We comply with the legal provisions regarding the protection of personal data and implement technical and organizational measures to protect all operations directly or indirectly related to personal data, which prevent unauthorized or illegal processing, as well as accidental or illegal loss or destruction .

For the purpose of processing orders, honoring them, and concluding the sales contract, the seller collects the personal data of the customers, namely the name, surname, name, home address and delivery address, telephone number, email address and age, in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the European Council of April 27, 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data.

We process your name, surname, telephone number and e-mail address, to communicate with you in order to make a reservation and/or respond to requests and messages received through the contact form.

All this data will be kept for the duration of the financial-accounting and tax records required by the relevant legislation, but not more than 5 years.

We do not use personal data for automated processing or for creating profiles. We never make automated decisions about you. We use technical means to store data in secure conditions. We do not process data for secondary purposes incompatible with the purposes for which we collected it.

We strictly respect and ensure the confidentiality of processed data. We only disclose data to fulfill your interests or to fulfill legal obligations. Privacy is an essential value for us.

In order to place a reservation, the customer will provide the data and information requested in the online reservation form or by phone, the refusal to communicate the requested information preventing the seller from registering and honoring the reservation made.

The owner, as well as the operator of this website, are not responsible for customer errors in entering these data or for any false data provided by them. The customer has the obligation to provide correct and factual data, bearing full responsibility for the incorrectness of the information transmitted to the seller.

Personal data will not be sold, transferred or distributed in any form to third parties or in other countries, unless requested by the competent public authorities, in accordance with the provisions of Regulation (EU) 2016/679.

We recommend all users of this website to take all safety measures when providing personal data online and to periodically check the status and accuracy of this data. Users are directly responsible for how they protect their login data considering that they may bear the consequences of unauthorized use.

Your rights

According to Regulation (EU) 2016/679, you benefit from the right of access and intervention on the personal data provided. In this sense, you have the right to obtain from us a confirmation as to whether or not personal data concerning you is being processed and, if so, you have access to that data, as well as to the following information:

• the purposes of the processing;

• the categories of personal data concerned;

• recipients or categories of recipients to whom the personal data have been or will be disclosed;

• where possible, the period for which the personal data is expected to be stored or, if this is not possible, the criteria used to determine this period.

Upon request, we will provide you with a copy of the personal data being processed. For any other copies requested, we will charge you a reasonable fee based on administrative costs. If you make your request to us electronically, and unless you request a physical format, the information will be provided in a commonly used electronic format (word, pdf, etc.).

Customers also have the right to rectify, modify and update the processed data. Thus, you have the right to obtain from us, without undue delay, the rectification of inaccurate personal data concerning you. Taking into account the purposes for which the data were processed, you have the right to obtain completion of personal data that is incomplete, including by providing an additional statement.

You have the right to obtain from us the deletion of personal data concerning you without undue delay, and we have the obligation to delete personal data without undue delay if one of the following reasons exists:

• the personal data are no longer necessary to fulfill the purposes for which they were collected or processed;

• you will withdraw your consent on the basis of which the processing takes place and there is no other legal basis for the processing;

• you will object to the processing and there are no overriding legitimate grounds for the processing;
  
• personal data were processed illegally;

• personal data must be deleted to comply with a legal obligation that falls to us under European Union law or Romanian laws;

In the event that we communicate your data to courier companies or other partners and you request its deletion, we will take all reasonable steps to inform the data processing partners that you have requested the deletion of any links to that data or any copies or reproductions of these personal data.

Data will not be deleted if:

• the processing is necessary to comply with a legal obligation that provides for the processing under Union law or the laws of Romania or for the performance of a task performed in the public interest;
  
• for reasons of public interest in the field of public health;
  
• processing is necessary for establishing, exercising or defending a right in court.

You have the right to obtain the restriction of processing if one of the following cases applies:

• contest the accuracy of the data, for a period that allows us to verify the accuracy of the processed data;
  
• the processing is illegal and you will object to the deletion of the personal data, requesting instead the restriction of its use;
  
• we no longer need the personal data for the purpose of processing, but you will request them to ascertain, exercise or defend a right in court.

If data processing has been restricted in the aforementioned cases, such personal data may, with the exception of storage, be processed only with your consent or for the establishment, exercise or defense of a right in court or for the protection of the rights of a other natural or legal persons or for reasons of important public interest of the European Union or the Romanian State.

If you have obtained the restriction of the processing of personal data, you will be informed by us before the lifting of the processing restriction.

You have the right to receive the personal data about you that you have provided to us in a structured, commonly used and machine-readable format. You have the right to transmit this data to another operator, without hindrance from us, directly from us to another operator, where this is technically feasible. Exercising the aforementioned right does not affect your right to data deletion.

Any customer also has the right to object, free of charge and without any justification, to the processing of his personal data for direct marketing purposes.

To exercise all the aforementioned rights, you can send a written request to contact@cristal-hotel.ro at any time.

Your data will not be transferred to another country.

By completing the data in the account creation and/or order form, the buyer expressly declares and accepts that your personal data will be included in the database of cristal-hotel.ro and you give your express and unequivocal consent that all these personal data will be stored, used and processed for the purpose of executing the reservations made.

The buyer’s personal information can also be provided to the General Prosecutor’s Office, the Police, the courts and other competent state bodies, based on and within the limits of the legal provisions and as a result of express requests.

Benefit from the right of access, intervention, rectification and portability regarding the data you provide us, limit the processing carried out by us and even request the deletion of the data. We note that the intervention on the data you have provided us may be likely to prevent the execution of the contract concluded between you and us. In this case, we will be exempt from liability. If you are dissatisfied, you can address and file a complaint against us before the National Authority for the Supervision of the Processing of Personal Data, as well as before the competent courts.