How we handle your personal data
The Veranda Guesthouse is committed to protecting visitors’ personal data. This notice explains what data we process, for what purpose and on what legal basis, as well as your rights. Processing is carried out in accordance with EU Regulation 2016/679 (GDPR).
Contact form: the name, e-mail address and message you provide — solely to answer your enquiry. Server logs: the hosting provider may create technical logs (e.g. IP address, browser data) for the security and operation of the service. For bookings you may also contact us via WhatsApp, phone or e-mail — in which case we process the data provided through these channels.
Contact data is processed to answer your enquiry and to clarify the booking/enquiry, based on your consent (Art. 6(1)(a) GDPR). Technical logs are processed on the basis of legitimate interest (Art. 6(1)(f)) for the secure operation of the website.
We use the following providers for the operation of the website: Cloudflare, Inc. (hosting / static hosting), Web3Forms (forwarding contact-form messages by e-mail), Google (the map embedded on the contact page, which only loads after your consent). These providers act according to their own privacy policies.
Contact messages are kept for at most 1 year, unless a longer retention is required by law or the data is still needed for an ongoing matter. After that, the data is deleted.
Necessary cookies: the “lang” cookie storing the chosen language and the cookie storing your cookie consent — these are necessary for the website to work and may be used without requiring consent. Third-party cookies: on the contact page, the Google Maps map may use Google cookies, so the map is only displayed after your explicit consent (the “Accept” button in the cookie bar or loading the map). You can withdraw your consent at any time by deleting the cookies in your browser.
You have the right to access, rectify, erase or restrict the processing of your personal data, to object to processing, and to data portability. Where processing is based on consent, you can withdraw your consent at any time. You can send your requests to the contact details above.
If you believe that the processing infringes your rights, you may lodge a complaint with the Romanian supervisory authority (ANSPDCP — Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal, www.dataprotection.ro) or turn to the courts.
For privacy questions, contact us at the e-mail address or phone number above.