Privacy policy

The controller of personal data collected on this site is Taranu Daniela, a natural person, with the address Strada Privighetorii no. 10-12, Limanu, Constanța County, Romania, operator of the Vis de Primăvară tourism accommodation (classification certificate no. 182485).

Contact for personal data requests: contact@visdeprimavara.ro.

We collect only the data necessary for the purposes below:

• Contact form: name, email, phone (optional), preferred period (optional), number of guests (optional), message. • Direct communication: data you send us voluntarily by email, WhatsApp or phone. • Technical data (analytics): pages visited, traffic source, device, duration — anonymised and cookie-less, via Vercel Analytics.

We do NOT collect tracking cookies, we do NOT collect data about other people you have in your contacts, and we do NOT knowingly collect data about minors under 16.

• To respond to requests received via the form, email or WhatsApp. • To confirm and manage reservations. • To communicate reservation-related information (confirmation, check-in instructions). • To understand site usage and make improvements (anonymous analytics).

We do NOT use the data for: marketing without consent, profiling, selling to third parties, or automated decisions with significant impact on you.

We process the data under Regulation (EU) 2016/679 (GDPR), based on:

• Art. 6(1)(b) GDPR — performance of a contract (for direct reservations and pre-contract measures). • Art. 6(1)(f) GDPR — legitimate interest (responding to general enquiries, anonymous analytics for service improvement). • Art. 6(1)(c) GDPR — legal obligation (keeping fiscal documents for confirmed reservations).

We use service providers ("processors") that handle data strictly on our behalf:

• Resend Inc. (USA) — delivery of automated emails from the website form. • Vercel Inc. (USA) — site hosting and Vercel Analytics (anonymous). • Cyberfolks SRL (Romania) — hosting of the contact@visdeprimavara.ro mailbox.

If you book via Booking.com or Airbnb, your data is also processed by those platforms under their own policies.

We do not sell, swap or rent personal data to third parties for commercial purposes.

Resend Inc. and Vercel Inc. are companies based in the USA. The transfer of data to these companies is made on the basis of:

• Standard Contractual Clauses (SCCs) approved by the European Commission, • the EU-US Data Privacy Framework, where the companies are certified.

Cyberfolks operates exclusively in Romania, within the EU.

• Messages received via the form or email: up to 12 months after the last contact, then deleted or anonymised. • Data related to confirmed reservations: 5 years, in line with fiscal obligations (Romanian Tax Code). • Vercel technical logs: 30 days (standard provider policy). • Anonymous, aggregated analytics: kept without a time limit, with no possibility of individual identification.

You have the following rights regarding your data:

• Access — to know what data we hold about you. • Rectification — to correct inaccurate or incomplete data. • Erasure ("right to be forgotten") — within the limits of our legal obligations. • Restriction of processing. • Portability — to receive your data in a structured, machine-readable format. • Object to processing based on legitimate interest. • Withdraw consent, without affecting the lawfulness of prior processing. • Lodge a complaint with the supervisory authority: the Romanian National Authority for the Supervision of Personal Data Processing (ANSPDCP, www.dataprotection.ro).

To exercise these rights, write to us at contact@visdeprimavara.ro. We respond within 30 days at the latest.

Our site does NOT use tracking, profiling or advertising cookies. We only use Vercel Analytics — a cookie-less web analytics service based on aggregated hashes, without individual visitor identification.

We do NOT use Google Analytics, Facebook Pixel, Hotjar or similar technologies. That's why you won't see a cookie banner — there are no consent cookies on the site.

We apply reasonable technical and organisational measures to protect the data:

• The whole site uses an encrypted HTTPS connection. • The contact form validates input server-side and includes anti-bot protection. • Communications via Resend use TLS transport. • Access to the mailbox is protected by password and two-factor authentication.

In the event of a security breach affecting your data, we will notify you in line with GDPR obligations within 72 hours of becoming aware.

We may update this policy to reflect changes in legislation or our practices. The current version is indicated at the top of the page. If the changes are substantial, we will try to inform you through other channels too.

For any question about this policy or to exercise your rights:

Taranu Daniela Strada Privighetorii no. 10-12, Limanu, Constanța County, Romania contact@visdeprimavara.ro