Thank you for your interest in Kristal Hotel‘s services and products. For us, given the special relationship with you, it is very important to ensure the protection of personal data that you provide to us. Equally, the confidentiality of your personal data is extremely important to us.
WHO ARE WE?
Kristal Hotel este deținut de Kristal Hotel S.R.L., cu sediul social în Focșani, Bulevardul București nr. 16, județul Vrancea, cod de înregistrare fiscală: RO40763036, număr de înregistrare la Registrul Comerțului J39/444/2019. Odată cu intrarea în vigoare a Regulamentului General UE privind Protecția Datelor (GDPR) începând cu data de 25 mai 2018 referitor la protecția persoanelor cu privire la prelucrarea datelor cu caracter personal și libera circulație a acestor date, cu modificările și completările ulterioare, Kristal Hotel S.R.L. administrează în condiții de siguranță și numai pentru scopurile specificate, datele personale pe care ni le furnizați, pentru desfășurarea activității în sectorul serviciilor de cazare. Scopul acestor măsuri sunt de a stabili responsabilitățile angajaților Kristal Hotel S.R.L., pentru îndeplinirea obligațiilor referitoare la garantarea și protejarea drepturilor și libertăților fundamentale ale persoanelor fizice, în special a dreptului la viața privată, cu privire la prelucrarea datelor cu caracter personal. Scopul colectării și prelucrării datelor este pentru furnizarea de servicii hoteliere și de turism în structurile de primire turistică, și pentru prestarea serviciilor de alimentație publică la toate locațiile la care societatea are deschise puncte de lucru. Scopul colectării datelor este acela de a asigura accesul și protecția turiștilor în structurile de primire turistică, și pentru prestarea serviciilor de alimentație publică. Kristal Hotel S.R.L. respectă dreptul la intimitate al persoanelor ale căror date sunt prelucrate, prin “Politica de confidențialitate’’, cu scopul de a informa asupra modului în care sunt colectate, folosite și procesate informațiile cu caracter personal. Informațiile înregistrate sunt destinate utilizării de către operator și sunt comunicate numai următorilor destinatari: autorităților publice centrale / locale. Datele dumneavoastră nu vor fi transferate în străinătate în vederea prelucrării.
CE DATE PRELUCRĂM?
In order to deliver the requested goods and services, to confirm the order, to inform you about the status of the order, to provide answers to the complaints placed and the services offered, as well as to carry out commercial activities, promotion of goods and services, marketing, advertising, development, market research, statistics, monitoring of sales and buying behavior of customers, administrative and media activities, you agree to entrust us with the following personal data: name, surname, home address, e-mail address, phone number. Please do not provide us with any other personal data other than those strictly necessary for the purpose specified in this policy.
WHAT IS THE PURPOSE AND LEGAL BASIS OF THE PROCESSING?
The personal data provided with your consent are and will be collected and processed by us exclusively for the purposes that we will present in the following. We mention that the processing of personal data is carried out on the basis of your consent in this respect, according to article 6 paragraph (1) letter (a) of the General Data Protection Regulation, hereinafter referred to as Regulation(s). Situations in which Kristal Hotel S.R.L. will collect and process your personal data and the purposes for which this data will be processed are as follows:
- The purpose of processing your personal data in the case of online bookings on the kristalhotel.ro website is to meet the mandatory requirements for the transmission of data related to card payments of the services you book through the electronic online payment tools found on the site.
- The purpose of processing your personal data in case of registration for events organized by Kristal Hotel S.R.L. at Kristal Hotel consists of sending the access ticket to the event, allowing access to the event, based on recorded data, communicating information related to the event, information about events similar to the one you signed up for, organized in the future and billing, in case of paid events;
- The purpose of processing personal data in this case is to inform you about our products and services and the events we organize.
When you post comments or questions on the Facebook platform, your name and any data you provide in that comment / message are retained for the purpose of subsequent notification of services, products or events organized by us. - When you use the contact form as well as the booking form on our site.
- The data collected may be processed for purposes of legitimate interest to create statistics that allow us to develop new products, make certain adjustments, make better business decisions or meet customer or potential customer expectations at the highest possible standards.
WHO HAS ACCESS TO YOUR DATA?
We inform you that in order to have an efficient collaboration with you both through email and the social network Facebook, only our employees and delegates from within the company have access to your data. The categories of services and personal data used are the following:
- SMTP services (email communication) – e-mail address;
- Contact Services – Online communication – e-mail address, name, surname, telephone number;
- Newsletter services – e-mail address, name, surname, telephone number;
- Billing services – name, surname, personal identification number, e-mail address, telephone number, address;
- Courier / postal services – name, surname, e-mail address, telephone number, address;
- SMS sending services – telephone number;
- Online payment processing services (online reservations) – name, surname, e-mail address, telephone number, address;
- Commenting services – name, surname, e-mail, telephone number;
- Accounting services – name, surname, address, personal identification number;
- Legal services – name, surname, address, personal identification number;
HOW LONG IS YOUR DATA STORED?
The personal data provided by you will be processed during the course of the contractual relation with you, as well as subsequently, for a reasonable duration, which may not be shorter than the general limitation period.
WHAT ARE YOUR RIGHTS?
As a data subject, you have the following rights:
- the right to access data – you have the right to obtain from Kristal Hotel S.R.L. a confirmation that personal data concerning you is being processed or not, as well as access to that data; at the same time, you can obtain a copy of the personal data provided to our company and which is subject to processing; for any other copies requested by you, Kristal Hotel S.R.L. may charge a reasonable fee, based on administrative costs; if you enter the application in electronic format and unless you request another format, the information will be provided to you in a commonly used electronic format;
- the right to rectification – you have the right to obtain inaccurate personal data rectification by Kristal Hotel S.R.L., as well as the right to obtain personal data that is incomplete; Kristal Hotel S.R.L. will communicate to each recipient to whom the personal data have been disclosed any rectification thereof, unless this proves impossible or involves disproportionate effort and will inform you of these recipients, if you so request;
- the right to delete data – you have the right to obtain from Kristal Hotel S.R.L. deletion of personal data concerning you without undue delay, and Kristal Hotel S.R.L. has the obligation to delete such data when: (i) personal data are no longer necessary for the purposes for which they were collected or processed; (ii) you withdraw your consent on the basis of which the processing takes place and there is no other legal basis for the processing; (iii) you object to the processing and there are no legitimate reasons prevailing in respect of the processing; (iv) personal data have been processed unlawfully; (v) personal data must be deleted in order to comply with a legal obligation incumbent on Kristal Hotel S.R.L. under European Union or Romanian law; Kristal Hotel S.R.L. will communicate to each recipient to whom the personal data have been disclosed any deletion, unless this proves impossible or involves disproportionate effort, and will inform you of these recipients if you so request;
- the right to restrict processing – you have the right to obtain from Kristal Hotel S.R.L. restricting the processing if you are in one of the following cases: (i) you dispute the accuracy of the data, for the period allowed by Kristal Hotel S.R.L. to verify the accuracy of the data; (ii) the processing is illegal and you object to the deletion of personal data, requesting instead to restrict their use; (iii) Kristal Hotel S.R.L. no longer needs personal data for the purpose of processing, but you request them for the establishment, exercise or defense of a right in court; or (iv) you objected to the processing for the time period in which it is verified whether the legitimate rights of Kristal Hotel S.R.L. prevail over your rights; Kristal Hotel S.R.L. will communicate to each recipient to whom the personal data have been disclosed any restriction on processing, unless this proves impossible or involves disproportionate effort and will inform you of these recipients, if you so request;
- the right to data portability – you have the right to receive your personal data, as provided to Kristal Hotel S.R.L., in a structured, commonly used and automatically readable format and to transmit this data to another operator, under certain conditions; In exercising this right, you have the right to have personal data transmitted directly from Kristal Hotel S.R.L. to another operator when this is technically feasible;
- the right to object – you have the right to object, for reasons related to the particular situation in which you are, at any time, to the processing of your personal data, including the creation of profiles based on those provisions;
- the right not to be subject to a decision based solely on automatic processing, including profiling;
- the right to file a complaint with the National Authority for the Supervision of Personal Data Processing;
- the right to withdraw your consent at any time, without affecting the lawfulness of the processing of personal data carried out by Kristal Hotel S.R.L. on the basis of consent before its withdrawal.
HOW DO YOU HAVE ACCESS TO YOUR DATA?
For any questions or requests regarding the personal data you have sent us, including in order to exercise your rights, as they are mentioned in the previous section, you can contact us in writing at: 16 Bucharest Boulevard, Focșani, Vrancea county, Romania, or by email at office@kristalhotel.ro. Kristal Hotel S.R.L. will provide you with the requested information in electronic format when possible, unless you request another format. The information provided, as well as any communication and measures taken in your exercise of the above rights are provided free of charge by Kristal Hotel S.R.L., however, if your requests are unfounded or excessive, in particular due to the their repetitive, Kristal Hotel S.R.L. may: (i) either charge a fee, taking into account the administrative costs of providing the information or communication or of taking the requested measures; (ii) either refuse to comply with the request. Please note that by accepting this agreement, your personal data will be processed by Kristal Hotel S.R.L., in accordance with this Personal Data Processing Policy.
Thank you!