Privacy

Privacy policy

In short

We use your information only to reply to you and to organise your booking.
We never sell it and never use it for advertising.
The website uses no cookies and no analytics or advertising tools.
You can ask us at any time to see, correct or delete your information: email us at contact@pensiuneatransrarau.ro.

1.Who we are

The website and the Transrarău Guesthouse are run by FEERIA BUCOVINA SRL. We decide how and why your information is used, which makes us the data controller under Regulation (EU) 2016/679 (the “GDPR”).

Company: FEERIA BUCOVINA SRL
Tax ID (CUI): 52633714
Trade Register no.: J2025075982004
Registered office: Str. Decebal nr. 34A, bl. Q3, sc. A, et. 3, ap. 3, Iași, jud. Iași
Guesthouse address: Str. Izvorul Giumalău nr. 31, Pojorâta, Suceava County
Email: contact@pensiuneatransrarau.ro
Phone: +40 727 888 389

2.What information we use

When you send a request through the “Check availability” form

your contact details: name, email address and phone number;
the details of your stay: dates, number of guests, preferred accommodation and the options you choose (wellness);
anything you choose to write under “Other details”.

Please don’t send us health information unless it matters for your stay, such as an allergy. We use it only to prepare your stay.

When you contact us directly

If you call us or write to us on WhatsApp or by email, we use your name, phone number or email address and what you tell us.

Automatically, when you use the website

your IP address, used on the spot to limit how many requests can be sent from the same address (spam protection);
the technical data the server records on every visit (IP address, browser type, page visited, date and time), needed to keep the website running securely.

3.Why we use it, and on what legal basis

To reply to your request and send you an offer: steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR).
To confirm and organise your booking and stay: performance of a contract (Art. 6(1)(b) GDPR).
To meet our legal obligations, such as accounting, if you book: legal obligation (Art. 6(1)(c) GDPR).
To keep the website running and protect it from spam and abuse: our legitimate interest in a secure website (Art. 6(1)(f) GDPR).
For health information you choose to share (for example, an allergy): your explicit consent (Art. 9(2)(a) GDPR), which you can withdraw at any time.

We can’t reply without your contact details, so they are required in the form. The tick box at the end confirms that you want us to use them to reply.

We make no automated decisions about you and do no profiling. The price estimate in the form is only a guide.

4.Who else can access it

We never sell your information and never use it for advertising or newsletters. It is seen only by the guesthouse staff who handle bookings and by the providers that help us receive requests, who process it only on our instructions:

Vercel Inc. (USA), which hosts the website and receives the request sent through the form;
Resend, Inc. (USA), which emails the request to us;
Zoho, which hosts our mailbox on servers in the European Union.

Vercel and Resend are US companies, so some information may be processed outside the European Economic Area. These transfers rely on the safeguards required by the GDPR: the EU–US Data Privacy Framework for certified companies, or the standard contractual clauses approved by the European Commission.

If you write to us on WhatsApp, the conversation also goes through WhatsApp (Meta), under its own terms. Information may be shared with public authorities only when the law requires it.

5.How long we keep it

Requests that don’t become a booking: up to 12 months from the last message, then deleted.
Bookings: for the booking and the stay, then up to 12 months, unless the law requires us to keep them longer.
Accounting records, such as invoices: for as long as accounting law requires.
The IP address used against spam: only temporarily, in the server’s memory, without storing it.
Technical visit data: for a short period set by the hosting provider.

7.Your rights

Under the GDPR, you have the right:

to know what information we hold about you and to get a copy (right of access);
to have inaccurate or incomplete information corrected (rectification);
to have your information deleted (erasure);
to have its use restricted (restriction);
to receive the information you gave us in a structured format, or have us send it to another controller (portability);
to object to uses based on our legitimate interest (objection);
to withdraw your consent at any time, where you gave it, without affecting what was done before.

For any of these, email us at contact@pensiuneatransrarau.ro. We reply free of charge within one month; for complex requests this can be extended by two more months, in which case we let you know. We may ask for a detail to make sure the information goes to the right person.

If you are not happy with our reply, you can complain to the Romanian data protection authority, ANSPDCP (Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal), B-dul G-ral. Gheorghe Magheru nr. 28–30, sector 1, Bucharest, www.dataprotection.ro (opens in a new tab), or to the data protection authority of the EU country you live in.

8.How we protect it

The website uses an encrypted connection (HTTPS). The form checks the information it receives and stops automated submissions, and requests go straight to our mailbox, which only the people handling bookings can access.

9.Changes

When anything changes in how we use your information, we update this page. The date of the last update is shown at the top.