1. Introduction
Hotel Rivulus respects the confidentiality of your personal data and is committed to protecting it in accordance with the General Data Protection Regulation (GDPR) and applicable national legislation. This privacy policy explains how we collect, use, store, and protect your personal information when you interact with our website or our services.
By using the hotelrivulus.ro website and by providing your personal data, you agree to its processing in accordance with this policy. If you do not agree with the terms of this policy, please do not use the website and do not provide us with personal data.
2. Personal Data We Collect
Hotel Rivulus collects the following categories of personal data:
- Identification and contact data: first name, last name, email address, telephone number — provided voluntarily through the reservation and contact forms.
- Reservation data: room type, check-in and check-out dates, number of persons — collected through the reservation form to process your request.
- Language preference: stored in the browser's localStorage to display the website in your chosen language (Romanian, English, or Hungarian).
- Technical data: IP address, browser type, operating system — collected automatically through essential cookies for the technical operation of the website.
We do not collect sensitive data (data concerning health, ethnic origin, religious beliefs, biometric data) and we do not perform automated profiling of users.
3. Purposes of Data Processing
The personal data collected is used exclusively for the following purposes:
- Processing booking requests: to contact you and confirm the availability of the requested room, to establish the reservation details, and to fulfill your request;
- Responding to contact inquiries: to respond to questions, comments, or requests submitted through the contact form;
- Improving the browsing experience: by remembering the language preference and ensuring the proper technical functioning of the website;
- Compliance with legal obligations: to the extent that the law requires us to retain certain data (for example, for tax or accounting purposes).
We do not use your data for direct marketing purposes without prior consent, and we do not sell or rent it to third parties.
4. Legal Basis for Processing
The processing of your personal data is based on the following legal grounds, in accordance with GDPR:
- Consent: for processing that is not strictly necessary — for example, marketing cookies that activate embedded content (YouTube, Facebook, Google Maps);
- Performance of a contract or pre-contractual steps: for processing booking requests and communicating with you regarding them;
- Legitimate interest: for improving the functioning of the website and ensuring its security;
- Legal obligation: for retaining data in accordance with applicable legal requirements.
5. Data Storage and Security
Personal data is stored on servers located within the European Union and is protected by appropriate technical and organizational measures to prevent unauthorized access, loss, alteration, or disclosure.
The reservation and contact forms are processed through the Web3Forms service, which acts as a data processor and processes data in accordance with GDPR. Details on how Web3Forms manages data are available on their website.
Marketing cookies (Facebook, YouTube, Google Maps) are managed through the Cookiebot platform, which ensures that consent is obtained before these services are activated. Cookiebot also acts as a data processor in accordance with GDPR.
6. Data Retention Period
We retain your personal data only for the period necessary to fulfill the purposes for which it was collected:
- Data from reservation and contact forms: maximum 12 months from the date of submission, if no accommodation contract has been concluded;
- Data of customers who have made a reservation: in accordance with the legal obligations in force (generally, 5 years for fiscal documents);
- Language preference: until manually deleted from browser settings;
- Cookies: according to the specific expiration periods of each cookie, as detailed in the Cookie Policy.
7. Your Rights
As a data subject, you have the following rights under GDPR:
- Right of access: you can request a copy of the personal data we hold about you;
- Right to rectification: you can request the correction of inaccurate or incomplete data;
- Right to erasure ("right to be forgotten"): you can request the deletion of data under certain conditions;
- Right to restriction of processing: you can request the limitation of how we use the data;
- Right to data portability: you can request the transfer of data to another controller;
- Right to object: you can object to the processing of data in certain circumstances;
- Right to withdraw consent: at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
To exercise these rights, you can contact us at the email address rezervari@hotelrivulus.ro or at the postal address Strada Culturii, Nr. 3, Baia Mare, Maramures County, Romania. We will respond to requests within 30 days.
You also have the right to lodge a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP) if you consider that your rights have been violated.
8. Transfer of Data to Third Parties
We do not sell, rent, or transfer your personal data to third parties for commercial purposes. Data may be shared with the following categories of recipients only to the extent necessary for the provision of our services:
- Web3Forms: the processor of reservation and contact forms;
- Cookiebot: the cookie consent management platform;
- Competent authorities: where we are required by law to disclose certain information.
All data processors we work with are carefully selected and are contractually obliged to respect data confidentiality and security.
9. Cookies and Similar Technologies
For detailed information about the cookies used on our website, how they work, and management options, please review the Cookie Policy.
10. Changes to the Privacy Policy
We reserve the right to update this privacy policy at any time. Any changes will be published on this page and will take effect immediately upon publication. In the case of significant changes, we will notify you through a visible message on the website or by email, if we have your address.
11. Contact
For any questions regarding this privacy policy or how we process your data, you can contact us at:
- Address: Strada Culturii, Nr. 3, Baia Mare, Maramures County, Romania
- Telephone: +40 262 211 500
- Email: rezervari@hotelrivulus.ro
Last updated: 2025
