Privacy policy.

Who we are

The data controller is CASA DORIN ROMAN SRL, tax ID 47011022, Trade Register no. (to be added), registered office 795 G, sat Moisei, jud. Maramureș, 437195, Romania, which runs Casa Dorin Guesthouse.

For any question about your personal data, write to us at dorinpensiunea@yahoo.ro or call us on 0741 123 727.

What data we receive

Only the data you send us yourself:

• through the enquiry forms: your name, phone number, email (optional) and the details of your request (dates, number of adults and children, room type, meals, message); for groups, also the name of the school, agency or group;
• by phone, email or WhatsApp: whatever you tell us in the conversation;
• on arrival: the details Romanian law requires for registering guests.

We never ask for card details or sensitive data. Please do not send health information through the form; for allergies or special needs, you can call us.

Why we use it and on what legal basis

• to reply and send you a quote: steps taken at your request before entering into a contract (Art. 6(1)(b) of Regulation (EU) 2016/679, the GDPR);
• to host you and issue the invoice: performance of the contract and legal obligations (Art. 6(1)(b) and (c));
• to defend our rights in case of a dispute: our legitimate interest (Art. 6(1)(f)).

We do not use your data for advertising, we do not send newsletters and we never sell data to anyone.

How your data reaches us

The website does not store form data. When you send a request, it goes through the Web3Forms service (operated by SureStack Inc.), which forwards it to the guesthouse's email address and does not use it for anything else. If the service is not available, your own email app opens with the message already written.

The WhatsApp button opens a chat with us in the WhatsApp app. Messages there are also processed by WhatsApp (Meta), under its own privacy policy.

Who else sees the data

• the guesthouse's email provider, for the messages we receive;
• our accountant, for invoices;
• public authorities, only when the law requires it;
• Netlify, Inc., which hosts the website: its servers automatically log technical data about visits (IP address, browser type, page requested) for security and operation.

Netlify is based in the United States. Technical data is transferred with the safeguards required by the GDPR (standard contractual clauses approved by the European Commission).

How long we keep it

Requests that do not become bookings are kept only as long as needed to reply. Data linked to bookings and invoices is kept for as long as tax and accounting laws require.

Cookies and tracking

The website uses no cookies and no visitor analytics such as Google Analytics. Details are in our cookie policy.

Your rights

You have the right to access your data, to have it corrected or erased, to restrict processing, to data portability and to object to processing. For any of these, write to us at dorinpensiunea@yahoo.ro; we will reply within one month.

If you believe your data has been mishandled, you can complain to the Romanian data protection authority (ANSPDCP), www.dataprotection.ro, or to the authority in your own country.

Security

The website loads only over a secure connection (HTTPS). Messages we receive are read only by the guesthouse hosts.

Changes

If we change how we handle data, we will update this page and the date above.