Introduction
At Cabana Tăul Brazi, we respect and protect our guests' privacy with the same care we preserve the traditions of the Apuseni Mountains. This policy explains how we collect, use, and protect your personal information.
Data Collection
Booking Information
We collect information necessary for booking and organizing your stay:
- Name and contact information
- Stay dates and number of guests
- Special requirements and dietary preferences
- Payment information (processed securely)
Digital Communications
Our website collects technical information to enhance your experience:
- IP address and approximate location
- Browser type and language preferences
- Pages visited and time spent
Data Usage
We use your information exclusively for:
- Processing and confirming bookings
- Communication about your stay
- Improving our services
- Complying with legal obligations
🏔️ We never share, sell, or rent your personal information to third parties for marketing purposes.
Data Sharing
We share limited information only with:
- Authorized payment processors (Stripe, PayPal)
- Transactional email services (booking confirmations)
- Legal authorities, when required by law
Data Retention
We retain your personal data only as long as necessary:
- Booking data: 7 years after stay (for accounting and legal obligations)
- Marketing communications: Until you unsubscribe or 3 years of inactivity
- Website analytics: 14 months (Google Analytics standard retention)
- Cookie consent preferences: 12 months, then re-consent required
⏱️ You can request deletion of your data at any time, subject to legal obligations.
Data Controller & Contact
The data controller for your personal information is:
Third-Party Services
We use the following trusted third-party services that may process your data:
- Google Analytics: Website usage analytics
- Hotjar: User experience optimization
- Microsoft Clarity: Behavior analytics
- Sentry: Error tracking and monitoring
- Cloudinary: Image hosting and optimization
- Stripe: Payment processing (when applicable)
- PayPal: Payment processing (when applicable)
All third-party processors are GDPR-compliant and bound by data processing agreements.
Your Rights
Under GDPR, you have the following rights:
- Access: Request a copy of your personal data
- Rectification: Correct inaccurate information
- Erasure: Request deletion of your data
- Portability: Receive your data in a usable format
- Objection: Object to processing for marketing
Privacy Contact
For questions about this policy or exercising your rights:
📧 We respond to all privacy requests within 30 days maximum.