Casa de Poveste · Sucevița
Privacy policy
Updated on 2 November 2026
This English version is provided for convenience. The Romanian version is the one that applies.
We care about your data as much as we care about the house. Here we explain, briefly and in plain words, what data we ask for, why we ask for it and what you can do with it.
Who processes your data
The data controller is Irimescu Angelica-Mărioara P.F.A., tax ID (CUI) 45948876, Trade Register no. F2022000263333, with its registered office at Strada Dealu Crucii nr. 26, sat Sucevița, comuna Sucevița, județul Suceava. You can reach us at angelica_irimescu@yahoo.com or on 0756 936 099.
What data we ask for and why
| When | What data | Why, and on what legal basis |
|---|---|---|
| You send a request from the booking page | name, phone number, dates of your stay, number of guests, what you would like to book, your message, and your IP address, kept only as a fingerprint (hash) | to reply to you and hold the dates until we do (steps taken at your request before a contract); the fingerprint limits how many requests one device can send, so nobody can block the calendar abusively (legitimate interest) |
| You call or write to us about a booking | name, phone number, email address, dates of your stay, number of guests, your message | to reply to you and complete the booking (contract) |
| You pay the deposit | payer’s name, amount, date | keeping payment records and meeting tax obligations (legal obligation) |
| You arrive at the house | the details on your identity document | filling in the arrival registration form required by law for accommodation providers (legal obligation) |
| You visit the website | technical data (IP address, browser and device type) | keeping the website running and secure, through our hosting provider (legitimate interest) |
We do not sell or rent your data to anyone, and we do not use it for advertising.
Who helps us on the technical side
- Cloudflare hosts the website, protects it from attacks, stores the requests sent from the website and emails us about each one.
- CallMeBot tells us on WhatsApp that a request has arrived. Only the request code, the dates and the number of guests pass through it, never your name or phone number.
- WhatsApp (Meta), if you choose to message us there.
- Yahoo, our email provider.
- Google, whose calendar we use to note accepted bookings.
Cloudflare is a US company, and WhatsApp, Yahoo and Google belong to US groups (in the European Union, their services are provided by companies based in Ireland). When data reaches the US, transfers are based on the EU-US Data Privacy Framework or on the standard contractual clauses approved by the European Commission.
The website fetches the news from our Facebook page, photos included, so your browser does not connect to Facebook when you see them.
How long we keep your data
- Requests sent from the website: refused, expired or cancelled ones are deleted automatically after 30 days, accepted ones one year after departure.
- Messages about bookings that do not go ahead: 6 months at most.
- Bookings and payments: for as long as tax and accounting law requires.
- Arrival registration forms: for as long as the law requires for accommodation providers.
Your rights
You can ask at any time for access to your data, its correction or deletion, restriction of processing and data portability, and you can object to processing based on legitimate interest. Write to us at angelica_irimescu@yahoo.com and we will reply within one month.
If you are not satisfied with our reply, you can lodge a complaint with the Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP), the Romanian data protection authority (dataprotection.ro).
Cookies
The website does not use advertising or tracking cookies. You will find the details in our cookie policy.