Last updated: 7 November 2026

1. Who we are

The data controller is LAKATOS BOTOND ÎNTREPRINDERE INDIVIDUALĂ (Naplak Guesthouse / Pensiunea Soarelui), tax ID (CUI) 19544950, trade register no. F01/780/2006, registered at Rimetea nr. 14, 517610 Rimetea, jud. Alba, România. You can contact us at lakatos.botond@gmail.com or +40 729 412 874.

2. What data we process and why

  • Booking requests and messages (via WhatsApp, phone or email): name, phone number, email address, dates of stay, number of guests and the content of your message. We use them to reply and prepare your booking (Art. 6(1)(b) GDPR – steps prior to entering a contract).
  • Accommodation and invoicing: the data required by law on arrival and for issuing tax documents (Art. 6(1)(c) GDPR – legal obligation).
  • Visiting the website: our hosting provider automatically logs technical data (IP address, browser type, time of access) for security and operation (Art. 6(1)(f) GDPR – legitimate interest).
  • Statistics (Google Analytics): only if you consent in the cookie banner – information on how the site is used (Art. 6(1)(a) GDPR – consent).
  • Map (Google Maps): the map only loads after your consent; Google then receives your IP address and technical data (consent).

The booking form on the site does not store any data on our server: it only opens WhatsApp with a prepared message, which you send yourself.

3. Who we share data with

  • our website hosting provider;
  • Google Ireland Ltd. (Google Analytics, Google Maps), only with your consent; data may be transferred to the USA, covered by the EU-US Data Privacy Framework;
  • WhatsApp Ireland Ltd. (Meta), if you choose to message us on WhatsApp, under WhatsApp’s terms;
  • public authorities and our accountant, where the law requires it.

We do not sell your data or use it for advertising.

4. How long we keep data

We keep messages and booking requests for as long as needed to reply and for your stay, then for at most 2 years. Accounting records are kept for the period required by tax law. Google keeps statistics data for at most 14 months.

5. Your rights

You have the right to access, rectify, erase, restrict, port and object to the processing of your data, and to withdraw your consent at any time (for example via “Cookie settings” in the footer). To exercise any of these rights, write to lakatos.botond@gmail.com.

If you believe your rights have been infringed, you can lodge a complaint with the Romanian data protection authority (ANSPDCP) – www.dataprotection.ro.

6. Cookies

Details about the cookies we use are in our Cookie Policy, linked in the site footer.