La Casa Maramureșeană understands the importance of your personal data and takes seriously the protection and security of the collected data and respects the legal provisions in force (EU Law 2016/679). The administrators of the La Casa Maramureșeană site have taken all technical and organizational measures to protect and secure all data used by La Casa Maramureșeană operations and will update these measures in case of legislative or technological changes. We provide more details about how we collect and use the personal data of our visitors and customers and how we intervene in these operations.

       In accordance with the provisions of Regulation (EU) no. 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC, known as the "General Data Protection Regulation" or, in short, "GDPR", we bring to your attention the following aspects related to the processing of your personal data:

 

  1. Who is the operator of personal data?

We, - La Casa Maramureseana - represent the operator in accordance with the GDPR. The contact details of the Company's data protection officer are: email: contact@la-casa-maramureseana.ro , Tel: 0722367767.

  1. What personal data do we process?

If you are a client of La Casa Maramureșeană:

  1. General information (identification data): name, surname, date of birth, gender, nationality, age, CNP, home or residence address, e-mail, telephone, workplace (if applicable), copy of C.I., signature, email, bank account number or other information related to your accounts.
  2. If you visit the La Casa Maramureșean website:

Data related to the profiling of La Casa Maramureșeana website users according to the Cookies Policy that you can access here: IP, traffic data, geolocation data, device used, operating system, keywords searched by users interested in them. aici: IP, date de trafic, date de geolocalizare, dispozitiv utilizat, sistem de operare, cuvinte cheie căutate de utilizatorii interesați de acestea.

5. Where do we get personal data?

Generally, the personal data we process is obtained directly from you when you request our services.

6. What are the purposes of personal data processing?

Your personal data is processed by La Casa Maramureșeană for legitimate purposes related to the provision of tourism services, according to the legal regulations in force, as follows:

  • Providing information on commercial offers
  • Providing information about events
  • Providing accommodation services, both in the country and abroad, in accommodation units of different categories, according to the classification criteria of each country, criteria that may differ from those in Romania;
  • Provision of reservation services and issuance of plane tickets on domestic and international flights;
  • Provision of services for the organization of other tourist and protocol services at the request of the beneficiary;
  • Provision of event organization services
  • Provision of specialized tourist assistance services
  • Provision of travel medical insurance services
  • Provision of passenger transport vehicle rental services
  • Provision of courier services for issued travel documents
  • Participation in opinion polls regarding the Company's products and services regarding the degree of customer satisfaction.
  • ATTENTION!If La Casa Maramureseana wants to process your personal data for purposes other than those initially declared, you will be sent a separate information note, detailing the subsequent purpose of the processing, the legal basis of the processing, as well as the storage period of your personal data, together with any other useful information in relation to further processing to allow you to express your consent freely, knowingly and expressly for each individual processing operation (if that processing is conditional on obtaining your express consent).

 

7. What are the legal grounds for processing personal data?

The legal basis for the collection and processing of your data for each of the purposes mentioned above is:

The contract for the provision or provision of services to which you are a party or your request before the conclusion of a contract for which we have received your consent;

The Company's legitimate business interests, for example, preventing fraud, maintaining the security of our services, direct marketing and improving our services. Whenever we rely on this legal basis to process your data, we assess our commercial interests to ensure that these do not override your rights. In addition, in some cases you have the right to object to this processing. The legitimate interest of the Company to allow us to exercise the rights provided by law in our favor, to take legal action against any illegal activity or that damages the Company.

  1. Data Retention

We retain the personal information we collect from you where we have a legitimate business reason to do so (for example, to provide you with a service you have requested or to comply with legal, tax or applicable accounting).

When we do not have a legitimate business reason to process your personal information, we will delete it, anonymize it or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will keep your personal information secure and isolate it from further processing until deletion is possible.

All personal data we hold will be subject to this Privacy Policy. If you have a question about a specific retention period for certain types of personal data that we process about you, please contact us via the contact details included below.

  1. To which entities will we disclose your personal data?

Under certain expressly regulated conditions, your personal data can be processed by La Casa Maramureșeana, through authorized persons or jointly with other companies, in this case, it is a relationship of the type of associated operators, which will establish in share the purposes and means of processing, according to the provisions of art. 26 of the GDPR.

In some situations, service providers such as, but not limited to service providers and IT systems, various contractual partners may have access to your personal data. Your data may also be transmitted to lawyers, accountants, auditors or other professionals who have the obligation to maintain professional secrecy.

For reports to the state authorities, according to the legal obligations in force, it will be necessary to transmit your data to various public institutions.

  1. Rights regarding the protection of personal data

Your rights regarding data processing:

  • The right to be informedabout the processing of your data.
  • The right of access to the data.You have the right to obtain from us a confirmation that personal data concerning you is being processed or not and, if so, access to the respective data and to the information provided by art. 15 para. (1) of the GDPR.
  • The right to deletion("the right to be forgotten"): In the situations provided for in art. 17 of the GDPR, you have the right to request and obtain the deletion of personal data.
  • The right to restrict processingIn the cases provided for in art. 18 of the GDPR, you have the right to request and obtain the restriction of processing.
  • The right to object to data processing :In the cases provided for in art. 21 of the GDPR, you have the right to object to data processing.
  • The right to go to justice

Last but not least, we inform you that you have the right to address the National Supervisory Authority for the Processing of Personal Data (ANSPDCP) or any court competent in the field of personal data protection.

To exercise these rights, you can contact us by sending a written, dated and signed request to the Personal Data Protection Officer of La Casa Maramureșeana by email at contact@la-casa-maramureseana.ro .

 

In accordance with the GDPR, we will analyze your request with the utmost care and send you a response within the legal term of 30 calendar days after receiving the request. If your request requires an exhaustive search due to the complexity of the request, the one-month deadline can be extended by another month, but you will receive the arguments that require an extension of the resolution deadline.