Privacy Policy

1. WHO ARE WE?

DOMENIUL CASA TIMIS SRL (hereinafter referred to as “CASA TIMIS” or “the Controller”), attaches great importance to your personal data, constantly taking the necessary steps to ensure that the data processing carried out complies with the legal requirements in this area. To this end, we have drawn up this commitment, by which we undertake to respect the confidentiality of your personal data and by means of which we explain to you what categories of personal data CASA TIMIS processes, how such data are used and for what purpose they are processed.

This Policy relates only to the personal data that we process through our www.casatimis.ro (hereinafter referred to as the “Site” or “Platform”) in the context of your interaction with it by filling in the forms available on the Platform, by placing an order for gift cards in accordance with the Policy on the Site, by subscribing to the newsletter, by making a reservation, by submitting the satisfaction survey or by browsing the Site. We want to assure you that we have taken all necessary measures to ensure the confidentiality of your data, which are processed only by Controller staff who have been previously trained and authorised to process personal data and who respect firm confidentiality commitments.

To get to know us virtually, we provide you with our identification data.

The Controller that processes your personal data when you browse or interact with the online platform www.casatimis.ro is DOMENIUL CASA TIMIS SRL, with registered office in Prahova county, Com. Bucov, Chitorani village, Florica Romalo Street no. 4, registered at the Trade Register under number J29/894/2022, with unique identification code 45910456.

For any questions or concerns regarding the protection of personal data you are invited to send a request to the postal address indicated above or to the e-mail address dpo.casatimis@cristim.ro. Persons sending such requests to CASA TIMIS are kindly requested to mention in the subject of the e-mail/mailing envelope information such as “data protection”, “GDPR”, “personal data”; in this way there is a guarantee that requests will be treated with priority.

In this capacity, you will receive a response within 30 days at the latest from the communication of the document to CASA TIMIS, an extension of this deadline can operate only in exceptional situations. In these cases, we assure you that you will be duly informed of this deadline.

2. DEFINITIONS

• „Personal data”  means, for the purposes of national and international legislation in force, any information relating to an identified or identifiable natural person. An identifiable person is one who can be identified, directly or indirectly, in particular by reference to an identification number or to one or more factors specific to his or her physical, physiological, mental, economic, cultural or social identity.

! For the purposes of this policy, personal data that will be subject to processing may relate to: name, surname, telephone number, e-mail address, delivery address etc., as described below.

• ”Personal data processing” means any operation or set of operations which is performed upon personal data, whether or not by automatic means, such as collection, recording, organisation, storage, adaptation or alteration, retrieval, consultation, use, disclosure to third parties by transmission, dissemination or otherwise, alignment or combination, blocking, erasure or destruction.

! For the purposes of this policy, data processing refers to those processing carried out when you browse the www.casatimis.ro website or interact with it by filling in the forms available on the Platform or placing an order through the website or by subscribing to the Controller’s newsletter.

•  „ Controller” means the person who, alone or together with others, determines the purposes and means of processing personal data.

!For clarity, for the purposes of this Privacy Policy, the Controller of personal data is DOMENIUL CASA TIMIS SRL.

• ”Data subject” is the person whose personal data is subject to processing.

!For the purposes of this Policy, the data subject is the Internet user browsing the www.casatimis.ro website.

• ”Consent” of the data subject means any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which the data subject consents, by a statement or by an unambiguous action, to the processing of personal data relating to him or her.

      The data processing carried out through the Platform and on the legal basis of the consent is exclusively for the purpose of subscribing to the newsletter, i.e. the acceptance of cookies, other than the necessary (essential) ones, as highlighted in the cookie pop-up.

• ”Third party” means the natural or legal person, public authority, agency or body other than the data subject, the Controller, the person authorised by the Controller and persons who, under the direct authority of the Controller or the person authorised by the Controller, are authorised to process personal data.
• „Processor” means the person who processes personal data on behalf of the Controller.

3. WHAT TYPES OF PERSONAL DATA DO WE PROCESS?

Your browsing of and interaction with the Site involves the processing of two categories of personal data, namely:

1. a. personal data that you disclose to the Controller on a voluntary basis (e.g. via the order or contact form, respectively in the case of newsletter subscription etc.), which are collected on an individual basis;
2. b. data that you provide involuntarily, simply by browsing our website.

In the case of opting for invoicing per legal entity, we draw your attention to the fact that the data requested and entered in the forms on the website on behalf of a legal entity do not represent personal data (company e-mail address such as name@office, company telephone number such as landline number etc.) in light of the provisions of Regulation No 679/2016 on the protection of personal data (GDPR).

In the event that the personal data of the representative of the company natural person (name and surname, telephone number, e-mail address) are provided, he/she will be considered as the data subject according to the provisions of the GDPR and all protection measures will be applicable to him/her.

The User is properly informed about the processing of personal data when he/she provides the Controller with his/her data through the forms on the Website, thus CASA TIMIS fulfils its legal obligation to inform the User.

CASA TIMIS collects the following personal data on the basis of the voluntary provision of the data subject:

A. For placing an order:

• first name and last name;
• telephone number;
• e-mail address;
• any other data that you make available to us by filling in the box related to the form, through which you can send us details or preferences regarding the order you placed.

Note: In the case of online payment by credit card, your data will not be processed by the Controller, as the payment activity falls under the requirements of the Privacy Policy of our payment processor partners. However, some data (card number, for example) may be saved for future purchases via your browser and only if you agree to the retention of this data in your browser. This processing process only takes place in order to facilitate the user’s experience of placing an order and does not involve the Controller, in the sense that it does not have access (even by simply viewing it) to the data required to pay for the order via bank card.

B. For obtaining additional information/ submitting complaints via e-mail or telephone (customer support), respectively in the context of inbound and/or outbound telephone calls:

• voice;
• phone number;
• other categories of personal data that you make available to us in the context of telephone conversations and that may refer to: 

• name and surnam;
• email address;
• delievering addres;
• bank account (for returning amounts, if necessary), etc.

• traffic data related to each telephone call, respectively: the start date of the telephone call, the end date of the telephone call, the duration of the telephone conversation, the telephone network in which the conversation took place, the number to which the call was made and the number from which the call was made, etc. 

C.  For newsletter subscription

Subscription to the newsletter is conditional upon your consent to receive commercial and marketing messages from CASA TIMIS. In this context, the following personal data will be processed as personal data:

• e-mail address;
• name.

D. For making a reservation at CASA TIMIS’ restaurants, respectively for experiences and events

Making a reservation involves disclosing personal data that will be used, with your consent, to contact you in order to honour your reservation.

• first name and last name;
• telephone number;
• e-mail address;
• the number of persons concerned in the context of the reservation;
• dates of stay (arrival date, departure date);
• number of rooms booked and room type etc..;
• any other data you provide by filling in the “Message” section.

E. To complete the contact form

• first name and last name;
• telephone number;
• e-mail address.

G. For submitting the satisfaction survey

The guest of Casa Timis has the option to fill in and send, following the stay or experience at Casa Timis, a satisfaction survey, in the context of which the Controller may process the following personal data:

• first name;
• country of origin;
• your suggestions regarding the Controller’s services;
• your option to subscribe to the newsletter, but also
• your consent for the distribution of your suggestion on the Controller’s social media pages.

The Controller also processes marketing and communication data only with the prior consent of the users, as well as technical data and browsing actions through cookies and similar technologies. You can access our cookies policy here.

The above-mentioned data contribute to the provision of services offered by CASA TIMIS and to the activity of ordering gift cards marketed through the platform www.casatimis.ro, as well as to the communication with the Controller or the transmission of marketing communications on its behalf, but with the prior consent of the user, as detailed in the Newsletter Subscription Policy.

In the event that you provide us with personal data that are not necessary for the purposes described above, i.e. for the fulfilment of your orders, for the resolution of complaints or for the provision of additional information, we reserve the right to remove them immediately from our database.

The Controller may also unintentionally collect other personal data belonging to you, namely: IP address, browser version, time and location settings, operating system, platforms on the devices used to access our sites, etc. This information will not be used to identify individuals or legal entities, as the case may be, and will not be made public other than under the conditions inserted in this Privacy Policy, supplemented by the Cookie Policy available on www.casatimis.ro.

The Controller reserves the right to request additional information from you, accompanied by supporting documentation, via email, in print or in any other manner deemed appropriate by the Controller, if necessary, for the purposes detailed below.

Payment processing service providers will process the following categories of personal data:

• bank card details (card number, CVC etc.);
• first name and last name of the card’s holder;
• order ID;
• date of transaction initiation;
• date of transaction finalisation;
• transaction ID;
• payment status (payment made/ not made);
• transactioned ammount (as the case may be).

These payment processing service providers process your data as Independent Controllers, which is why their data processing are subject to their Privacy Policy. In the actual input step of the card details you use for online payment, the identity of the Online Payment Controller will also be disclosed.

Note: In case of returns/cancellations of orders that cannot be processed in the Payment Controller platform, CASA TIMIS may process, as personal data, your IBAN and the bank where you opened your bank account in order to refund the money paid for the returned products/cancelled orders.

Note: CASA TIMIS has concluded data processing agreements with its service providers (e.g. IT/online system administration, legal services, payment processing services etc.), but shall not be liable for the processing carried out by these providers on their own behalf in the event that they process data as independent Controllers, the data subject shall be duly informed of the processing operations involving a transfer of data between CASA TIMIS and any company providing services to the Controller.

Thus, we draw your attention to the fact that when you wish to make a reservation, the Controller will be company T&C NET S.R.L., as an independent Controller, and the processing will be carried out in accordance with the Terms and Conditions and Privacy Policy of the aforementioned Controller.

Your personal data may be disclosed by CASA TIMIS to processors, including contractual partners, financial authorities and institutions, courts or competent bodies, at their request and for the purpose of providing the services offered by the Controller.

CASA TIMIS may store your personal data even after registering a request for erasure of such data, if the storage is made for one of the following purposes, provided for by art. 17, (3) of the GDPR, namely:

1. performance of a contract;
2. the fulfilment of a legal obligation providing for processing under European Union or national law applicable to the Controller;
3. the exercise of the right of free expression and information;
4. the protection of the vital interests of the data subject;
5. the performance of a task carried out in the public interest;
6. archiving in the public interest, scientific or historical research or for statistical purposes;
7. the protection of the legitimate interests of the Controller or of a third party, except where the interests or fundamental rights and freedoms of the data subject require the protection of personal data, in particular where the data subject is a child;
8. for the establishment, exercise or defence of a legal right in court.

FOR WHAT PURPOSE AND ON WHICH GROUNDS DO WE PROCESS PERSONAL DATA?

CASA TIMIS processes your personal data for the following purposes and on the following legal grounds:

1. processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract (Art. 6 para. (1),(b) of Regulation (EU) No 679/ 2016 of the European Parliament and of the Council of 27 April 2016), in particular, for the purpose of ensuring the data subject’s access to the products and services presented on the www.casatimis.ro Platform and the conclusion of the distance selling;
2. he processing is carried out on the basis of the data subject’s consent (Art. 6, para. (1), (a) of Regulation (EU) No 679/ 2016 of the European Parliament and of the Council of 27 April 2016), in the case of the transmission of commercial and marketing communications or the acceptance of cookies other than necessary;
3. the processing is necessary for the purposes of the legitimate interests pursued by the Controller (Art. 6 para. (1), (f) of Regulation (EU) No 679/ 2016 of the European Parliament and of the Council of 27 April 2016), to be able to provide accurate information and to solve problems of any nature relating to the content of the www.casatimis.ro website or the services and products offered by Controller, as well as for actions involving interaction with the online platform.

Your personal data shall be processed so that the Controller CASA TIMIS may:

• improve the website and the services provided through it;
• determine the usefulness/popularity of the web content presented on the site;
• send technical, support or administrative notifications;
• honour requests and resolve complaints received from users;
• facilitate user access to the services offered by CASA TIMIS;
• communicate information of interest to users of the website;
• protect the rights of CASA TIMIS.

DURATION OF PERSONAL DATA PROCESSING

Personal data processed by CASA TIMIS through the website www.casatimis.ro are retained for a reasonable period of time in relation to the purpose of data processing, in accordance with the legal provisions on data archiving. The Controller respects the data archiving deadlines imposed by law.

With regard to data obtained in the context of inbound and outbound telephone conversations (telephone call recordings), they will be kept, as a rule, for a period of 30 days. However, data obtained in the context of telephone calls and which are necessary, for example, for billing and order fulfilment, will be kept in accordance with the legal provisions on archiving.

The data processed as a result of your subscription to the newsletter will be processed by CASA TIMIS only until you withdraw your consent for processing, in accordance with the Newsletter Subscription Policy available at www.casatimis.ro.

SPECIAL PROVISIONS RELATED TO MINORS 

The Controller pays particular attention to the data of minors that may be provided by them in order to place an order on the online platform www.casatimis.ro, in order to ensure that any processing of personal data of minors is carried out only in accordance with legal requirements and in strictly determined cases.

Thus, the Controller does not carry out promotional marketing activities directly towards minors. However, if a minor places an order/contacts the Controller through the related platforms, it will be considered that the minor has done so with the consent of his/her legal representative.

Minors are not allowed to request services or participate in contests or campaigns organised by the Controller, unless these operations are carried out on behalf of the minor by his/her legal representative or guardian, as required by law.

In this regard, any person who provides the Controller with personal data through the Website or other applications or devices covered by this Policy warrants that he/she is of legal age, i.e. that he/she has full legal capacity.

Any processing of personal data belonging to minors will be carried out only in accordance with the law and taking into account the above provisions.

7. PERSONAL DATA TRANSFER

Your data is processed on the territory of the European Union, through secure internal servers. However, through plugins specific to social networks (for example, Facebook, Linkedin, Instagram, etc.), having the quality of third-party recipients of the data (third-party recipients), it is possible that your data processed in this context will be also transferred outside the European Union/European Economic Area and stored on servers in third countries. In this sense, the Controller has implemented a series of necessary and appropriate measures in order to be able to ensure a compliant data processing.

CASA TIMIS undertakes to process the collected data only in accordance with the stated purposes and not to make public, sell, rent, license, transfer etc. unauthorized databases containing information on the data subjects to any third party not involved in the fulfilment of the stated purposes, except in the event that the transfer/access/display etc. is requested by the competent authorities, in the cases provided for by the regulations in force at the time of the event.

It is possible that your data will be disclosed to other companies that provide services to us and act as our authorized persons, such as suppliers that provide website maintenance, IT, legal, delivery etc. services.

Your data may also be processed by our partners who provide payment processing or other services (making a reservation and/or completing a satisfaction questionnaire) for CASA TIMIS. This data are processed for the purpose of making the payment for your online order.

These entities are selected with great care to ensure that they comply with specific personal data protection requirements. They have a limited ability to use your information for purposes other than providing services to us.

In addition to the disclosures described in this Privacy Policy, we may disclose information to third parties to whom you consent or request that we make such a disclosure.

8. LINKS, HYPERLINKS AND THIRD PARTY WEBSITES

The www.casatimis.ro website may contain links to third party sites that may collect your personal data, including through cookies or other technologies.

If you link to a third party website, the Privacy Policy of CASA TIMIS will not apply to your browsing on that website.

9. WHICH ARE YOUR RIGHTS AS A DATA SUBJECT?

Any natural person browsing our website, as data subject, has the following rights in relation to CASA TIMIS, as Controller:

• Right to access means the right of the data subject to obtain confirmation from the Controller as to whether or not the Controller is processing personal data relating to him or her and, if so, to have access to that data and to information on how the data are processed;
• Right to rectification refers to the correction, without undue delay, of inaccurate personal data processed or their completion, if incomplete. They can be modified by sending an e-mail to: dpo.casatimis@cristim.ro.

• Right to erasure („the right to be forgotten”) of data from the databases means the right of the data subject to request the erasure of personal data without undue delay if one of the following grounds applies: they are no longer necessary for the purposes for which they were collected or processed, he/she withdraws his/her consent and there is no other legal basis for the processing, he/she objects to the processing and there are no overriding legitimate grounds, the personal data have been unlawfully processed, the personal data need to be erased in order to comply with a legal obligation, the personal data have been collected in connection with the provision of information society services;

• Right to restriction of processing may be exercised if the data subject requests the restriction of the processing of his/her personal data, in which case they will be used strictly for the exercise of the data subject’s other legal rights, including responding to any requests/complaints from the data subject;

• Right to data portability refers to the right to receive personal data in a structured, commonly used and machine-readable format and the right to have such data transmitted directly to another Controller where the processing is based on consent or performance of a contract and is carried out by automated means, if technically feasible;

• Right to object concerns the right of the data subject to object to the processing of personal data when the processing is necessary for the performance of a task carried out in the public interest or in the legitimate interest of CASA TIMIS;

• The right to object to data processing on the basis of automated individual decisions refers to the fact that the data subject has the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning the data subject or similarly affects him or her to a significant extent. However, it will not be possible to exercise this right if the decision is necessary for the conclusion or performance of a contract between the data subject and CASA TIMIS, is authorised by the law applicable to the Controller, provided that adequate protection of the rights, freedoms and interests of the data subject is ensured or is based on the consent of the data subject obtained in compliance with applicable law;

• The right to address the National Supervisory Authority for Personal Data Processing. If the data subject considers that the above-mentioned rights have been infringed, he or she has the possibility to address the ANSPDCP by filing a complaint.

Contact data of A.N.S.P.D.C.P.:

Address: Bucharest, District 1, G-ral. Gheorghe Magheru Boulevard no. 28-30;

Telephone: 0.318.059.211/0.318.059.212;

Fax: 0.318.059.602;

E-mail: anspdcp@dataprotection.ro;

Website: www.dataprotection.ro.

Webpage: www.dataprotection.ro. 

In order to exercise the above mentioned rights, the data subject shall address a request to CASA TIMIS at the following postal address: Prahova county, Com. Bucov, Chitorani viallge, Florica Romalo street no. 4, or at the e-mail address mentioned above, in the first section of this Policy.

9. FINAL PROVISIONS

If the Controller CASA TIMIS will consider a change in the privacy rules to be necessary, the Controller will publish those changes to inform data subjects about the data it collects and how it uses it.

The provisions of the Privacy Policy are complemented by the provisions of the Cookie Policy and the Newsletter Subscription Policy, respectively, which can be found on the website www.casatimis.ro.   

Last update: July 2023

DOMENIUL CASA TIMIS S.R.L.