Privacy policy
Draft version — subject to legal review before production launch.
1. Who we are
Laguna Nuferilor Habitat, a tourist guesthouse located at Sălciilor 6A, Somova, Tulcea, Romania. Contact: info@laguna-nuferilor.ro.
2. Data we collect
- Booking data: name, email, phone, country, check-in/check-out dates, special requests.
- Guest data (HG 237/2001, Ordinul MAI 1437/2003): last name, first name, date of birth, citizenship, identity document (type/series/number), home address.
- Identity document photo (uploaded on the online check-in page; stored privately in R2 / Cloudflare EU).
- Anonymized technical data: Cloudflare Web Analytics (cookieless), Google Analytics 4, Meta Pixel + CAPI, TikTok Pixel + Events API, Umami Analytics. The analytics and marketing tools load in your browser only after you accept the cookie banner.
3. Legal basis
- Booking data → Art. 6.1.b GDPR (performance of the contract).
- Guest data and identity document photo → Art. 6.1.c (legal obligation — HG 237/2001) + Art. 9.2.g (substantial public interest).
4. Third-party processors
- Cloudflare (D1, R2, Workers, Zaraz, Web Analytics) — EU jurisdiction.
- Revolut Business — advance payment processing.
- Resend — transactional email.
- Google (OAuth + Analytics 4) — optional guest account authentication and conversion measurement (SHA-256 hashed email for Enhanced Conversions).
- Oblio — Romanian invoicing (e-Factura SPV).
- Meta Platforms (Facebook/Instagram Pixel + Conversion API) — marketing campaign measurement (SHA-256 hashed email for dedup).
- TikTok (Pixel + Events API) — marketing campaign measurement (SHA-256 hashed email).
- Umami Cloud (EU) — additional anonymous analytics.
5. Retention
- Booking data → 5 years from check-out (Codul Fiscal).
- Guest data and identity document photo → 5 years (HG 237/2001 Art. 8).
- Account data → until deletion is requested or after 24 months of inactivity.
6. Your rights
Access, rectification, deletion, portability, withdrawal of consent. Requests can be sent by email to info@laguna-nuferilor.ro. We respond within 30 days. Complaints may be filed with ANSPDCP (dataprotection.ro).
7. Cookies
We use Cloudflare Web Analytics (cookieless) and, after your acceptance, Google Analytics 4, Meta Pixel, TikTok Pixel and Umami. See Cookie policy.