Privacy Policy

Riese Tour Castel Dracula SRL , having its registered office in Brasov county, Bulevardul Muncii 19, Brașov 500281 registered at the Trade Registry under no. Registration CUI 42693964 , J08/1124/2020 EUID ROONRC.J8/1124/2020 , collects and processes personal data only to the extent permitted by General Regulation (EU) 679/2016 on the protection of natural persons in terms of processing of personal data and regarding the free movement of such data, hereinafter referred to as the “GDPR Policy” ( General Data Protection Regulation ).

Terms within the meaning of General Regulation (EU) 679/2016 (GDPR):

” personal data ” means any information relating to an identified or identifiable natural person (“data subject”); an identifiable natural person is a person who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or one or more elements specific to his own physical, physiological, genetic, psychological, economic, cultural or social identities;

” processing ” means any operation or set of operations performed on personal data or sets of personal data, with or without the use of automated means, such as collection, recording, organization, structuring, storage, adaptation or modification, extract, consult, use, disclose by transmission, disseminate or otherwise make available, align or combine, restrict, delete or destroy;

” restriction of processing ” means the marking of personal data stored in order to limit their future processing;

” operator ” means the natural or legal person, public authority, agency or other body that, alone or together with others, determines the purposes and means of processing personal data; when the purposes and means of processing are established by Union law or domestic law, the operator or the specific criteria for its designation may be provided for in Union law or domestic law;

” person authorized by the operator ” means the natural or legal person, public authority, agency or other body that processes personal data on behalf of the operator;

” third party ” means a natural or legal person, public authority, agency or body other than the data subject, the operator, the person authorized by the operator and the persons who, under the direct authority of the operator or the person authorized by the operator, are authorized to process data with personal character;

” consent ” of the data subject means any manifestation of the data subject’s free, specific, informed and unambiguous will by which he accepts, through a statement or an unequivocal action, that the personal data concerning him be processed.

more data regarding REGULATION no. 679 UPDATED :< here >

II. The categories of personal data processed, the scope and grounds of the processing

II.1. If you are a customer of the site riesetour.com, Riese Tour Castel Dracula SRL will process your personal data, such as name and surname,agency,firm, telephone, e-mail address through the reservation forms,booking, or e-mail.

II.2. If you are a visitor to the Site, Riese Tour Castel Dracula SRL will process your personal data that you provide directly in the context of using the Site, such as the data that you provide in the contact section / questions / complaints, to the extent that you contact us in this way.

Grounds: The processing of your data for these purposes is necessary based on legal obligations. Providing your data for this purpose is necessary. The refusal to provide data may result in the impossibility of offering you services through the Site.

Providing your data for this purpose is voluntary. The refusal to provide consent for the processing of your data for this purpose will not have negative consequences for you.

III. The duration for which we process your data

As a principle, Riese Tour Castel Dracula SRL will process your personal data as much as is necessary to achieve the processing purposes mentioned above.

IV. Your rights

Under the conditions provided by the legislation on the processing of personal data, as data subjects, you benefit from the following rights:

• the right to information, respectively the right to receive details regarding the processing activities carried out by SC Poiana Marului Ranch SRL, according to what is described in this document;
• the right to access the data, respectively the right to obtain confirmation from Riese Tour Castel Dracula SRL regarding the processing of personal data, as well as details regarding the processing activities such as the manner in which the data are processed, the purpose for which the processing is done, recipients or categories of data recipients, etc.;
• the right to rectification, respectively the right to obtain the correction, without justified delay, by Riese Tour Castel Dracula SRL of inaccurate/unjustified personal data, as well as the completion of incomplete data; The correction/completion will be communicated to each recipient to whom the data were sent, unless this proves impossible or involves disproportionate efforts.
• the right to delete data, without undue delay, (“the right to be forgotten”), if one of the following reasons applies:
  • they are no longer necessary to fulfill the purposes for which they were collected or processed;
  • if consent is withdrawn and there is no other legal basis for processing;
  • if the data subject objects to the processing and there are no overriding legitimate reasons;
  • if the personal data were processed illegally;
  • if personal data must be deleted to comply with a legal obligation;
  • personal data were collected in connection with the provision of information society services according to Union law or internal law under which the operator is subject.
• It is possible that, following the request to delete the data, Riese Tour Castel Dracula SRL will anonymize these data (thus depriving them of their personal character) and continue the processing for statistical purposes under these conditions;
• the right to restrict processing to the extent that:
  • the person contests the accuracy of the data, for a period that allows us to verify the correctness of the data;
  • the processing is illegal and the data subject objects to the deletion of personal data, requesting instead the restriction of their use;
  • the operator no longer needs the personal data for the purpose of processing, but the data subject requests them for establishing, exercising or defending a right in court; or
  • the data subject has objected to the processing (other than those for direct marketing), for the time interval in which it is verified whether the legitimate rights of the operator prevail over those of the data subject.
• the right to data portability, namely (i) the right to receive personal data in a structured way, commonly used and in an easy-to-read format, as well as (ii) the right to have this data transmitted by Riese Tour Castel Dracula SRL to another data operator, to the extent that the conditions stipulated by law are met;
• the right to opposition – regarding processing activities can be exercised by submitting a request as indicated below;
  • at any time, for reasons related to the particular situation in which the data subject is, for the data concerning him to be processed on the basis of the legitimate interest of Riese Tour Castel Dracula SRL or on the basis of the public interest, except in cases where Riese Tour Castel Dracula SRL can demonstrate that it has legitimate and compelling reasons that justify the processing and that prevail over the interests, rights and freedoms of the persons concerned or that the purpose is to establish, exercise or defend a right in court;
  • at any time, free of charge and without any justification, that the data concerning it be processed for direct marketing purposes.
• the right not to be subject to an automated individual decision, i.e. the right not to be the subject of a decision taken solely on the basis of automated processing activities, including the creation of profiles, which produce legal effects concerning the data subject or similarly affect him in -a significant measure;
• the right to address the National Supervisory Authority for the Processing of Personal Data or the competent courts, to the extent you consider necessary.

You also have the right to go to court for any violation of your rights regarding the processing of personal data. The information you provide to us will only be used and stored for the purpose for which you provided it, to administer, support and evaluate our services, including to prevent breaches of system security and to comply with the law and our contractual terms.

V. Disclosure of personal data

In order to fulfill the processing purposes, Riese Tour Castel Dracula SRL may disclose your data to partners, to third parties or entities that support Riese Tour Castel Dracula SRL in carrying out the activity through the Site (for example, courier companies, IT service providers) , or to the central/local public authorities, in the following exemplary cases listed:

• for the administration of the Site;
• in situations where this communication would be necessary for awarding prizes or other facilities to the persons concerned, obtained as a result of their participation in various promotional campaigns organized by Riese Tour Castel Dracula SRL through the Site;
• to maintain, customize and improve the Site and the services provided through it;
• to perform data analysis, testing and research, monitor usage and activity trends, develop security features and authenticate users;
• for the transmission of commercial marketing communications, under the conditions and limits provided by law;
• when the disclosure of personal data is provided by law, etc.

 VI. Transfer of personal data

The personal data provided to Riese Tour Castel Dracula SRL can be transferred outside of Romania, but only to countries in the European Union.

Riese Tour Castel Dracula SRL ensures that personal data are adequate, relevant and limited to what is necessary for the purposes for which they are processed and also ensures that the period for which personal data is stored is limited, and to meeting the deadlines, personal data will no longer be processed for these purposes.

Riese Tour Castel Dracula SRL may provide your personal data to other companies with which it is in partnership, but only on the basis of a confidentiality commitment from them, guaranteeing that this data is kept safe and that the provision of this information personal data is made according to the legislation in force, as follows: courier service providers, authorized by Riese Tour Castel Dracula SRL acting within the limits and purposes established by Riese Tour Castel Dracula SRL, according to the conditions of this “DGRP Policy”.

VII. How we can secure your data

We do our best to keep your personal data safe. We use secure protocols for communication and data transfer (such as HTTPS). We monitor our systems for possible vulnerabilities and attacks. Even though we try our best, we cannot guarantee the security of information. However, we undertake to notify the competent authorities of data protection breaches. We will also notify you if there is a threat to your rights or interests. We will do everything we reasonably can to prevent security breaches and to assist the authorities if breaches occur.

VIII. Policy towards minors

We do not intend to knowingly collect information from minors. We do not target minors as potential beneficiaries of our services.

IX. Cookies and other technologies we use

We use cookies and/or similar technologies to analyze customer behavior, administer the site, track user behavior on the site and collect user information. This is done to personalize and improve your experience with us. A cookie is a text file stored on your computer. Cookies store information that is used to help websites work better. Only we can access the cookies created by our website. You can control cookies at the browser level. Choosing to disable cookies can prevent the use of certain functions. More on our cookie policy page.

X. Complaints
If you believe that your rights have not been respected or that we are using your personal data abusively, you have the right to file a complaint with the supervisory authority regarding the processing of your personal data. In Romania, the contact details of the supervisory authority for data protection are as follows:

The National Supervisory Authority for the Processing of Personal Data,
B-dul G-ral Gheorghe Magheru no. 28-30, Sector 1, postal code 010336, Bucharest
Phone: +4 0318 059 211 or +4 0318 059 212
E-mail: anspdcp@dataprotection.ro
Website:  www.dataprotection.ro

For any additional questions regarding how personal data is processed and to exercise your rights mentioned above, please contact the email address: office@riesetour.com.

XI. Changes in the privacy policy
We reserve the right to modify this privacy policy.
The last change was made on 07.02.2024