{"id":1531,"date":"2026-02-21T14:38:13","date_gmt":"2026-02-21T14:38:13","guid":{"rendered":"https:\/\/theriver.ro\/?page_id=1531"},"modified":"2026-03-02T19:27:52","modified_gmt":"2026-03-02T19:27:52","slug":"politica-gdpr","status":"publish","type":"page","link":"https:\/\/theriver.ro\/en\/politica-gdpr\/","title":{"rendered":"GDPR policy"},"content":{"rendered":"<div data-elementor-type=\"wp-page\" data-elementor-id=\"1531\" class=\"elementor elementor-1531\" data-elementor-post-type=\"page\">\n\t\t\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-259fec9e elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"259fec9e\" data-element_type=\"section\" data-e-type=\"section\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-no\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-1220ab70\" data-id=\"1220ab70\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<section class=\"elementor-section elementor-inner-section elementor-element elementor-element-4fc032c7 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"4fc032c7\" data-element_type=\"section\" data-e-type=\"section\" data-settings=\"{&quot;animation&quot;:&quot;none&quot;}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-no\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-inner-column elementor-element elementor-element-7c2f23ca\" data-id=\"7c2f23ca\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t<div class=\"elementor-element elementor-element-58bab722 e-flex e-con-boxed e-con e-child\" data-id=\"58bab722\" data-element_type=\"container\" data-e-type=\"container\" id=\"politica\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-2bbe9c6 elementor-widget elementor-widget-text-editor\" data-id=\"2bbe9c6\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p>GDPR policy<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-16832c8 elementor-widget elementor-widget-text-editor\" data-id=\"16832c8\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p>Last update: 21.02.2026<\/p><h5>1. About this policy<\/h5><p>This GDPR Policy describes how we process personal data in connection with the website. <strong data-start=\"7099\" data-end=\"7114\">theriver.ro<\/strong>, booking requests, communication with customers and provision of accommodation\/rental services at The River Chalet, in accordance with Regulation (EU) 2016\/679 (GDPR).<\/p><h5>2. Data Controller<\/h5><p data-start=\"516\" data-end=\"553\"><strong data-start=\"7316\" data-end=\"7338\">XUX Investment SRL<\/strong><br data-start=\"7338\" data-end=\"7341\" \/>Headquarters: Sibiu, 12 Tractorului Street, Sibiu County<br data-start=\"7390\" data-end=\"7393\" \/>J32\/712\/2013 \u2022 CUI RO 32102114<br data-start=\"7423\" data-end=\"7426\" \/><br data-start=\"7460\" data-end=\"7463\" \/>Phone: +4<strong data-start=\"7472\" data-end=\"7488\">0 371 306 055<\/strong><\/p><h5>3. What data do we collect?<\/h5><p data-start=\"7546\" data-end=\"7630\">Depending on your interaction with us, we may process the following categories of data:<\/p><p data-start=\"7632\" data-end=\"7670\"><strong data-start=\"7632\" data-end=\"7670\">a) Identification and contact details<\/strong><\/p><ul data-start=\"7671\" data-end=\"7743\"><li data-start=\"7671\" data-end=\"7686\"><p data-start=\"7673\" data-end=\"7686\">name, surname<\/p><\/li><li data-start=\"7687\" data-end=\"7703\"><p data-start=\"7689\" data-end=\"7703\">email, phone<\/p><\/li><li data-start=\"7704\" data-end=\"7743\"><p data-start=\"7706\" data-end=\"7743\">other data voluntarily provided in the message<\/p><\/li><\/ul><p data-start=\"7745\" data-end=\"7785\"><strong data-start=\"7745\" data-end=\"7785\">b) Reservation\/contract related data<\/strong><\/p><ul data-start=\"7786\" data-end=\"7925\"><li data-start=\"7786\" data-end=\"7811\"><p data-start=\"7788\" data-end=\"7811\">check-in\/check-out dates<\/p><\/li><li data-start=\"7812\" data-end=\"7855\"><p data-start=\"7814\" data-end=\"7855\">number of people, preferences, requests<\/p><\/li><li data-start=\"7856\" data-end=\"7895\"><p data-start=\"7858\" data-end=\"7895\">billing details (if applicable)<\/p><\/li><li data-start=\"7896\" data-end=\"7925\"><p data-start=\"7898\" data-end=\"7925\">correspondence and confirmations<\/p><\/li><\/ul><p data-start=\"7927\" data-end=\"7956\"><strong data-start=\"7927\" data-end=\"7956\">c) Technical data (website)<\/strong><\/p><ul data-start=\"7957\" data-end=\"8092\"><li data-start=\"7957\" data-end=\"7985\"><p data-start=\"7959\" data-end=\"7985\">IP address, browser, device<\/p><\/li><li data-start=\"7986\" data-end=\"8021\"><p data-start=\"7988\" data-end=\"8021\">pages visited, traffic source<\/p><\/li><li data-start=\"8022\" data-end=\"8092\"><p data-start=\"8024\" data-end=\"8092\">cookie identifiers and browsing events (if enabled)<\/p><\/li><\/ul><p data-start=\"8094\" data-end=\"8106\"><strong data-start=\"8094\" data-end=\"8106\">d) Payments<\/strong><\/p><ul data-start=\"8107\" data-end=\"8273\"><li data-start=\"8107\" data-end=\"8273\"><p data-start=\"8109\" data-end=\"8273\">us <strong data-start=\"8113\" data-end=\"8142\">we do not store card data<\/strong>; card payments are processed by an authorized processor (e.g. NETOPIA Payments), which may collect data necessary for the transaction.<\/p><\/li><\/ul><h5>3A. How we collect data (sources)<\/h5><p>Data can be collected in the following ways:<\/p><ul><li>directly from you, when you fill out the forms on the website (reservation \/ contact) or when you contact us by email \/ phone;<\/li><li>automatically, through the operation of the website (server access logs \u2013 e.g. IP, date\/time, pages accessed) and through cookies\/similar technologies (depending on your settings and consent);<\/li><li>through payment processors, when you choose to pay online with your card (the operator does not receive or store full card data).<\/li><\/ul><h5>4. Purposes and legal bases<\/h5><p data-start=\"8309\" data-end=\"8333\">We process data for:<\/p><ol data-start=\"8335\" data-end=\"8914\"><li data-start=\"8335\" data-end=\"8477\"><p data-start=\"8338\" data-end=\"8477\"><strong data-start=\"8338\" data-end=\"8403\">Managing booking requests and communicating with you<\/strong><br data-start=\"8403\" data-end=\"8406\" \/>Grounds: actions at the request of the data subject \/ execution of the contract.<\/p><\/li><li data-start=\"8479\" data-end=\"8580\"><p data-start=\"8482\" data-end=\"8580\"><strong data-start=\"8482\" data-end=\"8546\">Conclusion and execution of the rental\/service contract<\/strong><br data-start=\"8546\" data-end=\"8549\" \/>Grounds: execution of the contract.<\/p><\/li><li data-start=\"8582\" data-end=\"8679\"><p data-start=\"8585\" data-end=\"8679\"><strong data-start=\"8585\" data-end=\"8652\">Fulfillment of legal obligations (tax, accounting, archiving)<\/strong><br data-start=\"8652\" data-end=\"8655\" \/>Grounds: legal obligation.<\/p><\/li><li data-start=\"8681\" data-end=\"8776\"><p data-start=\"8684\" data-end=\"8776\"><strong data-start=\"8684\" data-end=\"8750\">Security, fraud prevention, protecting our rights<\/strong><br data-start=\"8750\" data-end=\"8753\" \/>Grounds: legitimate interest.<\/p><\/li><li data-start=\"8778\" data-end=\"8914\"><p data-start=\"8781\" data-end=\"8914\"><strong data-start=\"8781\" data-end=\"8839\">Marketing and measurement (only where applicable and permitted)<\/strong><br data-start=\"8839\" data-end=\"8842\" \/>Basis: consent (for non-essential cookies and certain tools).<\/p><\/li><\/ol><h5>4A. Online payments (NETOPIA Payments) \u2013 GDPR clarifications<\/h5><p>If you use online payment, the transaction is processed by NETOPIA Payments (or another authorized processor). In this case:<\/p><ul><li>we do not store card data (card number, CVV, expiration date);<\/li><li>the processor may process data necessary for making the payment and preventing fraud (e.g. name, email\/phone, amount, currency, transaction identifier, technical data regarding the device and session, according to 3D Secure security requirements);<\/li><li>the processing of this data is carried out in accordance with the processor's policies and legal obligations applicable to payment services.<\/li><\/ul><h5>5. Recipients of the data (who can receive the data)<\/h5><p data-start=\"8972\" data-end=\"9032\">We may disclose your data, strictly to the extent necessary, to:<\/p><ul data-start=\"9033\" data-end=\"9354\"><li data-start=\"9033\" data-end=\"9076\"><p data-start=\"9035\" data-end=\"9076\">IT providers (hosting, maintenance, email)<\/p><\/li><li data-start=\"9077\" data-end=\"9142\"><p data-start=\"9079\" data-end=\"9142\">analytics\/marketing service providers (if enabled)<\/p><\/li><li data-start=\"9143\" data-end=\"9220\"><p data-start=\"9145\" data-end=\"9220\">payment processors (e.g. NETOPIA Payments) for processing transactions<\/p><\/li><li data-start=\"9221\" data-end=\"9269\"><p data-start=\"9223\" data-end=\"9269\">public authorities, when we have a legal obligation<\/p><\/li><li data-start=\"9270\" data-end=\"9354\"><p data-start=\"9272\" data-end=\"9354\">consultants (accounting\/legal), if necessary for our obligations.<\/p><\/li><\/ul><h5>6. Transfers outside the EEA<\/h5><p data-start=\"1975\" data-end=\"2024\">Certain providers may process data outside the European Economic Area. In such cases, we aim to use appropriate safeguards (e.g. standard contractual clauses), where applicable.<\/p><h5>7. How long we keep the data (storage period)<\/h5><ul><li data-start=\"9635\" data-end=\"9747\"><p data-start=\"9637\" data-end=\"9747\">Data from forms (reservation\/contact): as necessary for managing the request and internal records.<\/p><\/li><li data-start=\"9748\" data-end=\"9841\"><p data-start=\"9750\" data-end=\"9841\">Contractual\/fiscal data: according to applicable legal terms (accounting\/archiving).<\/p><\/li><li data-start=\"9842\" data-end=\"9926\"><p data-start=\"9844\" data-end=\"9926\">Technical data\/cookies: according to cookie duration and settings\/consent.<\/p><\/li><\/ul><h5>7A. Termene orientative de stocare (exemple)<\/h5><p>For transparency, we use the following guidelines (where there are no longer legal obligations):<\/p><ul><li>booking requests \/ messages: kept as long as necessary for request management and internal records;<\/li><li>contractual documents and financial-accounting documents (invoices, receipts): kept in accordance with legal archiving obligations;<\/li><li>technical logs (security): kept for a reasonable period for security and abuse prevention.<\/li><\/ul><h5>8. Your rights (GDPR)<\/h5><p data-start=\"9958\" data-end=\"10003\">You have the following rights, under the law:<\/p><ul data-start=\"10004\" data-end=\"10312\"><li data-start=\"10004\" data-end=\"10022\"><p data-start=\"10006\" data-end=\"10022\">the right of access<\/p><\/li><li data-start=\"10023\" data-end=\"10047\"><p data-start=\"10025\" data-end=\"10047\">the right to rectification<\/p><\/li><li data-start=\"10048\" data-end=\"10095\"><p data-start=\"10050\" data-end=\"10095\">the right to erasure (\u201cthe right to be forgotten\u201d)<\/p><\/li><li data-start=\"10096\" data-end=\"10123\"><p data-start=\"10098\" data-end=\"10123\">the right to restriction<\/p><\/li><li data-start=\"10124\" data-end=\"10150\"><p data-start=\"10126\" data-end=\"10150\">the right to portability<\/p><\/li><li data-start=\"10151\" data-end=\"10172\"><p data-start=\"10153\" data-end=\"10172\">right to opposition<\/p><\/li><li data-start=\"10173\" data-end=\"10265\"><p data-start=\"10175\" data-end=\"10265\">the right to withdraw your consent (where processing is based on consent)<\/p><\/li><li data-start=\"10266\" data-end=\"10312\"><p data-start=\"10268\" data-end=\"10312\">the right to file a complaint with <strong data-start=\"10300\" data-end=\"10311\">ANSPDCP<\/strong>.<\/p><\/li><\/ul><h5>8A. How to exercise your rights (procedure + deadline)<\/h5><p>You can always send a request regarding your data to <a href=\"mailto:office@xuxinvestment.ro\">office@xuxinvestment.ro <\/a>or <a href=\"mailto:chalet@theriver.ro\">chalet@theriver.ro<\/a>, mentioning the name and email\/phone address used in the communication.<\/p><p>We will respond within 30 days at most, according to GDPR (term that may be extended, in justified situations, with prior notice).<\/p><p>For data protection, we may request additional information to confirm your identity before providing a response.<\/p><h5>9. Data security<\/h5><p>We apply reasonable technical and organizational measures to protect data (access control, backup, secure communications). However, no transmission over the internet can be guaranteed to be 100% secure.<\/p><h5>9A. Complaints \/ Authority<\/h5><p>If you believe that your rights have been violated, you have the right to file a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP).<\/p><h5>10. Cookies and similar technologies<\/h5><p>The website may use strictly necessary cookies and, depending on your settings\/consent, analytical\/marketing cookies. For details, please see the Privacy and Cookies Policy (if published separately) or the dedicated section of the Terms.<\/p><h5>11. Contact<\/h5><p>Pentru solicit\u0103ri privind datele personale:<br data-start=\"3290\" data-end=\"3293\" \/>Email: <a href=\"mailto:chalet@theriver.ro\"><strong data-start=\"3300\" data-end=\"3322\">chalet@theriver.ro<\/strong><\/a> \/ <strong data-start=\"3325\" data-end=\"3352\"><a class=\"decorated-link cursor-pointer\" href=\"mailto:office@xuxinvestment.ro\" rel=\"noopener\" data-start=\"3327\" data-end=\"3350\">office@xuxinvestment.ro<\/a><\/strong><br data-start=\"3352\" data-end=\"3355\" \/>Phone: <a href=\"tel:+40767803255\"><strong data-start=\"3364\" data-end=\"3383\">+40 767 803 255<\/strong><\/a><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>","protected":false},"excerpt":{"rendered":"<p>Politic\u0103 GDPR Ultima actualizare: 21.02.2026 1. Despre aceast\u0103 politic\u0103 Aceast\u0103 Politic\u0103 GDPR descrie modul \u00een care prelucr\u0103m datele cu caracter personal \u00een leg\u0103tur\u0103 cu website-ul theriver.ro, solicit\u0103rile de rezervare, comunicarea cu clien\u021bii \u0219i furnizarea serviciilor de cazare\/\u00eenchiriere la The River Chalet, \u00een conformitate cu Regulamentul (UE) 2016\/679 (GDPR). 2. Operatorul de date XUX Investment SRLSediu: [&hellip;]<\/p>","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"elementor_header_footer","meta":{"footnotes":""},"class_list":["post-1531","page","type-page","status-publish","hentry"],"_hostinger_reach_plugin_has_subscription_block":false,"_hostinger_reach_plugin_is_elementor":false,"_links":{"self":[{"href":"https:\/\/theriver.ro\/en\/wp-json\/wp\/v2\/pages\/1531","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/theriver.ro\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/theriver.ro\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/theriver.ro\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/theriver.ro\/en\/wp-json\/wp\/v2\/comments?post=1531"}],"version-history":[{"count":22,"href":"https:\/\/theriver.ro\/en\/wp-json\/wp\/v2\/pages\/1531\/revisions"}],"predecessor-version":[{"id":1882,"href":"https:\/\/theriver.ro\/en\/wp-json\/wp\/v2\/pages\/1531\/revisions\/1882"}],"wp:attachment":[{"href":"https:\/\/theriver.ro\/en\/wp-json\/wp\/v2\/media?parent=1531"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}