Privacy policy

1. Data controller

Data collected through this platform is processed by the operator of the Cazare Dracula Land platform, SITEURI SI GRAFICA S.R.L., VAT/tax ID (CUI) 39916020, Trade Register no. J2018013741405, registered office: Bd. 1 Decembrie 1918 nr. 22, bl. 8, sc. 1, et. 4, ap. 17, camera 1, Sector 3, Bucuresti, Romania. Contact: contact@cazaredraculaland.ro, 0774 949 887.

2. What data we collect

• booking request: name, email, phone, dates, number of guests and your message to the host;
• table reservation: name, email, phone, date, time, number of people and your message to the restaurant;
• reviews: the display name, rating and comment, published on the site only after a check; email and phone are never published;
• contact form: name, email, subject and message;
• newsletter: your email address, only with your explicit consent;
• partner account: name, email, password (stored encrypted) and the details of the listed property;
• technical data: IP address, used temporarily to protect against abuse (spam, repeated login attempts) and deleted automatically after at most 2 days, or kept with the booking request as proof of submission;
• partner commission agreement: date and time, the accepted percentage, the account and the IP address, kept as proof of the agreement while the listing is active and afterwards according to legal archiving periods.

3. How we use the data

• to send your booking request to the chosen host and to notify you of the confirmation;
• to send you, once after your stay or meal, an email with a link to leave a review;
• to reply to messages sent through the forms;
• to send you news, only if you have subscribed;
• for the security and proper functioning of the platform.

4. Legal basis

• steps taken at your request before entering into a contract (the booking request);
• your consent (newsletter);
• the platform's legitimate interest (security, prevention of abuse).

5. Who we share data with

Booking request data (accommodation or table) is sent to the chosen host. If the host syncs their calendar with other sites (for example Booking.com or Airbnb), those sites only receive the busy days, with no guest details. We use technical providers (web hosting, email) bound by confidentiality obligations. The interactive map loads its library from unpkg.com and its images from OpenStreetMap, which receive the visitor's IP address in order to deliver the files. We do not sell your data and do not use it for advertising.

6. Cookies and statistics

We use a single, strictly necessary cookie: the session cookie, which remembers forms and login and disappears when you close your browser. We do not use advertising or tracking cookies. We count visits without cookies: we keep the page address, the number of visits per day, the source of the visit (for example Google or Facebook) and how long the page stayed open and visible, sent by the browser when you close it or switch tab. To count unique visitors we use an encrypted, irreversible fingerprint that changes every day and is deleted after 35 days; the IP address is not stored. Listed owners only see totals for their own page (visitors, views, average time), never data about an individual visitor. Fonts are hosted on our own server, not by third parties. Details in the cookie policy.

7. How long we keep data

Booking requests and messages are kept for at most 3 years, for possible complaints. The newsletter email address is kept until you unsubscribe, using the link in any email or by writing to us.

8. Your rights

Under the GDPR you have the right to request access, rectification, erasure, restriction or portability of your data, to object to processing and to withdraw your consent at any time. You can write to us at contact@cazaredraculaland.ro. You have the right to lodge a complaint with the Romanian data protection authority, ANSPDCP (www.dataprotection.ro).

9. Data security

The site works exclusively over an encrypted connection (HTTPS), passwords are stored encrypted and the forms are protected against automated attacks.

10. Changes

We may update this policy from time to time. The date of the last update is shown at the top of the page.