This policy explains how ALCO PROFESIONALRENT SRL collects, uses, stores, and protects the personal data of customers and visitors of the 4friendsapartments.net website.
We are committed to respecting European and national legislation in force regarding data protection, including the General Data Protection Regulation (EU) 2016/679 (GDPR).
1. Types of Data Processed
Depending on how you use our website, we may process the following categories of data:
Identification data: first name, surname;
Contact details: email, phone number;
Booking details: stay period, selected apartment, accommodation preferences;
Payment details: transactions processed via Netopia (we do not store card details);
Browsing data on the website (cookies, IP addresses, online behaviour) – used only for statistical purposes or to improve the user experience.
2. Purposes and Legal Grounds of Processing
Data is processed on the following purposes and legal grounds:
Managing bookings and providing the contracted service – contractual basis;
Issuing invoices and fulfilling fiscal obligations – legal requirement;
Communications regarding reservations (confirmations, notifications) – contractual basis/legitimate interest;
Marketing and personalised offers (newsletters, promotions) – based only on explicit consent;
Improving online experience – legitimate interest (statistical analysis and optimisation).
3. Disclosure of Data to Third Parties
Personal data may be disclosed, only when necessary and under secure conditions, to:
Booking.com, for booking synchronisation;
Netopia payment processor, for secure card payment processing;
Public authorities, where required by law;
IT and hosting providers, ensuring the proper operation of the website, under confidentiality agreements.
We do not sell or rent personal data to third parties.
4. Data Retention Period
Booking and invoicing data: retained for 5 years, according to fiscal legislation;
Contact data collected based on consent (e.g. marketing): retained until consent is withdrawn;
Technical data (logs, cookies): retained between 30 days and 1 year, depending on type and purpose.
5. Data Subject Rights
Under GDPR, you have the following rights:
Right of access – to request information about your data;
Right to rectification or erasure;
Right to restrict processing;
Right to data portability;
Right to object to processing;
Right to lodge a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP) – www.dataprotection.ro.
Requests concerning the exercise of GDPR rights can be sent to: contact@4friendsapartments.net or +40 742 281 526