Data Privacy Policy According to GDPR

Following art. 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC(OJ L 119, 4.5.2016, p. 1–88) - "GDPR" and in relation to the processing of your personal data we hereby inform you that:

1. The data controller is Hotel. You can contact the controller at the address that is visible in Contact details on web page where you are making your reservation.

2. Your data are processed for the purposes relating to the realization of reservations, agreements concluded by the controller, promotion of its services, as well as to allow the controller to contact with its customers. The processing of the data in the above scope is based on art. 6 item 1 pt f of GDPR.

3. The Processing of your data is related to the realization of your reservation request.

4. Your data will be processed for the period of time of the relevant agreement with Hotel where you will be staying.

5. You have the right to request the access to your data from Hotel., as well as to their rectification, erasure, restriction of their processing, the right to object to the processing and the right to data portability.

6. You have the right to lodge a complaint with a supervisory authority, if you consider that the processing of your personal data infringes GDPR.

7. The provision of your data is voluntary.

8. Hotel will not profile your data based on this agreement, as well as it will not make automated decisions.

The Company processes a number of User personal data (whether or not registered) when using the Https://www.hotelarnia.ro/ Site and/or any Service offered by our company.

This privacy policy describes what types of personal data are processed, how it is used, what your options are. in connection with these processes, as well as how we will respect your rights as the person concerned under the legislation on the protection of personal data, including Regulation (EU) 2016/679 ("GDPR").

BEFORE TO USE THE SITE OR ANY OF OUR SERVICES, WE WILL RECOMMEND TO READ WITH ATTENTION THIS POLICY TO INTELEGE HOW THE DATA WITH PERSONAL CHARACTER ARE PRELUCRATED.

CONFIDENTIALITY POLICY GDPR

1. WHO IS RESPONSIBLE FOR PROCESSING YOUR DATA?

SC ARNIA TOURISM SRL, established in Romania, is the controller of personal data, in accordance with the legislation on the protection of personal data including GDPR, regarding the personal data of Users collected and processed through the Https://www.hotelarnia.ro/ Site and/or in the context of the Services offered through or in connection with the Site.

For the personal data processing activity the Company can be contacted using the following contact details: office@hotelarnia.ro

2. WHAT DATA PROCESS?

The Company processes the personal data you provide to us when you use the Site, you register on our page, contract a service, sign up for our campaigns (and/or campaigns organized with our partners), you want to receive commercial communications or participate in our surveys and questionnaires, or contact us by any means of communication If contacted our company SC ARNIA TOURISM SRL through the contact forum present on the website https://www.hotelarnia.ro/, the data communicated by you. (name, first name, address, telephone, email and any other personal data communicated) will be stored and processed only after checking the express acceptance present at the bottom of the contact form. We also use cookies and similar technologies to recognize you. and your devices. We also allow other people to use cookies. How we use these technologies are described in the Cookies Policy..

3. PROVISION OF PERSONALIZED OFFERS

In certain situations, we may use the information collected from you. in combination with the data we obtain from our sales and/or marketing teams about your interaction. with the Company, which we use in the context of our marketing communications. We want to streamline our marketing activity by providing our customers with relevant and personalized products/services. [Also, if you agree, we may conduct advanced analyses of your interests and preferences resulting from the information we hold about you from your interaction with us, as well as by combining third-party data (e.g. through web browsing analytics technologies) to send you commercial communications tailored to your needs and preferences.] We can carry out various reports, analyses and statistical studies on organized marketing campaigns and their success, sales/processing activity.

4. EXECUTATION OF THE CONTRACT INCLUDED WITH NEWS

When you request the provision of services we may process certain personal data necessary for these purposes (e.g. first and last name, delivery/supply address, trading data, etc.).

5. MANAGEMENT OF THE REPORT BETWEEN USERS AND ASSISTANCE

We have an interest in providing appropriate services through the Site to all persons who access it. Therefore, we process a range of personal data for the purpose of managing relationships with the Users of the Site, for example when contacting us with various questions or requests regarding the functionality of the Site, questions about the Services of the Company offered through the Site, etc. Legal basis: Article 6(1)(f) GDPR – legitimate interest consisting in our interest in providing adequate services.

6. ANALYSIS AND STATISTICS CONCERNING THE FUNCTION OF THE SITE, COOKIES AND SIMILARY TECHNOLOGIES

We may use the personal data that Users provide or collect in the context of using the Services for the purpose of performing analyses and statistics on our Services, including how the Site works or the Services are offered. The analyses and statistics we make help us better understand how we can improve our Services or the functionality Site-ului.In performing analyses and statistics we also use cookies and other similar technologies according to the Cookies Policy. Cookies and similar technologies are also used to provide you with interest-based advertising.

7. CONTECTION BY SOCIALIZATION RETAILS

We have implemented various interconnection mechanisms with social pages, such as Facebook, Twitter, Youtube and Instagram and thus have the possibility to access the content posted by us on the Site and or our associated accounts on those social networks more easily. If you access the content posted on those social networks or comment on those social networks, or visit the Site through your Facebook account, a series of public data from your profile. from those social networks will be transmitted to us by the operators of those social networks.

8.IMPLEMENTATION OF LEGAL OBLIGATIONS

Sometimes the processing of data is necessary to meet our legal obligations, such as: • reporting to the relevant tax authorities and keeping accounting records; • archiving data according to applicable legislation.

9.APPLICATION OF RIGHTS AND INTERESTS IN JUSTITY

For the purpose of establishing, exercising or defending a right to justice in proceedings before a court, administrative procedure or other formal proceedings in which the Company is involved.

10. TO WHOM WE DISCLOSE THE DATA

We may disclose your personal data to (i) entities and/or persons empowered by us (from the EAA or third countries) involved in the provision of the Services, including in the provision of commercial communications (such as data center providers, payment service providers for various payment facilities, providers of e-mailing platforms such as Google Mail), or if we are obliged to disclose personal data for the purpose of complying with any legal obligation or decision of a judicial authority, public authority or governmental body; or (iii) if we are asked or otherwise permitted to do so under applicable law. Your personal data may also be disclosed to third parties who are providers of cookies and similar technologies as described in the Cookies Policies.

11. AS LONG AS WE KEEP THE DATA

We retain your personal data as long as necessary to accomplish the purposes for which it was collected, in compliance with internal data retention procedures, including applicable archiving rules. For example, if you're a customer of ours, your personal data will be changed. personal data will be retained for the entire duration of the contractual relationship, plus a minimum period of 3 years after termination (as is the limitation period for legal action). Subsequently, certain personal data could be retained for a longer period for archiving purposes, in accordance with the applicable archiving rules.

12. WHAT RIGHTS HAVE YOU IN QUALITY OF THE VISED PERSON?

According to the law, you are recognized as the person concerned:

a)The right of access can be confirmed from us that we are processing your data. personal information, as well as information on the specifics of the processing

b)The right to modify may request us to modify your data. incorrect personal data or, where appropriate, filling in data that is incomplete.

c)The right to delete you may request the deletion of personal data when: (i) they are no longer necessary for the purposes for which we have collected and processed them; (ii) you have withdrawn your consent to the processing of the data and we can no longer process it on other legal grounds; (iii) the data are processed contrary to the law; (iv) the data must be deleted in accordance with the relevant legislation.

d)Withdrawal of consent and the right of opposition you may withdraw your consent to the processing of data on the basis of consent at any time. You can also object at any time to processing for marketing purposes, including profiling for this purpose, as well as processing based on the legitimate interest of the Company, for reasons related to your situation. Specify.

e)Restriction under certain conditions you may request a restriction on the processing of your data. Personal

f)The right to data portability to the extent that we process the data by automated means, you may request us, under the law, to provide your data. in a structured form, frequently used and readable automatically. If you ask us to do so, we may submit your personal data. entity, if technically possible.

g)The right to file a complaint with the supervisory authority You have the right to file a complaint with the data processing supervisory authority if you believe that your rights have been violated:National Authority for the Surveillance of Personal Data in Romania B-dul G-ral. Gheorghe Magheru 28-30 Sector 1, postcode 010336 Bucharest, Romania anspdcp@dataprotection.ro

FOR THE EXERCISE OF THE RIGHTS MENTIONED ABOVE, WE CAN CONTACT USING THE Email ADDRESS : office@hotelarnia.ro