CANCELLATION POLICY

The reservation can be canceled or modified free of charge up to 2:00 p.m. one day before the arrival date. Please note that if the reservation is cancelled , modified or in case of no-show, the price of the first night 's accommodation will be charged .

PRIVACY POLICY

The purpose of this Privacy Policy is to explain to you what data we process, why we process it and what we do with it. We are aware that personal data belong to you, that's why we make every effort to store it safely and process it carefully. We do not provide personal data to third parties without informing you.

1. TERMS AND CONDITIONS

All website users undertake to comply with these conditions for using the website. By using, viewing, transmitting, retaining, storing and/or using the information and materials of the Site, the services or functions offered in or by the site or the content of the site, in any way, you agree to each of the terms and the conditions presented below.

SC STEIN COLLECTION SRL reserves the right to modify unilaterally and without any prior notification: the content, presentation form and/or structure of the site at any time, the changes made being considered to be accepted by you if you continue to use the site- ul after the Terms and Conditions are displayed on the Site, after prior notification, in a visible manner, regarding the fact that these Terms and Conditions have been updated.

You and SC STEIN COLLECTION SRL you are independent contractors and no agency, partnership, employee - employer relationship is pursued and will not be created by using the Site.

The site is available only to natural or legal persons who can conclude valid contracts in accordance with the applicable legislation or who are already in contractual relations with SC STEIN COLLECTION SRL The site and the services offered by the site are not intended for minors.

2. PERSONAL DATA PROCESSING

For the performance of its activities, SC STEIN COLLECTION SRL processes personal data of certain categories of natural persons. These may include personal data of customers, users of this site or collaborators/contractual partners of SC STEIN COLLECTION SRL

Personal data means any information relating to an identified or identifiable natural person and an identifiable person is that identifiable person , directly or indirectly , in particular by reference to an identification element , such as a name, an identification number , location data, an online identifier, or to one or more specific elements, its own physical, physiological, genetic, psychological, economic, cultural or social identities .

This Policy refers to the personal data of our customers , business partners, other persons who come into contact with us or who visit our locations , employees or persons in in the hiring process, collaborators, etc. and it applies to personal data collected by: e-mail, directly at the reception , various forms, CVs, video recordings , web - site, social media. In order to carry out the activity , SC STEIN COLLECTION SRL may collect, process and store certain personal data required from a legal point of view, for the conclusion of a contract or for legitimate interest. These data can be, but are not limited to : name, surname, citizenship , address , telephone, home address, e-mail address, photo-video images, etc.

If the data about such a person is processed, this person is called the " data subject " within the meaning of the legislation in the field of personal data protection.

3. THE PURPOSE FOR WHICH WE COLLECT AND PROCESS YOUR PERSONAL DATA:

Customers or potential customers

1. To provide you with our services:
2. Booking rooms and other services - the legal basis for data processing is the conclusion of a contract. Personal data processed: name and surname, telephone, e-mail address
3. Hotel accommodation – the legal basis for data processing is the hotel's legal obligation to register customers and the execution of a contract. Personal data processed: name and surname, home address, e-mail address, telephone, citizenship , series and number of the identity document
4. beauty salon , fitness room, events) - the legal basis for data processing is the conclusion and execution of a contract. Personal data processed: first and last name, home address, e-mail address , telephone number, series and number of the identity document, photo images (for identification at the fitness room).
5. Enrollment in the loyalty program (optional) – the legal basis for data processing is the legitimate interest of the operator based on your consent. Personal data processed: name and surname, home address, e-mail address , phone
6. To communicate with you
7. Your information, opinions, notifications , suggestions from you , solving the various problems you report to us, offering personalized services - the legal basis for data processing is the legitimate interest of the operator, the interest of the natural persons concerned. Personal data processed: name and surname, home address, e-mail address, telephone
8. Sending newsletters ( commercial information) – the legal basis for data processing is the legitimate interest of the operator based on your consent . You can withdraw your consent at any time , thus expressing your desire to stop receiving newsletters from us . Personal data processed: name and surname, home address, e-mail address, telephone
9. To comply with our legal obligations
10. According to the applicable Romanian legislation, some of your personal data are processed based on our legal obligation. Personal data processed: name and surname, home address, e-mail address, telephone, citizenship , series and number of the identity document.

Employees or collaborators of the hotel

1. For employment - the legal basis for data processing is the conclusion of an Individual Employment Contract . Personal data processed: name and surname, telephone, home address, e-mail address, information on education and training, professional qualifications , experience , state of health , etc. (information contained in CVs, skill sheets )
2. During employment – the legal basis for data processing is the execution of an Individual Employment Contract and the legal obligations of the operator (labor legislation). Personal data processed: name and surname, telephone, home address, e -mail address, information on education and training, professional qualifications, experience , state of health , evaluations , etc. (information contained in CVs, skills sheets, medical leave certificates, etc. )

Visitors in the hotel premises

We use your personal data to ensure the security of you , our property and our staff. In this case, we base our data processing on the legitimate interest , namely the protection of these spaces , persons, assets and personnel. Data processed in this context may be your name as well as other personal data that you can provide us directly , at our request , as well as your images recorded using the video surveillance system.

Visitors to our site

When you access our website, the web server automatically saves access logs (journals) that contain the IP address of the visitor, the web resource (document) accessed as well as information about The Operating System/Browser used. We store this data to prevent fraud and to ensure website and information security . Also, on our website we use cookies to improve the browsing experience of all visitors as well as to measure the efficiency of this website . Through cookies, we do not collect or process any information on the basis of which the user could be identified . For more details, access the " Policy for the use of cookies " . We collect the content and other information you provide when you use our services, including when you sign up for an account on our sites .

We collect information about how you use our services , such as the types of content you view or interact with , or the frequency and duration of your activities .

We collect the contact information you provide us through our website forms.

If you use our services for reservations , we collect information about that reservation . This information includes your payment information , such as your credit or debit card number and other card information , as well as other account information and and authentication, billing and contact information .

We collect information from or about the computers, phones or other devices from which you access our services, depending on the permissions you have granted.

Here are some examples of device information we collect :

• attributes such as operating system, hardware version, device settings, file and software names and types, and device identifiers ;
• locations , including specific geographic locations , such as through GPS, Bluetooth, or Wi-Fi signals ;
• connection information , such as the name of your mobile operator or Internet Service Provider (ISP), browser type, language and time zone, mobile phone number and IP address.

4. TRANSMISSION OF PERSONAL DATA TO THIRD PARTIES

SC STEIN COLLECTION SRL transmits personal data to the following third parties:

1. Personal data of customers staying in the hotel are sent to the Police, according to the legal provisions
2. Personal data of employees and collaborators are transmitted to public authorities , according to legal provisions and to contracted companies (occupational medicine, occupational health and safety , meal vouchers , gift vouchers , etc. )

5. PERSONAL DATA PROCESSING DURATION

SC STEIN COLLECTION SRL processes :

a. Personal data of customers for a period of 5 years, according to legal provisions

b. Personal data of employees and collaborators during the employment and then for the duration provided by the labor legislation of the personnel file.

6. HOW WE PROTECT MY PERSONAL DATA

Personal data are processed under safe conditions . SC STEIN COLLECTION SRL has taken appropriate technical and organizational measures regarding data security, against unauthorized processing or alteration , against loss or destruction, as well as against disclosure and access unauthorized access to personal data transmitted, stored or processed. SC STEIN COLLECTION SRL ensures the integrity , availability, confidentiality and authenticity of personal data .

SC STEIN COLLECTION SRL uses advanced security methods and technologies, together with policies applied to employees and work procedures to protect the processing of personal data, according to the legal provisions in force .

SC STEIN COLLECTION SRL has concluded a contract by which the Internet and hosting service provider ensures that it has taken all security measures , such as : limiting both physical access and remotely , being installed in a data center and periodically subject to a security audit.

SC STEIN COLLECTION SRL makes all reasonable, commercially justified efforts to protect the personal data we hold , analyzes the new technologies in the field and, when and if necessary , applies them m in order to upgrade our security systems.

We have also implemented appropriate technical and organizational measures to ensure that only personal data necessary for the specified purposes are processed . The principle of implicit data protection will also be followed during the development of new services .

However , despite our efforts to store collected information in a secure operating environment that is not publicly available, we cannot guarantee the absolute security of such information during transmission or storage in in our systems. In the event of a security breach that endangers your privacy or personal information, we undertake to inform you of these things , either through the website or through other methods at our disposal (email messages, phone calls, etc.).

7. THE RIGHTS OF NATURAL PERSONS

As the holder of personal data, you have a number of rights, including:

• the right of access – allows you to obtain confirmation that your personal data is being processed by us and , if so , what are the relevant details of these processing activities ;
• to rectification – allows you to rectify your personal data if they are incorrect ;
• right to erasure – allows you to obtain the erasure of your personal data in certain cases , such as :
• if the data are no longer necessary in connection with the purposes for which they were collected;
• if the processing was based on your consent and if you withdrew your consent , or it has expired or if there is no longer a legal basis for processing your data personal;
• a court or regulatory authority has decided that your personal data in question must be deleted ;
• if it is proven that your personal data has been processed illegally .
• the right to restriction – allows you to obtain the restriction of the processing of your personal data in certain cases , for example , when you dispute the accuracy of your data with personal character , for a period that allows us to verify this accuracy ;
• the right to object - allows you to object to the further processing of your personal data , under the conditions and within the limits established by law ;
• to data portability – allows you to receive the personal data you have provided to us in a structured, commonly used and readable format , or to transmit and this data to another data operator.

You can exercise the rights mentioned above and obtain information regarding the processing of your personal data by submitting to us , in our capacity as data controller , a written request at the hotel Reception or by e-mail at office@stein-collection.ro

You also have the right to file a complaint with the National Authority for the Supervision of Personal Data Processing, in its capacity as an autonomous central public authority with general competence in the field of personal data protection .

National Authority for the Supervision of the Processing of Personal Data

• G-ral Blvd. Gheorghe Magheru 28-30 , Sector 1, postal code 010336 , Bucharest , Romania
• www.dataprotection.ro