Privacy Policy

Notice Regarding the Processing of Personal Data

Welcome to Craft Inn, Sibiu. This Privacy Policy explains how we collect, use, disclose, and protect information about you. By using our website or services, you agree to the terms of this Privacy Policy.

Purposes for Which Your Personal Data Is Processed and the Legal Bases for Processing

SC Craft Inn SRL, acting as a personal data controller, is obliged to manage, under safe conditions and only for the specified purposes, the personal data provided by customers, potential customers, visitors, subscribers, and employees.

The customer agrees to provide personal data and understands that hotel, tourism, and restaurant services cannot be provided without supplying the personal data requested by our company.

Personal data is collected at every point of contact or interaction with customers. The personal data that will be processed includes: first and last name, email address, postal address, phone number, identification data from a copy of your identity card including your personal identification number, credit card details (card type, credit card number, cardholder name, expiry date and security code), personal characteristics, nationality, passport number, username, profile photos, information about the customer’s stay including arrival and departure dates, special requests, notes about your service preferences (including preference for room type, facilities, or any other services used), and any other personal data we collect directly from you or from other sources when you become a customer or potential customer for the purpose of providing tourism services, or when you use our products or services, information about vehicles you may bring onto our property, reviews and opinions about our services, and other types of information you choose to provide or that we may obtain in connection with you.

In situations where we may unintentionally collect personal data about minors (names, video recordings, etc.), we assure you that we will take all necessary measures to ensure that such data is not stored or processed beyond what is necessary.

Personal data obtained from customers may be used by SC Craft Inn SRL only for purposes associated with the marketing of our own services and products, and for fulfilling every aspect of our business, including:

• providing hotel, restaurant, conference, and event services;
• making reservations through online or offline booking systems used by the company;
• processing orders and contracts;
• completing guest registration forms and payment formalities;
• invoicing, preparing accounting records and tax declarations;
• resolving requests, questions, or complaints made by customers;
• offering products and/or services to customers;
• contacting customers by post, email, fax, text message, or phone in connection with product and service offers or opinions about services received, with comments that may be posted on the website;
• recording customer information for the purpose of allocating or offering rewards, discounts, and other benefits, as well as fulfilling other customer requests or requirements;
• recruiting staff for employment, with data provided via CV being processed for the purpose of concluding an individual employment contract;
• maintaining contractual relationships with business partners and suppliers of products or services;
• pursuing a legitimate interest of the company or of the third party to whom the data is disclosed;
• fulfilling a legal obligation imposed by applicable legislation;
• where we have your consent, we may use your personal information to provide or offer you newsletters, promotions and special offers, as well as other advertising messages in accordance with any communication preferences you have expressed. We use your information to deliver in-stay messages and booking confirmations, and to send you marketing communications. We may send these communications by email, post, online advertising, social media, phone, or text message.

In all situations required by law, we will request your consent where necessary.

Recipients of Personal Data

The personal data recorded is intended for use by the company and may be disclosed, without limitation, to the following categories of recipients:

• the data subject;
• legal representatives of the data subject;
• employees of the company;
• other natural or legal persons who process personal data on behalf of the company, with the exception of its authorized processor;
• judicial authorities;
• central public authorities.

We confirm that in every situation where we transfer your data to third parties, we will ensure that we transfer only the data necessary for the purpose for which your data is being transmitted, and that we do not transfer more data than is necessary under any circumstances.

Cookies

Our website uses cookies to provide you with a better browsing experience and to analyze how you use the site. You can control cookie settings at any time by changing your browser settings.

Information Security

We are committed to protecting your information and taking appropriate measures to prevent unauthorized access, use, or disclosure of it.

How Long Your Data Is Stored

We will store your personal data for:

• the entire period during which legal obligations remain in force;
• video recordings for a period of 30 days.

Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time, and any changes will take effect immediately upon their publication on this website.