Privacy policy.

Protecting your personal data matters to us. This policy explains what data we collect when you visit hotelsirena.ro, contact us or book a room at Hotel Sirena Saturn, why we use it and what rights you have, under Regulation (EU) 2016/679 (GDPR) and applicable Romanian law. The Romanian version prevails in case of any discrepancy.

• 1. Who we are
• 2. What data we collect
• 3. Why we use your data
• 4. Legal basis
• 5. Who we share data with
• 6. Third-party services on the site
• 7. How long we keep data
• 8. Your rights
• 9. Data security
• 10. Changes

1. Who we are

The data controller is FAIR IMPEX 3 S.R.L., tax ID RO 28968210, Trade Register no. J17/1033/2011, registered office in Tecuci, Galați County, Romania, the company that runs Hotel Sirena Saturn, Strada Faleza Saturn 23F, Saturn, Constanța County, Romania.

For any question about your personal data, contact us at sirena@avenuehotels.ro, phone +40 21 555 25 60.

2. What data we collect

• Identification and contact data: first and last name, phone, email address, when you contact us, request an offer or make a booking.
• Booking data: dates of stay, number of guests, room type, meal plan, preferences and special requests.
• Check-in data: details from your ID document, required by the law on registering hotel guests.
• Payment data: online payments are processed by the booking system provider and the payment processor; the hotel does not store full card details.
• Technical data: IP address, browser and device type, pages visited, collected through cookies as described in the Cookie policy.

3. Why we use your data

• managing bookings and offer requests;
• communicating with you before, during and after your stay;
• meeting legal obligations (guest register, tax and accounting);
• keeping the website secure and working properly;
• answering requests, complaints and claims;
• sending offers and newsletters, only with your consent.

4. Legal basis

We process data to perform the accommodation contract (Art. 6(1)(b) GDPR), to meet legal obligations (Art. 6(1)(c)), on the basis of our legitimate interest in running our business and keeping the website secure (Art. 6(1)(f)) and, where applicable, with your consent (Art. 6(1)(a)).

5. Who we share data with

We do not sell or rent your data. We may share it, strictly as needed, with:

• the online booking system provider (4Booking) and the payment processor (NETOPIA Payments / mobilPay);
• the offer request platform (miniCRM);
• IT, website hosting and marketing communication providers;
• public authorities, where the law requires it;
• advisers (accounting, legal), who are bound by confidentiality.

6. Third-party services on the site

The site includes Google Maps, the 4Booking booking engine and weather information from Open-Meteo. When these load, their providers may collect technical data (such as your IP address) under their own privacy policies. Links to WhatsApp, Messenger, Waze or Google Maps open those apps, which have their own data rules.

7. How long we keep data

We keep data only as long as needed for the purposes above: booking data for the duration of the contract and then for the period required by tax and accounting law; correspondence for as long as needed to resolve requests; newsletter data until you unsubscribe; technical data for short periods, for security.

8. Your rights

• the right of access;
• the right to rectification;
• the right to erasure (“right to be forgotten”), as provided by law;
• the right to restriction of processing;
• the right to data portability;
• the right to object, including to direct marketing, at any time;
• the right to withdraw consent, without affecting earlier processing.

To exercise your rights, write to sirena@avenuehotels.ro. You also have the right to complain to the Romanian data protection authority (ANSPDCP), B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, Bucharest, anspdcp@dataprotection.ro, www.dataprotection.ro.

9. Data security

We apply appropriate technical and organisational measures to protect data: secure HTTPS connection, restricted access, passwords and staff training.

10. Changes

We may update this policy from time to time. The version in force is always the one published on this page.