Privacy Notice
1. Introduction
Green Valley Resort Management & Hospitality SRL ('we', 'us', 'our') is committed to protecting the personal data of our website visitors and guests in accordance with EU Regulation 2016/679 (GDPR) and applicable Romanian data protection law.
Data Controller:
Green Valley Resort Management & Hospitality SRL
Email: contact@thevalley.ro
2. Data We Collect
a) Booking and reservation data:
- Full name, email address, phone number
- Arrival and departure dates
- Payment information (processed by third-party providers; we do not store card details)
- Special requests or preferences
b) Contact form data:
- Name, email address, and message content
c) Newsletter / marketing data:
- Email address and marketing preferences
d) Website usage data (analytics):
- IP address (anonymised where possible), browser type and version
- Pages visited, time spent, referring website
3. Legal Basis for Processing
- Contract performance: to fulfil your booking and related services (Art. 6(1)(b) GDPR)
- Legal obligation: to comply with Romanian and EU law (Art. 6(1)(c) GDPR)
- Legitimate interests: to improve our Website and services, detect fraud (Art. 6(1)(f) GDPR)
- Consent: for newsletter subscription and non-essential analytics cookies (Art. 6(1)(a) GDPR) - withdrawable at any time
4. How We Use Your Data
- Processing and managing your booking
- Sending booking confirmations and pre-arrival communications
- Responding to contact form enquiries
- Sending marketing newsletters (with consent)
- Improving Website performance via analytics
- Complying with legal and regulatory obligations
5. Google Analytics
We use Google Analytics to analyse Website traffic. It may use cookies to collect anonymised visit data, transferred to Google servers under appropriate safeguards (Standard Contractual Clauses). You may opt out via the Google Analytics Opt-out Browser Add-on or our cookie consent tool.
6. Data Sharing
We do not sell your data. We may share it with:
- Payment processors (for secure transaction handling)
- IT and hosting providers (for Website operation)
- Email service providers (for confirmations and newsletters)
- Analytics providers such as Google
- Competent authorities (where required by law)
All third-party processors are bound by appropriate data processing agreements.
7. International Transfers
Where data is transferred outside the EEA, appropriate safeguards (Standard Contractual Clauses) are in place.
8. Data Retention
- Booking data: 5 years from the date of stay (Romanian fiscal law)
- Contact form data: 12 months from submission
- Newsletter subscriber data: until unsubscribed
- Analytics data: as configured in Google Analytics (default 26 months)
9. Your Rights
Under GDPR you have the right to: access your data, rectify inaccuracies, request erasure, restrict processing, data portability, object to processing, and withdraw consent at any time. To exercise these rights, contact us at contact@thevalley.ro.
You may also lodge a complaint with the Romanian supervisory authority:
Autoritatea Nationala de Supraveghere a Prelucrarii Datelor cu Caracter Personal (ANSPDCP)
Website: www.dataprotection.ro
10. Cookies
We use cookies for functionality, analytics, and marketing. Please refer to our Cookie Policy on the Website. Preferences can be managed via our consent banner.
11. Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or alteration.
12. Changes to This Notice
We may update this Privacy Notice at any time. The most recent version will always be available on our Website.
13. Contact
Green Valley Resort Management & Hospitality SRL
Email: contact@thevalley.ro
Website: www.thevalley.ro