Privacy Policy - Casa Timis
Book now

Privacy Policy

  1. WHO ARE WE?

DOMENIUL CASA TIMIS SRL (hereinafter referred to as ”CASA TIMIS” or ”the Controller”), attaches great importance to your personal data, constantly performing the necessary diligence to ensure that the data processing carried out complies with the legal requirements in this field. For this purpose, we have developed this commitment by which we undertake to respect the confidentiality of your personal data and through which we explain to you which categories of personal data CASA TIMIS processes, the way in which said data are used, as well as the purpose to which they are subjected some processing operations.

This Policy refers only to the personal data that we process through our website www.casatimis.ro  (hereinafter referred to as the “Site” or the “Platform”) when you interact with it by filling in the forms available on the platform, by placing an order for vouchers, according to the Policy on the Site, by subscribing to the newsletter, by making a reservation or if you are just browsing it. We want to assure you that we have taken all the necessary measures to ensure the confidentiality of your data, these being processed only by the Controller’s staff who have been previously trained on the processing of personal data and authorized in this regard and who respect firm confidentiality commitments.

To get to know us virtually, we provide you with our identification data:

The data controller who processes your personal data when navigating on the website www.casatimis.ro is DOMENIUL CASA TIMIS S.R.L. (hereinafter referred to as ,,Casa Timis’’/ ,,the Resort’’), based in Chiţorani, Bucov Village, Florica Romalo 4 Street, Prahova County, registered at National Trade Register Office with the number J29/894/2022, having the Unique Registration Code 45910456.

For any questions or concerns regarding the protection of personal data, you are invited to send a request to the mailing address indicated above or to the electronic correspondence address dpo.casatimis@cristim.ro. People who send such requests to CASA TIMIS are asked to mention in the subject of the e-mail/on the envelope information such as “data protection”, “GDPR”, “personal data”. 

By doing this, there is a guarantee that the requests will be treated with priority and that you will receive an answer within no more than 30 days from the communication of the document to CASA TIMIS, an extension of this term being possible only in exceptional situations. In these cases, we assure you that you will be properly informed about this term.

  1. DEFINITIONS
  • „Personal data” means, in the sense of the national and international legislation in force, any information relating to an identified or identifiable natural person (data subject). An identifiable person is that person who can be identified, directly or indirectly, in particular by reference to an identification number or to one or more factors specific to his physical, physiological, psychological, economic, cultural or social identity.

! For the purposes of this policy, the personal data that will be processed may refer to: name, surname, telephone number, e-mail address, delivery address etc., as will be described in the following.

  • ”Personal data processing” means any operation or set of operations performed on personal data, by automatic or non-automatic means, such as: collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;

! For the purposes of this policy, data processing refers to those processing carried out when you browse the www.casatimis.ro website or interact with it by filling in the forms available on the Platform or placing an order through the website or by subscribing to the Controller’s newsletter.

  •  „Personal data Controller” means the person who, alone or together with others, establishes the purposes and means of personal data processing.

! For clarity, in the sense of this Privacy Policy, the Controller of personal data is DOMENIUL CASA TIMIS S.R.L.. 

  • ”Data subject” represents the person whose personal data are the subject of processing.

! For the purposes of this policy, the data subject of data processing is the Internet user browsing the website www.casatimis.ro.

  • ”Consent” of the data subject means any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her;

Note! The processing of data carried out through the Platform and based on the legal basis of consent has as its sole purpose the subscription to the newsletter, respectively the acceptance of cookies, other than the necessary (essential), as highlighted in the cookie pop-up. 

  • ”Third party” means a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorised to process personal data;
  • „Processor” means the person who processes personal data on behalf of the controller.
  1. WHAT TYPES OF PERSONAL DATA DO WE PROCESS?

Your navigation on the Site involves the processing of two categories of personal data, namely:

  1. personal data that you voluntarily disclose to the Controller (e.g. through the order or contact form, respectively in the case of subscribing to the newsletter), these being collected individually;
  2. personal data you provide involuntarily, by simply browsing our website.

If you opt for invoicing by legal entity, we draw your attention to the fact that the data requested and entered in the forms on the website in the name of a legal entity does not represent personal data (e-mail address of the company such as name@office, the company’s telephone number such as landline number etc.) in light of the provisions of Regulation no. 679/2016 on the protection of personal data (GDPR).

However, if the personal data of the representative of the company, as a natural person, is provided (name and surname, telephone number, e-mail address), he/she will be considered as a data subject according to the provisions of the GDPR and all protection measures will be applicable to him/her.

The user is properly informed about the processing of personal data when he makes his data available to the Controller through the forms on the website, thus CASA TIMIS is fulfilling its legal obligation to inform the user.

CASA TIMIS collects, based on the voluntary provision of the data subject, the following personal data:

  1. When placing an order:
  • name and surname;
  • phone number; 
  • email address;
  • any other data that you make available to us by filling in the box related to the form, through which you can send us details or preferences regarding the order you placed.

Note!: In case of paying the order online, by card, your data will not be processed by the Controller, the activity of making the payment falling under the requirements stipulated in the Privacy Policy of the partner payment processors. However, some data (card number, for example) may be saved for subsequent purchases through specific cookies and only if you agree to the retention of this data at the browser level. This processing process takes place only to facilitate the user’s experience of placing an order and does not involve the Controller, meaning that he does not have access (even by simply viewing) the data necessary to pay for the order through the online payment service.

  1. To obtain additional information/submit notifications via e-mail by phone (customer assistance), respectively in the context of inbound and/or outbound phone calls:
  • voice;
  • phone number;
  • other categories of personal data that you make available to us in the context of telephone conversations and that may refer to: 
  • name and surnam;
  • email address;
  • delievering addres;
  • bank account (for returning amounts, if necessary), etc.
  • traffic data related to each telephone call, respectively: the start date of the telephone call, the end date of the telephone call, the duration of the telephone conversation, the telephone network in which the conversation took place, the number to which the call was made and the number from which the call was made, etc. 
  1. For newsletter subscription

Subscription to the newsletter is conditioned by giving your consent for the purpose of receiving commercial and marketing messages from CASA TIMIS. In this context, the following will be processed as personal data:

  • email address;
  • name and surname.
  1. For making reservations at the restaurants belonging to CASA TIMIS

Making a reservation involves providing some personal data that will be used, with your consent, in order to contact you to honor the reservation.

  • name and surname; 
  • phone number; 
  • email address. 
  1. To complete the contact form
  • name and surname; 
  • phone number;
  • email address.

The Controller also processes marketing and communication data only based on the prior consent of the users, but also technical data and browsing actions through cookie files and similar technologies. You can access our Cookie policy here.

The data specified above contribute to the provision of the services offered by CASA TIMIS and to the activity of ordering the vouchers sold through the www.casatimis.ro platform, but also to the communication with the Controller or the transmission of marketing communications from him, but with prior obtaining of the user’s consent, as detailed in the Newsletter Subscription Policy.

If you provide us with personal data that is not necessary for the purposes described above, i.e. for honoring the orders placed, for resolving complaints or for providing additional information, we reserve the right to immediately remove the data from our database.

The controller may involuntarily collect other personal data belonging to you, namely: IP address, browser version, time zone and location settings, operating system, platforms on the devices used to access our sites etc. This information will not be used to identify individuals or legal entities as the case may be, and will not be made public other than under the conditions inserted in this Privacy Policy, supplemented by the Cookies Policy available on www.casatimis.ro. 

Controller reserves the right to request additional information from you, accompanied by supporting documents, by e-mail, in print or in any other way deemed appropriate by the Controller, if applicable, for the purposes detailed below.

Payment processing service providers will process the following categories of personal data:

    • bank account details (card number, CVC etc.);
    • card owner’s name and surname;
  • order ID; 
  • when the transaction started;
  • when the transaction finished;
  • transaction ID; 
  • payment status (complete or not);
  • the amount traded (if necessary).

These payment processing service providers process your data as independent personal data controllers, which is why the data processing carried out by them is subject to their Privacy Policy. In the step of actually entering the details of the card you use for online payment, the identity of the online payment controller will also be brought to your attention.

Note!: In case of returns/cancellations of orders that cannot be processed in the payment controller’s platform, CASA TIMIS can process, as personal data, the IBAN and the bank where you opened the account in order to return the money paid for returned products/ canceled orders.

Note!: CASA TIMIS has entered into data processing agreements with its service providers (for example: IT/online system administration, legal services, payment processing services etc.), but is not responsible for the processing carried out by these providers in its own name, in the eventuality that they would process data as independent controllers, the data subject being properly informed about the processing that involves a data transfer between CASA TIMIS and any company that provides services to the Controller.

Thus, we draw your attention to the fact that when you want to make a reservation for the accommodation spaces offered by CASA TIMIS, the Data Controller will be T&C NET SRL, as an independent controller of personal data, and the processing will take place in accordance with the mentioned controller’s own Terms and Conditions, respectively Privacy policy. Similarly, the processing of data in order to complete and process the Satisfaction Questionnaire will be carried out in accordance with the Terms and Conditions, respectively with the GUESTREVU controller’s own Privacy Policy.

Your personal data can be communicated by CASA TIMIS in order to process or to authorize other persons to process them, including contractual partners, authorities and financial institutions, courts or competent bodies, at their request and for the purpose of providing the services offered by the Controller.

CASA TIMIS can store your personal data even after registering a request to delete this data, if the storage is for one of the following purposes, provided by art. 13 of the GDPR, respectively:

  1. performance of the contract;
  2. fulfilling a legal obligation that provides for processing based on European Union law or the internal law that applies to the controller;
  3. exercising the right to free expression and information;
  4. in order to protect the vital interests of the data subject or of another natural person;;
  5. performing a task that serves the public interest;
  6. archiving in the public interest, scientific or historical research or for statistical purposes;
  7. processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child. 
  8. For exercising or defending a right in court. 
  1. FOR WHAT PURPOSE AND ON WHAT LEGAL BASIS DO WE PROCESS PERSONAL DATA? 

CASA TIMIS processes your personal data for the following purposes and having the following legal grounds:

  • the processing is necessary for perfoming a contract to which the data subject is a party or to take steps at the request of the data subject before concluding a contract (art. 6 paragraph (1) letter b) of Regulation (EU) no. 679/2016 of the European Parliament and of the Council of April 27, 2016), specifically, in order to ensure the access of the data subject to the products and services sold on the www.casatimis.ro Platform and to conclude the distance contract;
  • the processing is carried out based on the consent of the data subject (art. 6, paragraph (1), letter a) of Regulation (EU) no. 679/2016 of the European Parliament and of the Council of April 27, 2016), in the case of the transmission of commercial and marketing communications or the acceptance of cookies, other than those necessary;
  • the processing is necessary for the purpose of the legitimate interests pursued by the Controller (art. 6 paragraph (1) letter f) of Regulation (EU) no. 679/ 2016 of the European Parliament and of the Council of April 27, 2016), in order to be able to provide correct information and to solve problems of any kind regarding the content of the website www.casatimis.ro or the services and products offered by the Controller, as well as for actions involving interaction with the online platform.

Your personal data will be processed so that the CASA TIMIS Controller is able to:

  • improve the website and the services provided through it;
  • determine the usefulness/popularity of the web content presented on the site;
  • send technical, assistance or administrative notifications;
  • honor requests and resolve notifications received from users;
  • facilitate the user’s access to the services offered by CASA TIMIS;
  • communicates information of interest to website users;
  • protect its rights.
  1. PERSONAL DATA PROCESSING STORAGE PERIOD

The personal data processed by CASA TIMIS through the website www.casatimis.ro is retained for a reasonable period of time relative to the purpose of data processing, in accordance with the legal provisions on data archiving. The controller respects the legal terms for archiving data.

Regarding the data obtained in the context of inbound and outbound telephone conversations (recordings of telephone calls), they will be kept, as a rule, for a period of 30 days. However, data obtained in the context of telephone calls and which are necessary, for example, for invoicing and honoring the placed order, will be kept in accordance with the legal provisions regarding archiving.

The data processed as a result of your subscription to the newsletter will be processed by CASA TIMIS only until you withdraw your consent for processing, in accordance with the Newsletter Subscription Policy available on www.casatimis.ro.  

  1. SPECIAL PROVISIONS RELATED TO MINORS 

The controller pays particular attention to the data of minors that could be provided by them in order to place an order on the online platform www.casatimis.ro, to ensure that any processing of personal data of minors is carried out only in in accordance with legal requirements and in strictly determined cases.

Thus, the Controller does not carry out promotional marketing activities directly towards minors. However, if a minor places an order/contacts the Controller through the related platforms, it will be considered that the minor did this with the consent of his legal representative.

Minors who have not reached the age of 14 are not allowed to request services or participate in contests or campaigns organized by the Controller, unless these operations are carried out on behalf of the minor by their legal representative or guardian, according to the law.

In this sense, any person who provides personal data to the Controller through the website or other applications or devices covered by this Policy guarantees that they are of age, respectively that they have full legal capacity.

Any processing of personal data belonging to minors will be carried out only under the conditions of the law and taking into account the provisions above.

  1. PERSONAL DATA TRANSFER

Your data is processed on the territory of the European Union, through secure internal servers. However, through plugins specific to social networks (for example, Facebook, Linkedin, Instagram, etc.), having the quality of third-party recipients of the data (third-party recipients), it is possible that your data processed in this context will be also transferred outside the European Union/European Economic Area and stored on servers in third countries. In this sense, the Controller has implemented a series of necessary and appropriate measures in order to be able to ensure a compliant data processing.

CASA TIMIS undertakes to process the collected data only in accordance with the stated purposes and not to publish, sell, rent, license, transfer etc. unauthorized the database containing information about the data of the data subjects to any third party not involved in the fulfillment of the declared purposes, with the exception of the situation in which the transfer/access/viewing etc. is required by the competent bodies, in the cases provided by the regulations in force on the date of the event.

It is possible that your data will be disclosed to other companies that provide us with services and act as authorized persons, such as providers that provide website maintenance, IT, legal services, order delivery etc.

Also, your data may be processed by our partners who provide payment processing or other services (making a reservation and/or completing the satisfaction questionnaire) for CASA TIMIS. These data are processed in order to make the payment related to your online order.

These entities are selected with particular care to ensure that they meet the specific requirements in terms of personal data protection. They have a limited capacity to use your information for purposes other than providing services to us.

In addition to the disclosures described in this Privacy Policy, we may transmit information to third parties to whom you consent or request such disclosure.

  1. LINKS AND THIRD PARTIES WEBSITES 

The www.casatimis.ro platform may contain links to third-party sites that may, in turn, collect your personal data, including through cookies or other technologies.

In the case of connecting to a third-party website, the privacy policy of CASA TIMIS will not be applicable in the case of your browsing on that website.

  1. WHAT RIGHTS DO YOU HAVE AS A DATA SUBJECT? 

Any natural person who browses our website, as a data subject, has the following rights in relation to CASA TIMIS, as a Personal Data Controller:

  • The right to access means the right of the data subject to obtain a confirmation from the Controller that it processes or not the personal data concerning him/ her and, if so, to access the data and the information regarding the manner in which the data are processed;
  • The right to rectification refers to the correction, without undue delay, of inaccurate personal data processed or to their completion, if they are incomplete. They can be modified by sending an e-mail to the address: dpo.casatimis@cristim.ro; 
  • The right to erasure (“the right to be forgotten”) from the database means the data subject’s right to request that his personal data be deleted, without undue delay, if one of the following reasons: they are no longer necessary for the fulfillment of the purposes for which they were collected or processed, they withdraw their consent and there is no other legal basis for the processing, they oppose the processing and there are no legitimate reasons to prevail, the personal data have were processed illegally, personal data must be deleted to comply with a legal obligation, personal data were collected in connection with the provision of information society services;
  • The right to restriction of processing can be exercised if the data subject requests the limitation of the processing of his personal data, in which case they will be used strictly for the exercise of the other legal rights of the data subject, including to respond to any requests/complaints from its part;
  • The right to data portability refers to the right to receive personal data in a structured format, currently used and that can be read automatically and to the right for these data to be transmitted directly to another controller, when the processing is based on consent or the execution of a contract and is carried out by automated means, if this is technically feasible;
  • The right to opposition refers to the right of the data subject to oppose the processing of personal data when the processing is necessary for the performance of a task that serves a public interest or when it considers a legitimate interest of CASA TIMIS;
  • The right to object and automated individual decision-making refers to the fact that the data subject has the right not to be the subject of a decision based exclusively on automatic processing, including the creation of profiles, which produces legal effects concerning the data subject or similarly affects it to a significant extent. However, it will not be possible to exercise this right if the decision is necessary for the conclusion or execution of a contract between the data subject and CASA TIMIS, is authorized by the law applicable to the Controller, provided that adequate protection of the rights, freedoms and the interests of the data subjects or is based on the consent of the data subject obtained in compliance with the legislation in force;
  • The right to address the National Supervisory Authority for Personal Data Processing. If the data subject considers that the rights provided above have been violated, he has the possibility to address the ANSPDCP by filing a complaint.

Contact information:

Address: 28-30 G-ral Gheorghe Magheru Bld., District 1,Bucharest, Romania

Phone no.:  +40.318.059.211/+40.318.059.212; 

Fax: +40.318.059.602; 

E-mail: anspdcp@dataprotection.ro;

Webpage: www.dataprotection.ro. 

In order to exercise the rights provided above, the data subject will contact the CASA TIMIS by sending a request to the following address: Chiţorani, Bucov Village, Florica Romalo 4 Street, Prahova County or to the electronic correspondence address mentioned above, in the first section of this Policy.

  1. FINAL PROVISIONS

If the Controller considers that a change to the confidentiality rules is necessary, CASA TIMIS will publish the respective changes to inform data subjects about the information it collects and how it uses it.

The provisions of the Privacy Policy are supplemented with the provisions of the Cookie Policy, respectively of the Newsletter subscription policy, present on the website www.casatimis.ro. 


Last update: 02.08.2022

DOMENIUL CASA TIMIS SRL


Loading...