Privacy Policy

Privacy Policy

1. Introduction

The privacy of our customers’ personal data is one of the main concerns of Apuseni PeakView SRL, headquartered in Balcesti, Belis, Principala street, no. 97-D, Cluj County, Romania, CUI RO42184251, J12/331/30.01.2020.
This document aims to inform you about how your personal data is processed, how it is used, what options you have regarding this processing, and how we will protect the rights you hold as a data subject under the applicable data protection legislation, including Regulation (EU) 2016/679 (GDPR) — in the context of using the website sunsetmountainsresort.ro

2. Your Privacy

During our interactions with you, we collect and process personal information.
Personal information includes any data that allows us to identify you as an individual — for example, your name, email address, or phone number.
We are committed to protecting your privacy and will use your personal information in compliance with all applicable laws and regulations related to data and privacy protection, including the EU General Data Protection Regulation (GDPR).

3. What Information Do We Collect?

If you are a visitor to the website or a client benefiting from a service provided by Apuseni PeakView SRL, we may process the following personal data:

• Data you provide directly when using the website — for example, the information you send to contact@xxxxxxx.eu when reaching out via email. This processing is based on Article 6(1)(a) of the GDPR.
• Device-related information, such as your IP address, when accessing the website.
• Personal identification details: full name, signature, contact information (phone number, email address, home/residence address), ID series and number, personal identification number (CNP), date of birth, nationality, and check-in/check-out dates — in the context of booking our accommodation services, under Article 6(1)(b) of the GDPR.
• Images and video recordings captured by surveillance cameras located in the outdoor areas of the accommodation premises. These recordings are not published on our social media accounts without your prior consent. The processing is carried out under Article 6(1)(f) of the GDPR, as it represents the company’s legitimate interest in ensuring the safety and security of the premises.
• Banking data, in the context of processing payments for reservations, under Article 6(1)(f) of the GDPR.

This information is necessary for us to provide you with full access to our accommodation services or to respond to your inquiries.
If you refuse to provide this information, we may not be able to offer our services in full.

4. Purpose of Data Processing

We use your personal data to provide the services of Apuseni PeakView SRL for your benefit, including but not limited to:

• Processing reservations;
• Preparing documents related to our accommodation services;
• Processing payments made by you;
• Generating and issuing vouchers;
• Data analysis, testing and research, monitoring usage trends, and developing safety features;
• Assessing your satisfaction regarding our services;
• Communicating with you regarding information requested through our contact forms;
• Providing electronic newsletters and commercial information;
• Offering assistance and support for any inquiries you may have.

5. How Do We Protect Stored Personal Data?

By law, we are required to retain personal information only as long as it is necessary for the purpose for which it was collected.
If you are a client, we will process your data for the entire duration of the contractual relationship — exclusively for the time needed to provide our services, respond to your requests, or resolve any disputes — and afterward only as required by legal obligations.
For example, accounting and financial documents must be kept for five years after the end of the financial year in which they were issued, while video surveillance footage is retained for a maximum of 30 days.

6. With Whom Do We Share Your Personal Information?

We do not transfer your personal data to third parties for marketing or unrelated purposes.
However, in order to perform the operations described in section 4, we may grant access to subcontractors or collaborators such as:

• Online payment processors;
• Website operators and maintenance providers;
• Accounting firms, lawyers, or public authorities, where applicable.

All such third parties are contractually bound to maintain the confidentiality and security of your personal data.

7. Your Rights

Under applicable data protection laws, as a data subject you have the following rights:

• Right to be informed – to receive details about how Apuseni PeakView SRL processes your personal data, as described in this document.
• Right of access – to obtain confirmation about whether Apuseni PeakView SRL processes your personal data and to receive details on how, why, and to whom the data is disclosed.
• Right to rectification – to request the correction of inaccurate or incomplete personal data without undue delay.
• Right to erasure ("right to be forgotten") – to request deletion of your personal data, under certain legal conditions. In some cases, data may be anonymized (thus no longer personal) and used for statistical purposes.
• Right to restriction of processing – to request limitation of processing in specific circumstances.
• Right to data portability – to receive your data in a structured, commonly used, machine-readable format, and to have it transferred to another controller where technically feasible.
• Right to object – to object to certain types of processing, such as direct marketing.
• Right to lodge a complaint – to the National Authority for the Supervision of Personal Data Processing (ANSPDCP) or to competent courts if you believe your rights have been violated.

8. How to Contact Us

To exercise any of the rights listed above or if you have questions regarding data processing, please contact us at: contact@sunsetmountainsresort.com

9. Protection of Personal Information

We take all necessary measures to maintain the security of the personal data we process.
However, please note that data transmission over the internet is not completely secure. This is a general internet-related risk, not specific to our services.
We cannot guarantee the absolute security of data (including personal information) transmitted to our services — any transmission is at your own risk.

If you choose to provide us with personal data of other individuals (for instance, when booking a room on their behalf or transferring a voucher), you are responsible for ensuring you have obtained their consent and have a legal basis for sharing their data, in compliance with GDPR.
We are not responsible for fully ensuring the privacy rights of such third parties.

10. Updates to This Privacy Policy

We may revise this Privacy Policy in the future if necessary.
If we make changes, the updated version will be published on our website, with the modification date indicated as “Last Updated.”
By continuing to access our website after the new version takes effect, you agree to the updated Privacy Policy.

11. Data Processing Based on Consent

When data processing is based on Article 6(1)(a) or Article 9(2)(a) of the GDPR, you have the right to withdraw your consent at any time, without affecting the legality of processing carried out prior to withdrawal.
You may modify or revoke your consent at any time, and we will act accordingly unless there is a legal reason or legitimate interest that requires continued processing.