All about collected data and its privacy.
Respecting the right to the protection of personal data, as well as the right to private life, is one of the fundamental missions of ELDOMIR TOUR SRL, based in Lacu Sărat Resort, Aleea Centrala, No. 5A, Jud. Braila, the owner of Alma Health & Spa Retreat.
Thus, we undertake all the necessary steps to process your personal data in accordance with the principles established by the data protection legislation applicable in Romania, including Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of natural persons in regarding the processing of personal data and regarding the free movement of such data and the repeal of Directive 95/46/EC (“GDPR”).
Personal data means any information relating to an identified or identifiable natural person (“data subject”); an identifiable natural person is a person who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more many specific elements, specific to its physical, physiological, genetic, psychological, economic, cultural or social identity.
Personal data is processed by ELDOMIR TOUR SRL- Alma Health & SPA Retreat, headquarters in Lacu Sarat Resort, Aleea Centrala, No. 5A, Jud. Braila, registered at the Trade Register under No. J09/600/1994, having CUI RO5611870. ELDOMIR TOUR SRL- Alma Health & Spa Retreat is a personal data operator in the sense provided by the GDPR, respectively it establishes the means and purposes of personal data processing.
If you are a customer or potential customer
We collect personal data from most interactions with you, as well as in other aspects of our business. The categories of data we process are the following:
Data necessary for making reservations (for example, name, surname, e-mail, telephone);
The data related to the arrival-departure form, requested under national legislation (for example, citizenship, address, date of birth);
Bank card details (card type, credit/debit card number, holder name, expiry date and security code);
Information about the customer’s stay, including date of arrival and departure, special requirements, preferences;
Information you provide about your marketing preferences;
The personal data provided by you in order to register and subscribe to the newsletter;
Information about the motor vehicles you may bring onto our property, for example registration number;
Data collected from access cards (time of entry and exit);
Information collected by various contractual partners (travel agencies, event organizers) and transmitted to ELDOMIR TOUR SRL- Alma Health & Spa Retreat (rooming list, event guest list);
Data necessary to provide additional services, as appropriate;
Reviews and opinions about our services;
Any other types of information you choose to provide to us.
Also, surveillance cameras and other security measures on our properties may capture or record images of guests in public places (such as hotel entrances, restaurants or lobbies), as well as your location data (through images captured by surveillance cameras).
You can always choose which personal data you want to provide to us. However, if you choose not to provide certain personal data, where the basis of our request is to comply with a legal obligation, contractual obligations or obligations necessary for the conclusion of a contract we will be unable to provide you with certain services, for example: ( i) if you do not want to give us your name, surname, email address or phone number when you want to make a reservation, we will not be able to make the reservation.
If you are a potential employee
We collect the information from the CV sent by you as well as any other information submitted together with the CV and/or during the interviews you attended.
If you are a visitor within our location
We collect the name, first name, series and number of the identity document.
Surveillance cameras can also capture or record images of visitors in public places (such as hotel or restaurant entrances or lobbies).
If you are a user of our website www.almaretreat.ro
It is not necessary to provide personal data to read the information on the website.
However, for the purpose of technical exploitation of the portal, we collect the time and date of accessing the Internet site and the IP address from which our Internet site was accessed.
For the use of some services (e.g. online reservations, vacancy applications) certain personal data are required. For details, please refer to the section corresponding to the operation used on the site.
If you are a representative or contact person of our suppliers or business partners. We collect the name, first name, position, as well as any other data provided by you or the company you represent.
If you are employed
Please read the employee privacy policy, made available at the time of employment and available at any time from the Human Resources Department.
PERSONAL DATA OF MINORS
We protect the privacy of data obtained from children under 16 years of age. If you are under the age of 16, you must obtain the consent or authorization of your parents or guardian for any provision of personal data.
SPECIAL DATA
The term “special data” refers to racial or ethnic origin, political opinions, religious confession or philosophical beliefs or trade union membership and the processing of genetic data, biometric data, health data or data on sex life or sexual orientation
We generally do not collect special information unless you choose to provide it to us.
If you are a customer:
Purpose:
we process your personal data (i) to accommodate you at the Alma Health & Spa Retreat (ii) to respond to requests for offers submitted by you.
Basis:
conclusion of a contract
Grounds: at the time of accommodation, according to the legal provisions in force, you are obliged to fill in the arrival and departure notification form, which contains a minimum of data necessary to be able to stay.
PROFILING
Purpose:
in order to provide personalized services, certain special preferences of yours (for example: whether you prefer rooms on the upper or lower floors, whether you like a certain type of wine, etc.) are stored so that when you return, we will you already know what you like.
Grounds: consent
Feedback:
Purpose: We process your personal data to ensure that you had a pleasant experience in our establishments.
Grounds: our legitimate interest to constantly improve the services we offer and to provide services that are as suitable and compliant as possible with our customers’ standards.
Marketing:
Purpose: We process your personal data for marketing purposes, such as commercial newsletters and marketing communications regarding new products and services or other offers that we believe may be of interest to you.
Basis:
we rely on the legitimate interest to promote our services by sending offers that we consider to be of interest to you (see “Right to object” in the “Your rights” Section). If necessary, in accordance with applicable law, we will obtain your consent before processing your personal data for direct marketing purposes. In this case, we inform you that you will be able to withdraw your consent for marketing processing at any time, in which case you will no longer receive any marketing communications from us.
We will include an unsubscribe link, which you can use if you no longer wish to receive messages from us.
Also, on the occasion of organizing certain events in our hotels and restaurants, we may take some photos, and some of these may be shared online to show others what our events are like. In any case, because we respect your right to privacy, we will do our best to inform you that photographs will be taken (for objections to our photographs see “Right to object” in Section “Your rights”).
Other communications: by email, post, phone or SMS
Purpose:
these communications will be made for a specific reason such as: (i) to respond to your requests, (ii) if you have not completed an online booking or quote request, we may send you an email to remind you to complete your booking, (iii) to inform you of how complaints and/or incidents arising during your stay have been resolved.
Legal ground:
our legitimate interest in providing services to desired standards by resolving any requests/complaints and to assure you of our full availability.
Analysis, improvement and research:
Purpose:
in order to constantly ensure the qualitative evolution of our services, we take care to analyse every complaint/suggestion from you, so we draw up statistical reports to identify problems and find the best solutions to fix them.
Basis:
we rely on our legitimate interest to provide services that meet your standards.
If you are a visitor within our location
Purpose:
We process your personal data to ensure the protection of property and people within the hotel.
Basis:
our legitimate interest in ensuring both the protection of the property of restaurant customers/staff and the protection of people within the restaurant.
If you are a user of our website www.almaretreat.ro
Purpose:
traffic monitoring to identify errors and/or any other dysfunction of the site.
Basis:
we base this data processing activity on our legitimate interest, which is to provide you with a fully functional website by fixing any error, as well as by continuously improving it.
If you are a representative or contact person of our suppliers or business partners
Purpose:
performance of contractual relations with our suppliers or business partners.
Basis:
execution of a contract.
If you are a potential employee
Purpose:
assessment of your employment application.
Basis:
conclusion of a contract.
If you are employed
Please see the employee privacy policy, made available at the time of employment and available at any time from the human resources department.
For all the categories of people above, we may also process your data in the context of the following activities:
Security.
Purpose:
we process personal data for the security of goods and the physical integrity of people.
Basis:
we rely on our legitimate interest to ensure the protection of your property and the restaurant, as well as the protection of people within our perimeter.
Legal reasons:
Purpose:
in certain cases, we need to process the information provided, which may include personal data, to resolve legal disputes or complaints, for investigations and compliance with applicable legal regulations, to enforce an agreement or to comply with requests from authorities public insofar as these requests meet the conditions imposed by law.
Basis:
the reasons for the processing can be represented by the legal obligation (if we have a legal obligation to disclose certain personal data to public authorities) or by our legitimate interest to resolve possible disputes and/or complaints.
To provide you with the expected level of hospitality and provide you with high-quality services, your data may be transferred to our service providers and other third parties, as detailed below:
Suppliers:
to provide the requested services, in some cases, we will have to transmit some of your personal data to suppliers, and they have the capacity of proxies and process the data on our behalf, on behalf of and in accordance with our instructions (such as software suppliers, IT, accounting services, medical services).
Group events or meetings:
if you visit our hotels/restaurants as part of a group or conference, the information required for meeting and event planning may be shared with the organizers of those meetings and events and, if applicable, with guests who organize or attend the meeting or event.
Business partners:
In some cases, we partner with other companies to provide you with products, services or offers. For example, we can arrange for you to rent a car or broker optional services for products that exceed our offer.
Public authorities and/or institutions for:
(i) compliance with legal provisions, (ii) to respond to their requests, (iii) for reasons of public interest (eg: national security). For example, according to the regulation set out in the Section “FOR WHAT PURPOSE AND ON WHAT BASIS WE PROCESS YOUR PERSONAL DATA” lit. b) any accommodation unit is obliged to send each customer’s arrival and departure notification sheets daily.
The privacy of your data is important to us, which is why, where possible, the transmission of personal data in accordance with the above is only carried out based on a confidentiality undertaking from the recipients, guaranteeing that this data is kept safe and that the provision of this information is done in accordance with applicable law and policies. In any case, each time we will transmit to the recipients only the information strictly necessary to achieve the respective purpose.
To provide you with the expected level of hospitality and provide you with the best level of service, we may collect information about you from our business partners and other third parties, as detailed below:
Business partners:
such as card partners, social network related services that are consistent with the settings you made for these services, travel agencies, event organizers.
In any case, we assure you that your data collected from third parties will be processed under the same conditions as if they were collected directly from you. Also, we will only collect what is necessary to fulfil our purposes. (see Section “FOR WHAT PURPOSE AND ON WHAT BASIS ARE YOUR PERSONAL DATA PROCESSED?”).
In addition, when we first contact you, we will first inform you of the source from which we obtained your personal data.
We may transfer your data to some providers who will be based in countries other than where you are located and in some cases in countries outside the EU/EEA.
Although the data protection laws of these countries may differ from those in your country, we will take the necessary steps to ensure that your personal data is processed in accordance with this policy and in accordance with applicable law.
If you provide us with the personal data of other natural persons, please inform them before this disclosure and how it will be processed, as described in this privacy policy.
Your personal data is kept for as long as the purposes detailed in this policy are carried out unless a longer retention period is required or permitted by applicable law.
We constantly review the need to retain your personal data, and to the extent that processing is no longer necessary and there is no legal obligation to retain your personal data, we will delete/destroy your personal information as soon as possible and within a in such a way that they can no longer be recovered or reconstructed (for example, we will delete/destroy all data of people who were not hired following interviews, if there is no serious prospect of employment in the future).
If personal information is printed on paper, it will be destroyed in a way that ensures its complete elimination, and if it is saved on electronic media, it will be deleted by technical means to ensure that the information can no longer be be recovered or reconstituted later.
As a data subject, you benefit from the following rights provided by the GDPR:
Right of access:
you can request from us (i) a confirmation of whether or not personal data is being processed and, if so, access to and information about that data, and (ii) a copy of your personal data that we own them (art. 15 of the GDPR);
The right to rectification:
you can inform us about any changes to your personal data or ask us to correct the personal data we hold about you (art. 16 GDPR);
The right to erasure (“the right to be forgotten”):
in certain situations (such as (i) if the data were collected illegally, (ii) the deadline for data storage has expired, (iii) you have exercised your right to object or (iv) data processing is based on of consent and you have withdrawn your consent), you can ask us to delete the personal data we hold about you (art. 17 of the GDPR);
The right to restrict processing:
in certain situations (such as when the accuracy of this data or the legality of the processing is disputed), you can ask us to restrict the processing of your data for a certain period (art. 18 of the GDPR);
The right to data portability:
ask us to send your personal data to a third party or directly to you (Art. 20 GDPR);
The right to opposition:
in certain situations (such as processing that has as its legal basis the legitimate interest), you can ask us to stop processing your data (art. 21 of the GDPR).
If we use your personal data based on your consent, you have the right to withdraw this consent.
If we use your personal data based on your consent, you have the right to withdraw this consent at any time. In this situation, your data will no longer be processed by us, unless a legal provision obliges us to keep and archive them. In any case, we will inform you if there is such a legal provision and we will indicate it expressly.
We take your personal security seriously, so we take important security measures necessary to protect against unauthorized access to data or unauthorized modification, disclosure, or destruction of data. This involves internal reviews of data collection, retention and processing practices and security measures, as well as physical security measures to protect against unauthorized access to the systems where we store personal data.
We also require our service providers and business partners to take all necessary measures to protect against unauthorized access to data or unauthorized modification, disclosure or destruction of data.
Our website contains links to third party websites. Please note that we are not responsible for the collection, use, retention, sharing or disclosure of data or information by such third parties. If you use or provide information on third-party sites, the terms and privacy policy of those sites apply. We advise you to read the privacy policy of the websites you visit before submitting personal data.
The use of internet services offered by ELDOMIR TOUR SRL- Alma Health & Spa Retreat falls under the terms of use and the privacy policy of the internet providers. You can access those terms and policies by using the links on that service’s login page or by visiting your Internet provider’s website.
If you have any questions or concerns related to the processing of your personal data or if you wish to exercise any of the rights mentioned above, you are welcome to contact us by sending an e-mail to the following address: info@almaretreat.ro and we will respond to you within 30 days of receiving your request.
Also, to the extent that you do not have electronic means or do not want to use them, you can make a written request that you submit to (i) the address of the registered office in Lacu Sărat Resort, 5 Aleea Centrala, No. 5A, Jud. Braila.
To the extent that you are not satisfied with the way in which your request was resolved, you can submit a complaint to the National Supervisory Authority for the Processing of Personal Data.
This privacy policy may change in accordance with changes in data policy legislation or based on changes to our services or organization from time to time. If we make material changes to it, we will post a link to the revised policy on the home page of our website. If we make significant changes that will have an impact on your rights and freedoms (for example, when we start processing your personal data for purposes other than those specified above), we will contact you before we start this processing.
To help you keep track of the most important changes, we will include a change history below to acknowledge changes to this policy.
