Last updated: 06.11.2026
1. Data Controller
Pensiunea Speranta, located at Str. Trandafirilor nr.63, Sovata, Mureș County, is the controller of personal data collected through the website pensiuneasperanta.ro.
Contact: pensiuneasperanta@yahoo.com | Tel: 0740-019093
2. Data We Collect
We collect data you voluntarily provide through the contact form:
- Full name
- Email address
- Phone number (optional)
- Stay details (check-in/check-out date, number of guests)
- Message content
The website also uses technical cookies required for its operation (PHP session, language preference). Details in our Cookie Policy.
3. Purpose of Processing
Collected data is used exclusively for:
- Responding to booking or information requests
- Communicating with prospective guests
- Managing bookings
We do not use your data for marketing purposes without your explicit consent.
4. Legal Basis
Data processing is carried out based on:
- Art. 6(1)(b) GDPR – performance of a contract or pre-contractual steps (booking processing)
- Art. 6(1)(f) GDPR – legitimate interest of the controller (responding to information requests)
5. Retention Period
Email correspondence data is retained for up to 3 years from the last communication. Data related to confirmed bookings may be retained for the period required by applicable fiscal and accounting legislation.
6. Data Recipients
Your data is not shared with third parties, except:
- Hosting/email service providers, subject to confidentiality obligations
- Public authorities, when legally required
7. Your Rights
Under GDPR, you have the right to:
- Access – request a copy of data held about you
- Rectification – correction of inaccurate data
- Erasure – "right to be forgotten"
- Restriction of processing
- Data portability
- Objection to processing
- Withdrawal of consent, without affecting the lawfulness of prior processing
To exercise your rights, contact us at pensiuneasperanta@yahoo.com. You also have the right to lodge a complaint with the data protection supervisory authority in your country of residence.
8. Data Security
We implement appropriate technical and organisational measures to protect data against unauthorised access, loss or accidental destruction.
9. Policy Changes
This policy may be updated periodically. The updated version will be published on this page with the revision date.
Christmas 2026
