Privacy Policy

LEGAL NOTICE, PRIVACY POLICY AND COOKIE POLICY

The Romanian-language version is the principal and governing version of this legal and privacy information. The English version is provided to make the information accessible to English-speaking visitors.

I. LEGAL AND PROVIDER INFORMATION

1. Website operator

The website casa-sommer.ro is operated by:

ARION ROSINA ANETA PFA
Str. Decebal, Nr. 86
515850 Petrești
România

CUI: 1183311833
VAT number: Not paying VAT
Trade Register / registration number: F1/38/2021
Email: arion.petrest@yahoo.com
Telephone: 0040 747 948 055

Where the accommodation activity is subject to a mandatory tourism classification, licence or authorisation:

Tourism classification: CAEN 5520

2. Purpose of the website

The website provides information about a guesthouse and holiday accommodation.

Visitors may use the website to enquire about the availability of rooms or accommodation.

3. An enquiry is not a booking

Submitting a contact or availability enquiry through casa-sommer.ro does not constitute a binding booking and does not automatically create a contract.

The form is used solely to send a message or availability enquiry to the operator.

A booking becomes valid only following a subsequent confirmation or agreement by the operator, for example by email or telephone, in accordance with the terms communicated to the guest.

4. Prices

Where prices are published on the website, information concerning VAT and any other legally required elements of the price will be provided in accordance with applicable law.

II. PRIVACY POLICY

1. Data controller

The controller responsible for the processing of personal data through this website is:

ARION ROSINA ANETA PFA
Str. Decebal, Nr. 86
515850 Petrești
România

CUI: 1183311833
VAT number: Not paying VAT
Trade Register / registration number: F1/38/2021
Email: arion.petrest@yahoo.com
Telephone: 0040 747 948 055

No data protection officer has been appointed to the extent that the appointment of a data protection officer is not legally required.

2. Data processed when you make an enquiry

When you submit an enquiry through the website, the following personal data may in particular be processed:

  • your name;
  • your email address;
  • your telephone number;
  • the contents of your message;
  • information concerning the requested dates or room, where included in your message.

The purpose of processing is to respond to your enquiry, check availability and, where appropriate, prepare a possible subsequent booking.

The principal legal basis is Article 6(1)(b) of Regulation (EU) 2016/679 (GDPR), where processing is necessary in order to take steps at your request prior to potentially entering into a contract.

For general messages that are not intended to prepare a booking or contract, processing may be based on Article 6(1)(f) GDPR. The legitimate interest is the handling and answering of communications addressed to the operator.

3. Technical handling of the enquiry form

According to the current technical configuration, information entered into the enquiry form is not additionally stored in a WordPress database.

When the form is submitted, the information is sent to the operator as an email message.

Incoming messages are received and managed using Yahoo’s email service.

4. Yahoo email service and international transfers

The operator uses a Yahoo email account to receive and manage messages.

Personal data contained in such messages may therefore be processed within Yahoo’s technical infrastructure.

Yahoo is an international service provider. According to information provided by Yahoo, personal data may, in certain circumstances, also be processed in or transferred to countries outside the European Economic Area, including the United States.

Yahoo states that, depending on the circumstances, international transfers are protected using mechanisms recognised under European data protection law, including European Commission adequacy decisions, Standard Contractual Clauses and, where applicable, the EU-U.S. Data Privacy Framework.

5. Retention of enquiries

Enquiries that have not become booking, payment, invoice or contractual records are retained until 1 January of the calendar year following the year in which the enquiry was received.

On that date, enquiries from the preceding calendar year are deleted.

Example: enquiries received during 2026 are deleted on 1 January 2027.

This rule particularly concerns enquiries retained in the email account. It does not apply to records which, as a result of a subsequent confirmed booking, become subject to statutory tax, accounting or other retention obligations.

6. Data processed following an actual booking

If an enquiry subsequently results in a confirmed booking or accommodation contract, additional data required to perform the contract or comply with legal obligations may be processed.

Such information may include, depending on the circumstances:

  • first and last name;
  • contact details;
  • address;
  • number of guests;
  • dates of stay;
  • billing information;
  • payment information;
  • information required for contractual, accounting or tax records;
  • identification or guest registration information where collection is required by legislation applicable to accommodation providers.

The applicable legal bases may include:

  • Article 6(1)(b) GDPR for performance of the contract;
  • Article 6(1)(c) GDPR for compliance with legal obligations, including applicable tax, accounting or guest-registration obligations;
  • Article 6(1)(f) GDPR where a justified legitimate interest exists, for example the establishment, exercise or defence of legal claims.

Documents subject to statutory retention obligations are retained for the period required by the applicable tax, accounting or other legislation.

7. Website hosting

The website is hosted using services provided by:

ROMARG / romarg.com

When a website is accessed, the hosting server may process technical access information necessary to provide, secure and operate the website. Such information may include:

  • IP address;
  • date and time of access;
  • page or resource requested;
  • technical browser and device information;
  • server error or security information.

Such data is processed only insofar as necessary to provide the website, ensure its stability and security, diagnose errors and prevent misuse.

The legal basis is Article 6(1)(f) GDPR. The legitimate interest is the secure and reliable operation of the website.

Technical log information is retained only for as long as necessary for technical or security purposes or according to the applicable hosting settings and retention periods.

8. WordPress

The website uses the WordPress content management system.

WordPress is used to provide and administer the website.

Visitors are not provided with user accounts or customer login facilities.

Functional plugins used by the website, including functionality required for the multilingual website, are not, according to the information currently available to the operator, used for advertising, user profiling or behavioural analytics.

9. Services not currently used

According to the current configuration, the website does not use:

  • Google Analytics;
  • Google Tag Manager;
  • Google Ads Conversion Tracking;
  • Meta/Facebook Pixel;
  • Facebook, Instagram, TikTok or LinkedIn plugins;
  • embedded Google Maps;
  • embedded YouTube or Vimeo videos;
  • reCAPTCHA or hCaptcha;
  • online payment systems;
  • embedded Booking.com or Airbnb booking systems;
  • newsletters;
  • customer accounts;
  • Google Fonts loaded from Google servers.

If this technical configuration changes, this Privacy Policy will be updated accordingly.

Where prior consent is required by law, the relevant service will not be activated before the required consent has been obtained.

10. Recipients of personal data

In the ordinary course of business, personal data submitted through the website is not disclosed to cleaning companies, key services or similar independent service providers.

Where necessary for operation of the technical infrastructure, personal data may be processed by service providers used by the operator, in particular:

  • ROMARG as hosting provider;
  • Yahoo as email service provider.

Personal data may also be disclosed to public authorities where required by law.

11. Requirement to provide personal data

Providing personal data through the enquiry form is voluntary.

However, without sufficient contact information and details concerning the enquiry, the operator may be unable to check availability or respond to the request.

12. Automated decision-making and profiling

No automated decision-making is carried out.

Visitors to the website are not subject to profiling.

13. Your data protection rights

Subject to the conditions laid down in the GDPR, you may in particular have the right to:

  • obtain access to your personal data;
  • have inaccurate data corrected;
  • request erasure of your data;
  • request restriction of processing;
  • object to certain processing;
  • receive your data in a portable format where the statutory requirements are met;
  • withdraw consent at any time with effect for the future where processing is based on consent, without affecting the lawfulness of processing before withdrawal;
  • lodge a complaint with a data protection supervisory authority.

To exercise your rights, please contact:

arion.petrest@yahoo.com

14. Right to lodge a complaint

You have the right to lodge a complaint with the competent supervisory authority, including:

Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal – ANSPDCP
28–30 B-dul G-ral Gheorghe Magheru
Sector 1, 010336 Bucharest
Romania

Email: anspdcp@dataprotection.ro

III. COOKIE POLICY

1. What are cookies?

Cookies are small files or similar items of information that may be stored on, or read from, a visitor’s device when a website is used.

2. Cookies used by casa-sommer.ro

According to the current technical configuration, casa-sommer.ro does not use analytics, advertising, marketing or profiling cookies.

Google Analytics is disabled.

The website may use only technically necessary cookies or similar storage technologies required to operate the website or provide a function expressly requested by the user.

Depending on the exact technical configuration, these may include:

  • technically necessary WordPress functions;
  • security and stability functions;
  • technical session management;
  • storage of the language selected by the user where the multilingual plugin uses such a function.

These technologies are not used for advertising or for tracking user behaviour across different websites.

3. Why is there no consent banner?

Under the current configuration, the website does not use analytics, marketing or other non-essential cookies or storage technologies requiring prior consent.

For this reason, no “Accept / Reject” consent banner is currently displayed.

If functionality requiring prior consent is introduced in the future, the relevant technologies will not be activated until the required consent has been obtained and this Cookie Policy will be updated accordingly.

4. Browser controls

Visitors can use their browser settings to view, block or delete cookies.

Blocking technically necessary cookies completely may prevent certain website functions from operating correctly.

IV. DATA SECURITY

The operator takes reasonable technical and organisational measures to protect personal data against unauthorised access, loss, alteration or unauthorised disclosure.

The website uses an encrypted HTTPS/TLS connection.

Nevertheless, transmission of information over the internet cannot in every circumstance be guaranteed to be completely free of risk.

V. CHANGES TO THIS INFORMATION

This information may be updated if website functionality, technical service providers or applicable legal requirements change.

The current version is the version published on casa-sommer.ro.

In the event of differences between the language versions, the Romanian version shall prevail.

Last updated: 29 September 2026