Privacy policy
Last updated: . Data controller: Brădet Turism SRL, Str. Principală 214, Moieciu de Sus, VAT ID RO40123456. This document also covers the GDPR information obligations (art. 13–14).
1. What data we collect
Through the booking form: name, phone and, optionally, email, the dates and the number of people — that is, exactly what we need to prepare your stay. The site also uses strictly necessary cookies; statistics cookies are enabled only with your consent.
2. Why we use it (GDPR grounds)
To confirm and manage bookings (steps taken at your request — art. 6(1)(b) GDPR) and, if you consented, for anonymous statistics (consent — art. 6(1)(a)). We don't sell data — to anyone, ever.
3. How long we keep it
Messages: at most 1 year from the last interaction, then we delete them. Booking data we keep until we decide otherwise, then we anonymize it. Invoicing data: per the legal accounting periods.
4. Who we share it with
Only with providers strictly necessary to function (web hosting, email service, booking and payment processing system), under contract, within the European Economic Area. With authorities — only if the law requires it.
5. Your rights
Under GDPR you have the right of access, rectification, erasure, restriction, portability and objection, plus withdrawal of consent. Write to us at rezervari@pensiuneabradet.ro and we resolve it within 30 days. You may also contact the ANSPDCP (dataprotection.ro).
6. Cookies
Details about the cookies used are in the Cookie Policy. Preferences can be changed anytime from the consent banner.
7. Contact
Questions about your data? rezervari@pensiuneabradet.ro or 0700 615 330.