Privacy Policy
In accordance with Regulation (EU) 2016/679 (GDPR) and Romanian Law no. 190/2018
1. Data Controller
Registered office: 80 Oituz Street, Popești-Leordeni, Ilfov County, Romania
Tax ID (CUI): 48870445 | Trade Registry: J23/6383/2023
Data Protection Officer (DPO): contact@pensiunearoua.ro
Phone: +4 0762 777 111
2. Categories of Personal Data Processed
A. Data collected automatically:
- IP address (may be anonymized depending on Analytics settings)
- Browser type, operating system, screen resolution
- Pages visited, visit duration, entry and exit pages
- Traffic source (referrer)
- Language preference (RO/EN)
- Cookie consent status
B. Data we do NOT collect:
TravelArad.ro does not have contact forms, registration, newsletter, or online booking functionality. We do not collect names, email addresses, phone numbers, postal addresses, or other directly identifying personal data through this Website.
3. Purposes and Legal Basis
| Purpose | Legal Basis (GDPR) |
|---|---|
| Website functionality | Art. 6(1)(f) — Legitimate interest |
| Traffic statistical analysis | Art. 6(1)(a) — Consent (Google Analytics) |
| Website security | Art. 6(1)(f) — Legitimate interest |
4. Data Retention
Session cookies are deleted when the browser closes. Consent and language cookies are stored for 365 days. Google Analytics data is retained for a maximum of 26 months. Server visitor logs are deleted after 90 days.
5. Data Recipients and International Transfers
We do not sell, rent, or share your personal data with third parties for commercial purposes. Data processed by Google Analytics may be transferred to the USA under the EU-US Data Privacy Framework and Standard Contractual Clauses (SCCs).
6. Your Rights (Art. 12-23 GDPR)
You have the right to: access, rectification, erasure ("right to be forgotten"), restriction of processing, data portability, objection, and withdrawal of consent. To exercise any right, send a written request to contact@pensiunearoua.ro. We will respond within 30 calendar days.
7. Right to Complain
You may file a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP): www.dataprotection.ro
8. Data Security
We implement appropriate technical and organizational measures including HTTPS encryption, CSRF protection, brute force prevention, SQL injection prevention, bcrypt password hashing, and restricted admin access.
9. Profiling and Automated Decision-Making
TravelArad.ro does not use automated profiling or make automated decisions that significantly affect you (Art. 22 GDPR).
10. Children's Data
The Website is not intended for persons under 16 years of age. If you discover that a minor has provided personal data, please contact us for deletion.
Last updated: February 5, 2026