% penalty). From the moment of confirmation of the cancellation, your reservation is considered closed, and the villa becomes available again for other clients. If you do not receive our cancellation confirmation within 24 hours of the request, it is possible that we did not receive the request – in this case, please contact us by phone urgently.

Exceptions and special situations. Our standard policy is therefore not to refund amounts for reservations canceled by the client. The following extraordinary situations are an exception (only to the extent required by law or the goodwill of the owner):

• Force majeure on the client’s part: if you can demonstrate with supporting documents that you were unable to honor your reservation due to force majeure (e.g. natural disaster in the area of residence, serious accident, hospitalization, movement restrictions suddenly imposed by the authorities, etc.), the management of the complex may analyze each case separately. Depending on the circumstances, we may offer either to reschedule the stay for a later agreed date, or to issue a voucher (in the amount of the amount initially paid) to be used for another stay, within 3 months. Such compensatory measures are not guaranteed and remain at our discretion, in a spirit of understanding towards the client’s difficult situation.
• Cancellation at the Provider’s initiative: in very rare cases, the Provider may have to cancel the reservation (for example, if there are serious technical problems at the villa, if the resort cannot operate due to force majeure or other unforeseen reasons). In such a situation, the client will receive a notification as soon as possible and will be fully refunded any amount paid, within a maximum of 7 working days from the notification, unless an amicable rescheduling agreement is reached. Cancellation by the Provider will always be accompanied by either the offer of an alternative solution (if possible) or a refund – the client can choose the preferred option.

No-show and interruption of the stay. If the client does not show up for check-in on the first day of the reservation and has not notified us in advance, we will retain the entire amount paid and the reservation will be considered automatically canceled after a grace period has passed (usually, if by the check-out time of the next day the client still does not show up and does not contact us, it is declared a no-show). Similarly, if during the stay the client decides to leave earlier than the reserved period (early check-out), the unused nights will not be refunded. In both cases, the villa remains at the Provider’s disposal to be rented to other clients, and the original client is not entitled to financial compensation for unused services, because the rate paid also covers these situations (being a fixed rate for which the client assumed the right to use the villa for the entire reserved period, regardless of whether he actually used it or not).

Reservation modification policy. If you wish to change the booking period or other details (e.g. change the number of guests, extend or shorten your stay, choose a different villa, etc.), please contact us as soon as possible. We will do our best to assist you with the desired change, subject to availability. Please note, however, that any significant change (such as changing the dates of your stay) is essentially a cancellation of the original booking and a new one. Depending on the time of request and the rate policy, additional costs may apply: for example, if you wish to move your stay to a season with higher rates, you will be asked to pay the price difference; if you wish to reduce the number of nights, the amounts for the nights removed will not be refunded (this is equivalent to an early departure, which is non-refundable). Any agreed change will be confirmed in writing (by email) by our team, specifying the new details and any additional costs or amounts lost (if applicable).

By implementing this cancellation policy we want to be as transparent as possible regarding the conditions of non-refundable reservations, while giving you the freedom to cancel if the situation requires it, but assuming the related costs. We thank you for your understanding and remain at your disposal for any further clarifications. When making a reservation on our site, you will be explicitly asked to confirm that you agree to the above terms, to avoid any further confusion.

GDPR Policy (Personal Data Protection)

National Golf & Country Club (and the owner of the 5 villas offered for rent) is committed to processing the personal data of its customers and users in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, also known as GDPR. This policy aims to inform you about how we collect, use, protect and allow you to control your personal information, ensuring full respect for your rights.

Data Controller. The controller of your personal data is the company/person that manages the villas in National Golf & Country Club and the online booking platform (hereinafter referred to as the Controller). The contact details of the Operator for any data protection-related matters are: [company name], address [full address], email [email address for GDPR communications], phone [phone number]. According to the legislation, the Operator may also designate a Data Protection Officer (DPO); if one has been designated, the DPO’s contact details are available on our website in the GDPR contact section. In the absence of a dedicated DPO, any request related to personal data will be handled by our management team.

Processing principles. The processing of personal data by the Operator is guided by the following fundamental principles, in accordance with the GDPR:

• Lawfulness, fairness, transparency: Data is processed lawfully, fairly and transparently towards the data subject (the customer).
• Purpose limitations: We collect and process data only for specified, explicit and legitimate purposes (such as booking and providing tourist services, according to Art. 6 para. (1) lit. b of the GDPR – processing necessary for the performance of a contract, or compliance with legal obligations, according to Art. 6 para. (1) lit. c).
• Data minimization: We only request personal data that are adequate, relevant and limited to what is necessary for the stated purposes (the “data minimization” principle).
• Accuracy: We keep data up to date and correct; we take reasonable steps to ensure that inaccurate data is rectified or deleted.
• Storage limitation: We store data for a period that does not exceed the period necessary to fulfill the purposes for which it was collected, except in situations where the law requires a longer archiving period.
• Integrity and confidentiality: We process data in a manner that ensures appropriate security, protecting it against unauthorized or unlawful processing, against accidental loss, destruction or damage, through appropriate technical and organizational measures.
• Responsibility: The operator is responsible for complying with the above principles and can demonstrate compliance with them at any time.

Categories of data processed. The categories of personal data that we process have been detailed in the Privacy Policy (previous section). In summary, these include identification and contact data (name, surname, telephone, email, address), data necessary for booking and accommodation (details of stay, preferences, observations provided), transaction data (payments made, billing details) and any data collected by automated means when you use the website (such as IP addresses, online identifiers – see Cookies Policy for details). We do not intentionally collect or process special categories of data (such as sensitive data about racial origin, political opinions, religious beliefs, health, sexual orientation, etc.) and please do not provide us with such information. The only exception could be health data when you voluntarily communicate certain aspects to us (e.g. if you have special accessibility requirements, food allergies relevant to our dining services, etc.), but these will be used strictly to accommodate your needs and in no case for any other purpose.

Legal basis for processing. Depending on the type of data and the purpose of the processing, we base our processing on one or more of the legal grounds provided for by the GDPR:

• Performance of the contract – Art. 6 (1) lit. b GDPR: most of the data you provide to us when booking are processed to conclude and perform the accommodation contract (e.g. we use your name and details to register your booking and provide you with the requested services).
• Legal obligation – Art. 6 (1) lit. c GDPR: certain processing is required by law (e.g. collecting ID/passport data at check-in, as required by police and tourism authorities, or retaining invoices containing personal data in accordance with tax legislation).
• Legitimate interest – Art. 6 (1) lit. f GDPR: in some cases, we may process data to protect our legitimate interests (e.g. using video surveillance cameras in common areas for property and customer security, preventing credit card fraud, defending our rights in the event of disputes). In assessing the legitimate interest, we ensure that we have analysed the impact on your rights and that appropriate safeguards are in place (e.g. private areas such as the interior of villas are not video-surveilled – only the exterior of the buildings and common access routes).
• Consent of the data subject – Art. 6 (1) lit. a GDPR: for direct marketing activities (newsletters, promotional offers by email) or other situations where the law requires consent (e.g. optional cookie data processing), we will request your free and explicit consent. You can withdraw your consent at any time, without affecting the lawfulness of the processing prior to withdrawal.

Rights of data subjects. GDPR grants data subjects (i.e. you, as a customer/user whose data we process) a number of important rights, which we respect and facilitate their exercise. The list of rights was also presented in the Privacy Policy, but we repeat it here for completeness:

• Right of access – You have the right to obtain from us confirmation as to whether or not we are processing personal data concerning you, and if so, to have access to that data and information on how it is processed.
• Right to rectification – You have the right to request us to correct inaccurate personal data concerning you or to complete incomplete data (including by providing a supplementary statement).
• Right to erasure (“right to be forgotten”) – You can request that we erase your personal data, in cases provided for by law (for example, if the data is no longer necessary for the purposes for which it was collected, you have withdrawn your consent and there is no other legal basis, you have objected to the processing and there are no overriding legitimate reasons, the processing was unlawful, etc.). Please note that the right to erasure is not an absolute right – for example, we cannot erase data that we are legally obliged to keep for a certain period.
• Right to restriction of processing – You have the right to obtain restriction of processing in certain situations (for example, if you contest the accuracy of the data, for the period necessary for verification; if the processing is unlawful but you do not want the data to be erased; if we no longer need the data, but you request us to keep it for the establishment, exercise or defence of legal claims; if you have objected to the processing, for the period during which it is verified whether our legitimate interests prevail).
• Right to object – You may object, on grounds relating to your particular situation, to the processing of your personal data based on our legitimate interests. We will comply with your request to object, unless we have compelling legitimate grounds for the processing which override your interests, rights and freedoms or the purpose of the processing is the establishment, exercise or defence of legal claims. You can also object to the processing of your data for direct marketing purposes at any time, without any justification – in this case, we will immediately cease processing for this purpose.
• Right to data portability – You have the right to receive the personal data you have provided to us, in a structured, commonly used and machine-readable format, and you have the right to transmit these data to another controller, if the processing is based on consent or the performance of a contract and is carried out by automated means. To the extent technically feasible, you have the right to have the data transmitted directly from us to the other controller indicated by you.
• Right not to be subject to an individual automated decision – You have the right not to be subject to a decision based solely on automated processing (including profiling) that produces legal effects concerning you or significantly affects you. (Note: In our booking activity, we do not make decisions based solely on algorithms, without human intervention, that significantly affect you).
• Right to address the supervisory authority or the courts – If you consider that your rights under data protection legislation have been violated, you have the right to file a complaint with the National Authority for the Supervision of Personal Data Processing (ANSPDCP) in Romania. Also, regardless of the administrative complaint to the ANSPDCP, you have the right to address the competent courts.

We undertake to facilitate the exercise of the above rights. For any request, you can contact us at the details mentioned above (in the “Data Controller” section). We will respond to legitimate requests without undue delay, and in any case within one month of receipt, which may be extended by a maximum of two months depending on the complexity and number of requests (you will be informed if any extension occurs). The refusal of any request (for example, the refusal to delete data that we are legally obliged to keep) will always be motivated and the reasons will be explained to you.

Data security measures. The operator has implemented appropriate technical (IT) and organizational measures to ensure a level of security appropriate to the risks presented by the processing. These measures include, but are not limited to: access control to IT systems (only authorized persons have access to personal data, based on the need-to-know principle), encryption of sensitive data in transit (such as the transmission of payment data via SSL on the website), anonymization or pseudonymization of data where possible, regular backups and storage in secure environments, up-to-date IT security solutions (firewall, antivirus, intrusion detection systems), as well as training of personnel on data confidentiality. We have also concluded data processing contracts or agreements with all partners or suppliers who may come into contact with customer personal data (e.g., web hosting provider, payment processor), in which they are legally obliged to maintain similar data protection standards. In the unlikely event of a security incident (breach) that could significantly affect your rights and freedoms, we will follow the legal procedures for notifying authorities and data subjects, in accordance with the GDPR.

International data transfers. As a rule, we store and process customer personal data in Romania or in EU/EEA member states. If, however, for certain processing, we transfer data outside the European Economic Area (e.g., backup storage on cloud servers in the USA), we will ensure that there are appropriate safeguards in place in accordance with the GDPR – such as the existence of an adequacy decision of the European Commission for the respective country or the conclusion of standard contractual clauses with the recipient of the data. Any such transfer, if any, will be explicitly mentioned in the privacy or cookie policy, as applicable, and you will be informed of your rights and means of obtaining a copy of the transferred data.

Data processing by third parties. In our activity, we use the services of third parties to facilitate the provision of services to you – e.g., IT services, email services, payment processing, accounting, etc. Some of them act as processors of the Controller (i.e. they process personal data strictly in our name and on our behalf, according to our instructions, without determining their own purposes). With each such processor, we have concluded a processing agreement that covers the GDPR data protection requirements. We ensure that our processors process data only for the agreed purposes and do not use it for their own interests. Also, to the extent that we use third-party platforms (for example, an external online booking system or an email marketing engine), we will specify this in our documentation and make the privacy policies of those third parties available to you, if applicable.

GDPR Policy Update. This policy may be updated periodically to reflect legislative changes, technological developments or changes in our data processing operations. The most recent version will be published on this page, mentioning the date of the last update. We encourage you to check this page periodically to stay up to date with any news. If we make substantial changes (for example, if we decide to process data in a significantly different way than initially stated), we will notify you through the available contact channels (e.g. email) or at check-in, to inform you of the new provisions.

By using our booking platform and providing your personal data, you consent to the processing of such data in accordance with this GDPR Policy. If you do not agree with any of the conditions mentioned, please let us know your reservations before continuing with the booking process – we are open to clarifying any doubts. The security of your data is a priority for us and we will do our best to provide you with a pleasant and secure experience, without compromising on privacy.