Legal

Privacy Policy

How we collect, use, and protect your personal data when you use our services.

Last updated: June 2026

1. Who We Are

This website, romaniaprivatetravel.com ("the Website"), is owned and operated by:

DACO RESOURCES GROUP SRL
CUI: 31252288
Nr. Reg. Com.: J40/2108/2013
Registered office: Prel. Ghencea 320G, Et. 2, Sector 6, Bucharest, Romania
Email: hello@romaniaprivatetravel.com

We act as the data controller for the personal data collected through this Website. This means we determine the purposes and means of processing your personal data and are responsible for protecting it in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR).

2. What Data We Collect

We collect and process the following categories of personal data when you interact with our Website or use our services:

2.1 Information You Provide Directly

  • Name – when you fill in our contact, booking, or enquiry forms
  • Email address – when you contact us or subscribe to any communications
  • Phone number – when you submit a form or contact us via phone or WhatsApp
  • Booking details – travel dates, destinations, number of passengers, preferences, and special requirements you share with us
  • Messages and enquiries – the content of messages you send through our contact forms or directly via email

2.2 Communication Data

  • WhatsApp communications – messages you send us through WhatsApp when you use the WhatsApp button on our Website
  • Email correspondence – any emails you send to our published addresses
  • Phone call records – date, time, and subject of phone conversations (we do not record calls)

2.3 Technical Data

  • Cookies – small text files placed on your device to ensure the proper functioning of the Website and to improve your browsing experience
  • Technical information – IP address, browser type, operating system, device information, and browsing behaviour on our Website

For more details about cookies, please see our Cookie Policy.

3. Why We Collect Your Data

We collect and process your personal data only for specific, explicit, and legitimate purposes. We do not process your data in any way incompatible with these purposes.

Responding to Your Requests

To answer your enquiries, provide information about our tours, transfers, car rental, and concierge services, and to communicate with you about your specific interests.

Confirming and Managing Bookings

To process, confirm, and manage your bookings, send you relevant trip details, and coordinate logistics related to your reserved services.

Providing Our Services

To deliver the private tours, airport transfers, car rental, and concierge services you have requested, including necessary communication before, during, and after your trip.

Customer Support

To assist you with any questions, issues, or complaints before, during, or after your experience with us.

Legal Obligations

To comply with legal obligations under Romanian and European Union law, including tax, accounting, and regulatory requirements.

Website Functionality

Technical cookies are used to ensure the Website functions correctly, to maintain security, and to improve the user experience.

4. Legal Basis for Processing

Under GDPR, we rely on the following legal bases to process your personal data:

Legal Basis When It Applies
Consent When you voluntarily provide your data by filling in a form, contacting us, or explicitly agreeing to cookies (other than strictly necessary ones). You may withdraw consent at any time.
Contract When processing is necessary to fulfil a contract with you or to take steps at your request before entering into a contract — for example, confirming and delivering a booking you have made.
Legitimate Interest When we have a legitimate business reason to process your data, such as responding to enquiries, improving our services, or ensuring the security of our Website — provided this does not override your rights and interests.
Legal Obligation When we are required by law to retain or process certain data, such as for tax and accounting purposes.

5. How Long We Keep Your Data

We retain your personal data only for as long as necessary to fulfil the purposes described in this policy, or as required by applicable law.

Enquiry and Contact Data

If your enquiry does not result in a booking, we retain your data for up to 12 months after our last communication, in case you wish to follow up.

Booking and Contract Data

Data related to confirmed bookings is retained for the duration of the contractual relationship and for a period of up to 5 years after completion, in line with Romanian tax and accounting obligations.

Technical Cookies

Retention periods for cookies vary depending on their type. Strictly necessary cookies are typically session-based. For full details, please refer to our Cookie Policy.

Once the retention period expires, your personal data will be securely deleted or anonymised.

6. Your Rights

Under GDPR, you have the following rights regarding your personal data. To exercise any of these rights, please contact us at hello@romaniaprivatetravel.com. We will respond to your request within one month.

Right of Access

You can request a copy of the personal data we hold about you, along with information about how we process it.

Right to Rectification

You can ask us to correct any inaccurate or incomplete personal data we hold about you.

Right to Erasure ("Right to be Forgotten")

You can request the deletion of your personal data when it is no longer necessary for the purposes for which it was collected, or when you withdraw consent.

Right to Restriction of Processing

You can request that we restrict the processing of your data in certain circumstances — for example, while we verify the accuracy of your data or consider your objection.

Right to Object

You can object to processing based on legitimate interest, including profiling. We will stop processing unless we demonstrate compelling legitimate grounds.

Right to Data Portability

You can request your data in a structured, commonly used, machine-readable format and have it transmitted to another controller where technically feasible.

Right to Withdraw Consent

Where processing is based on your consent, you can withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before you withdrew consent.

You also have the right to lodge a complaint with the Romanian Data Protection Authority (ANSPDCP) if you believe your data protection rights have been violated. Their website is www.dataprotection.ro.

7. Data Sharing and Third Parties

We do not sell, rent, or trade your personal data to third parties. Your data is used exclusively by DACO RESOURCES GROUP SRL to provide the services you have requested.

We may share your data only in the following limited circumstances:

  • Service providers – trusted third parties who help us operate our Website and business (such as hosting providers, email services, and website analytics), bound by data processing agreements that require them to protect your data
  • Legal compliance – if required by law, court order, or governmental authority

All third parties we work with are carefully selected and are required to comply with GDPR standards. Where any data is transferred outside the European Economic Area, we ensure appropriate safeguards are in place.

8. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or damage. These include:

  • Secure SSL/TLS encryption for all data transmitted through our Website
  • Restricted access to personal data, limited to authorised personnel only
  • Regular review of our data collection, storage, and processing practices

While we strive to protect your data, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security, but we are committed to doing everything reasonably possible to keep your data safe.

9. Contact Us

If you have any questions about this Privacy Policy, wish to exercise your rights, or have concerns about how we handle your personal data, please contact us:

Address

Prel. Ghencea 320G, Et. 2
Sector 6, Bucharest
Romania

We will acknowledge your request promptly and respond within the timeframe required by law.