Privacy notice
Updated on 26 October 2026
Data controller
SUCIU PAULA ÎNTREPRINDERE INDIVIDUALĂ, tax ID 26376395, trade register F32/17/2010. Registered office: str. Cornel Medrea nr. 11, village and commune of Șelimbăr, Sibiu County, postcode 557260, Romania. For personal-data requests: contact@vilastefana.ro, 0722 669 160.
Data and purposes
We process your name, email, telephone, dates, requested arrangements and messages needed for the offer and booking. Responding to your request and fulfilling the booking rely on GDPR Article 6(1)(b); record-keeping and tax obligations rely on Article 6(1)(c). Technical data needed for security are processed in our legitimate interest in protecting the service, Article 6(1)(f). Do not enter identity documents, medical information or other sensitive data in the comments field.
Recipients and providers
Authorised staff and hosting, maintenance and email providers may access data to the extent needed for their services, as may authorities under a legal obligation. We do not sell data for advertising. If you open an external service through a link, that provider’s privacy notice also applies; you can use telephone or email instead. Google sign-in is not requested in this version.
Retention and security
Retention depends on the data category: enquiries are kept for as long as needed to resolve them and any related matters, bookings for the contract and record-keeping obligations, and tax documents for applicable statutory periods. On request, we provide the specific period or criterion for your data. We restrict access and apply technical safeguards; no system offers an absolute security guarantee.
Your rights
You may request access, rectification, erasure, restriction and, where legally applicable, portability or object to processing. Erasure does not apply to data that must be kept by law. Where processing relies on consent, you can withdraw it. You can complain to ANSPDCP, www.dataprotection.ro. Send requests to contact@vilastefana.ro; we may request proportionate information to verify identity. We do not use solely automated decisions to confirm bookings.
Cookies and local storage
We use a session cookie for authentication and local storage for preferences and public website content. This version does not load analytics or advertising modules and does not automatically embed Google maps or fonts. Links to external services open only when the visitor chooses. You can delete local data in browser settings; this may reset preferences or end your session.