Privacy policy of www.pensiuneaelbram.ro
Last updated on 20 July 2023
This site collects some personal data from its users.

Data owner and operator
Elbram House ("www.pensiuneaelbram.ro", "owner")
Dubova
Romania
Owner contact email: elbramhouse@gmail.com

Types of data collected

Among the types of personal data this site collects, on its own or through third parties, are: cookies; usage data; first name; last name; e-mail address; website address.

Full details of each type of personal data collected are provided in the dedicated sections of this privacy policy or through the texts of specific explanations displayed prior to data collection.

Personal data may be freely provided by the user or, in the case of usage data, automatically collected when using this website.

Unless otherwise specified, all data required by this website is mandatory and failure to provide such data may make it impossible to provide the services of this website. In cases where this website specifically states that certain data is not mandatory, users are free to withhold such data without consequence to the availability or operation of the service.

Users who are unsure about which personal data is mandatory are invited to contact the owner.

Any use of cookies - or other tracking tools - by this website or owners of third party services used by this website serves the purpose of providing the service requested by the user, in addition to any other purposes described herein and in the cookie policy, if available.

Users are responsible for any personal data of third parties obtained, published or shared through this site and confirm that they have the consent of the third party to provide the data to the owner.

How and where the data is processed

Processing methods
Proprietarul ia măsurile de securitate corespunzătoare pentru a preveni accesul neautorizat, divulgarea, modificarea sau distrugerea neautorizată a datelor.

Data processing is carried out using computers and/or IT-enabled tools, following procedures and organisational modes strictly related to the purposes indicated. In addition to the owner, in some cases data may be accessible to certain types of responsible persons involved in the operation of this site (administration, sales, marketing, legal, system administration) or external parties (such as third party technical service providers, mail carriers, hosting providers, IT companies, communication agencies) appointed, if necessary, as data processors by the owner. An updated list of these parties can be requested from the owner at any time.

Legal basis of the processing
The owner may process personal data relating to users if one of the following applies:
Users have given their consent for one or more specific purposes. Note: Under some legislations, the owner may be allowed to process personal data until the user objects to such processing ("opt-out"), without having to rely on consent or any other subsequent legal grounds. However, this does not apply when:
-Personal data processing is subject to European data protection legislation;
- The provision of data is necessary for the performance of an agreement with the user and/or any pre-contractual obligations of the user;
- The processing is necessary to comply with a legal obligation incumbent on the owner;
- The processing relates to a task which is carried out in the public interest or in the exercise of public authority vested in the owner;
- The processing is necessary for the legitimate interests pursued by the owner or a third party.

In any case, the owner will be happy to help clarify the specific legal basis that applies to the processing and, in particular, whether the provision of personal data is a legal or contractual requirement or a requirement necessary for the conclusion of a contract.

Place
The data is processed at the owner's operating offices and at any other places where processing parties are located.

Depending on the user's location, data transfers may involve transferring user data to a country other than their own. To find out more about where this transferred data is processed, users can check the section containing details about the processing of personal data.

Users also have the right to find out about the legal basis of data transfers to a country outside the European Union or to any international organization governed by public international law or established by two or more countries, such as the UN; and about the security measures taken by the owner to protect their personal data.

If such a transfer occurs, users can find out more by checking the relevant sections of this document or consult the owner using the information provided in the contact section.

Retention time
Personal data are processed and stored for as long as they are required for the purpose for which they were collected.

Therefore:
Personal data collected for purposes related to the performance of a contract between the owner and the user shall be kept until the full performance of that contract.
Personal data collected for the purposes of the legitimate interests of the owner shall be kept as long as necessary for the fulfilment of those purposes. Users can find specific information on the legitimate interests pursued by the owner in the relevant sections of this document or by contacting the owner.

The owner may be authorised to retain personal data for a longer period of time whenever the user has given consent to such processing, as long as this consent is not withdrawn. In addition, the owner may be obliged to retain personal data for a longer period of time whenever this is necessary for the fulfilment of a legal obligation or at the request of an authority.

Once the retention period expires, Personal Data shall be deleted. Therefore, the right to access, the right to erasure, the right to rectification and the right to data portability cannot be enforced after expiration of the retention period.

Purposes of processing
User data is collected to enable the owner to provide its service, comply with its legal obligations, respond to law enforcement requests, protect its rights and interests (or those of users or third parties), detect any malicious or fraudulent activity, as well as the following: Analyze and how to contact the user.

For specific information about the personal data used for each purpose, the user can consult the section "detailed information on the processing of personal data".
Detailed information on the processing of personal data
Datele cu caracter personal sunt colectate în următoarele scopuri și utilizând următoarele servicii:

Analysis
The services contained in this section allow the owner to monitor and analyze web traffic and can be used to track user behavior.
Google Analytics (Google LLC)
Google Analytics is a web analytics service provided by Google LLC ("Google"). Google uses the data collected to track and examine the use of this website, to prepare reports on its activities and to share them with other Google services. Google may use the data collected to contextualise and personalise ads in its own advertising network.
Personal data processed: cookies; usage data.
Place of processing: United States of America

Contact form (this site)
By filling in the contact form with their details, the user authorizes this site to use these details to respond to requests for information, quotations or any other type of request as indicated on the form header.
Personal data processed: Email address; first name; last name; phone number; company; address.

User rights
Users may exercise certain rights with regard to their data processed by the owner.
In particular, users have the right to do the following:
Withdraw consent at any time. Users have the right to withdraw their consent if they have previously given their consent to the processing of their personal data.
They object to the processing of their data. Users have the right to object to the processing of their data if the processing is carried out on a legal basis other than consent. Further details are provided in the dedicated section below.

Access their data. Users have the right to find out whether data is being processed by the owner, to obtain information on certain aspects of the processing and to obtain a copy of the data being processed.
Check and seek rectification. Users have the right to check the accuracy of their data and request that it be updated or corrected.
Restrict the processing of their data. Users have the right, in certain circumstances, to restrict the processing of their data. In this case, the owner will not process their data for any purpose other than storage.

Have their personal data deleted or otherwise disposed of. Users have the right, in certain circumstances, to have their data deleted by the owner.
Receive their data and transfer it to another operator. Users have the right to receive their data in a structured, commonly used and machine-readable format and, if technically feasible, to transfer it to another controller without hindrance. This provision is applicable provided that the data are processed by automatic means and that the processing is based on the user's consent, on a contract to which the user is party or on the user's pre-contractual obligations.
File a complaint. Users have the right to lodge a complaint with their competent data protection authority.

Details on the right to object to processing
Where personal data are processed in the public interest, in the exercise of an official authority vested in the owner or for the purposes of legitimate interests pursued by the owner, Users may object to such processing by providing a reason relating to their particular situation to justify their objection.

Users should be aware, however, that if their personal data are processed for direct marketing purposes, they may object to such processing at any time without providing any justification. To find out whether the owner is processing personal data for direct marketing purposes, users can consult the relevant sections of this document.

How to exercise these rights
Any requests to exercise user rights may be directed to the owner via the contact details provided in this document. Such requests may be exercised free of charge and will be addressed by the owner as soon as possible and always within one month.
Further information on data collection and processing

Legal action
User's personal data may be used for legal purposes by the owner in court or in steps leading to possible legal action resulting from misuse of this website or related services.
The user declares that he/she is aware that the owner may be obliged to disclose personal data at the request of public authorities.
Additional information about the user's personal data
In addition to the information contained in this privacy policy, this site may provide the user with additional, contextual information regarding certain services or the collection and processing of personal data upon request.

System and maintenance logs
For operation and maintenance purposes, this website and any third party services may collect files that record your interaction with this website (system logs) and use other personal data (such as your IP address) for this purpose.
Information not included in this policy
Further details on the collection or processing of personal data can be requested at any time from the owner. Please refer to the contact information at the beginning of this document.

How "do not track" requests are handled
This website does not accept "do not track" requests.
To determine whether any of the third-party services you use honor "do not track" requests, please read their privacy policies.

Changes to this privacy policy
The Owner reserves the right to make changes to this Privacy Policy at any time by notifying its users on this page and possibly within this site and/or - to the extent technically and legally feasible - sending a notice to users via any contact information available to the Owner. It is recommended that you check this page often, referring to the date of the last change listed at the bottom.
Where changes affect processing activities carried out on the basis of user consent, the owner will collect a new consent from the user if necessary.

Definitions and legal references

Personal data (or data/dates)
Any information that identifies or identifies an individual, directly, indirectly or in connection with other information - including a personal identification number.

Usage Data
Information collected automatically through this site (or third party services used on this site), which may include: IP addresses or domain names of computers used by users using this site, Uniform Resource Identifier (URI) addresses, time of request, method used to transmit the request to the server, size of file received in response, numeric code indicating the status of the server response (successful, error, etc.). ), country of origin, browser and operating system characteristics used by the user, various details of the time per visit (e.g. time spent on each page within the website) and details of the path followed within the website with particular reference to the sequence of pages visited, and other parameters about the operating system of the device and/or the user's IT environment.

User
The person using this website who, unless otherwise specified, is the same as the data subject.
The person concerned
The person to whom the personal data relates.
Data processor (or data supervisor)
The individual or legal person, public authority, agency or other body that processes personal data on behalf of the controller as described in this privacy policy.

Data operator (or owner)
The individual or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data, including the security measures relating to the operation and use of this website. The data controller, unless otherwise specified, is the owner of this website.
This website
The means by which the user's personal data are collected and processed.
Service
The service provided by this site as described in relative terms (if available) and on this site/site.

European Union (or EU)
Unless otherwise stated, all references in this document to the European Union include all current Member States of the European Union and the European Economic Area.
Cookie module
Small sets of data stored on the user's device.

Legal information
This privacy statement has been drawn up on the basis of the provisions of several pieces of legislation, including Article 13/14 of Regulation (EU) 2016/679 (General Data Protection Regulation).
This privacy policy applies only to this website, unless otherwise specified in this document.