Privacy Policy (GDPR) - Chill House Deva

S.C. Sunet Digital SRL is committed to protecting the privacy of your personal data. This policy explains how we collect, use, and protect your information in the context of providing hotel-style accommodation services. Data Controller: S.C. Sunet Digital SRL, CUI: 23937485, Reg. Com.: J20/847/2008, headquartered at Str. Valeriu Braniște nr. 1, Deva. 1. What data do we collect? We collect information necessary for processing reservations and fulfilling legal obligations: • Identification information: First name, last name, ID series and number (required for the Arrival and Departure Notification Form, according to current tourism legislation). • Contact information: Email address, phone number. • Payment details: All payments are processed securely via our partner EuPlatesc.ro. We do NOT store your bank data or card details. • Technical data: IP address and cookies for website functionality. 2. Purpose of data collection • Processing reservations: Confirmation and management of your stay. • Legal obligations: Reporting to competent authorities and preparation of fiscal documents (invoices). • Communication: Responses to inquiries or transmission of check-in/check-out details. • Security: Prevention of fraud and ensuring the safety of property through video surveillance in common areas (where applicable). 3. Legal basis • Contractual: To provide the requested accommodation services. • Legal: To comply with regulations regarding tourist records and tax legislation. • Consent: If you subscribe to the newsletter or other marketing communications. 4. How long do we keep the data? Fiscal documents are kept according to the law for 10 years. Other data is kept only as long as necessary to fulfill the mentioned purposes. 5. Your rights (GDPR) According to Regulation (EU) 2016/679, you have the following rights: • Right of access: To know what data we store about you. • Right to rectification: To correct inaccurate data. • Right to erasure ("right to be forgotten"): To request the deletion of data (if it does not conflict with legal storage obligations). • Right to portability: To receive the data in a structured format. • Right to object: To object to processing for marketing purposes. To exercise these rights, please contact us at booking@chillhousedeva.ro.