Privacy Policy

1. Privacy at a Glance

The following information provides a simple overview of what happens to your personal data when you visit our website or book an apartment with us. Personal data refers to any data with which you could be personally identified. Since our apartments are located in Romania, we are subject to the European General Data Protection Regulation (GDPR) as well as supplementary Romanian data protection laws (Law No. 190/2018).

---

2. General Information and Mandatory Information

Responsible Entity

The entity responsible for data processing on this website and for the rental of our apartments is:

WOGENFELS S.R.L.
Represented by: Dominik Pototschnig
Strada PANSELELOR Nr. 1, Ap. 4, Bloc A4 / Scara A / ETAJ 1 / Apartament 4
305600 Sânnicolau Mare, Romania
Unique Registration Code (CUI): 49077015
Email: office@wogenfels.ro

Storage Duration

Unless a more specific storage period is specified in this privacy policy, your personal data will remain with us until the purpose for data processing no longer applies. If you assert a justified request for deletion or revoke your consent to data processing, your data will be deleted unless we have other legally permissible reasons for storing your personal data (e.g., tax or commercial retention periods in Romania of up to 10 years); in the latter case, the deletion will take place after these reasons have ceased to apply. In accordance with recent EU directives for short-term rentals, booking-relevant data will be kept for a maximum of 18 months after the removal of a registration number, provided there are no legal disputes.

Legal Basis for Processing

We primarily process your data based on:

• Art. 6 (1) (b) GDPR: For the performance of a contract (your stay in our apartment) or pre-contractual steps.
• Art. 6 (1) (c) GDPR: For compliance with a legal obligation (e.g., guest registration under Romanian tourism law, tax retention obligations).
• Art. 6 (1) (f) GDPR: For the purposes of our legitimate interests (security of the web presence, protection of our property).

---

3. Data Collection on Our Website

Cookies and Local Storage

Our web pages use “cookies” and the local storage of your browser. We only use essential, technically necessary storage:

• Language Preference: Stores your selected language so you do not have to be redirected upon every visit.
• Theme Preference: Stores the display option (Light/Dark Mode).

These essential storage processes take place on the basis of Art. 6 (1) (f) GDPR. Data is not shared with third parties or used to analyze your behavior.

Server Log Files

The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us (IP address, browser type, operating system, referrer URL, time). These data will not be combined with data from other sources. Data collection is based on Art. 6 (1) (f) GDPR to ensure the error-free provision and security of the website.

Contact via Email or WhatsApp

If you contact us via email or WhatsApp, your inquiry, including all resulting personal data (name, request), will be stored and processed by us for the purpose of processing your request (legal basis: Art. 6 (1) (b) or (f) GDPR). We do not pass on these data without your consent.

---

4. Data Collection During Booking and Stay

We offer both long-term and short-term rentals. Depending on the type of tenancy, different legal requirements apply to the storage and collection of your data.

Conclusion of Rental Contracts (Long-Term Rental)

If you conclude a fixed-term or open-ended rental contract with us, we collect inventory data (e.g., name, address, date of birth, ID document details) as well as contract and payment data necessary for the fulfillment of the tenancy (Art. 6 (1) (b) GDPR). Due to legal reporting obligations (e.g., ANAF - Romanian tax authority) and the fulfillment of tax proof obligations, these contracts and proofs of payment are stored in accordance with local law (sometimes up to 10 years) (Art. 6 (1) (c) GDPR).

Guest Registration (Short-Term Rental / Tourist Stays)

Should you rent an apartment for a short-term tourist or business stay with us, we are legally obliged under Romanian law (especially requirements for accommodation establishments) to collect certain personal data from you upon check-in. These generally include:

• First and last name
• Residential address
• Identification data from ID documents (e.g., ID card number or passport)
• Period of stay

We process these data (Art. 6 (1) (c) GDPR) to fulfill our legal reporting obligation to local authorities and the police in the context of public security. We generally do not request a copy of your ID card; we only note the document number.

Disclosure of Data to Third Parties

We only pass on your personal data if:

• You have explicitly consented.
• The processing is necessary for the execution of a contract (e.g., with booking platforms like Airbnb, Booking.com, if applicable, or payment service providers). In this context, booking platforms regularly exchange statistical data with central digital hubs.
• There is a legal obligation to disclose (e.g., to Romanian tax authorities, police, or tourism authorities).

---

5. Your Rights

You have the right at any time within the framework of the applicable legal provisions (GDPR):

• Access (Art. 15 GDPR): to receive information free of charge about the origin, recipient, and purpose of your stored personal data.
• Rectification (Art. 16 GDPR) and Erasure (Art. 17 GDPR): to request the correction or deletion of this data.
• Restriction (Art. 18 GDPR): to demand the restriction of the processing of your data.
• Data Portability (Art. 20 GDPR): to have data that we process automatically handed over to yourself or to a third party in a common format.
• Revocation (Art. 7 (3) GDPR): to revoke your already given consent to data processing at any time.
• Objection (Art. 21 GDPR): to file an objection against the processing of your personal data.

Right to lodge a complaint with the competent supervisory authority (Art. 77 GDPR) In the event of violations of the GDPR, those affected have the right to lodge a complaint with a supervisory authority. The authority responsible for us in Romania is:

Autoritatea Naţională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP) B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, cod poștal 010336, București, România Website: www.dataprotection.ro Email: anspdcp@dataprotection.ro

To exercise any of your rights, you can contact us at any time at the email address provided above (office@wogenfels.ro).