{"id":3,"date":"2026-07-30T10:01:25","date_gmt":"2026-07-30T08:01:25","guid":{"rendered":"https:\/\/castorharghita.ro\/?page_id=3"},"modified":"2026-07-31T07:47:19","modified_gmt":"2026-07-31T04:47:19","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/castorharghita.ro\/en\/adatkezelesi-tajekoztato\/","title":{"rendered":"Privacy Policy"},"content":{"rendered":"<section class=\"wp-block-group alignfull castor-legal has-base-background-color has-background has-global-padding is-layout-constrained wp-container-core-group-is-layout-1a0aa307 wp-block-group-is-layout-constrained\" style=\"margin-top:0;padding-top:var(--wp--preset--spacing--x-large);padding-right:var(--wp--preset--spacing--medium);padding-bottom:var(--wp--preset--spacing--x-large);padding-left:var(--wp--preset--spacing--medium)\">\n\t\n\t<div class=\"wp-block-group castor-legal__content has-global-padding is-layout-constrained wp-block-group-is-layout-constrained\">\n\t\t\n\t\t<h1 class=\"wp-block-heading has-x-large-font-size\">PRIVACY POLICY<\/h1>\n\t\t\n\n\t\t\n\t\t<p class=\"castor-legal__updated has-small-font-size wp-block-paragraph\">Effective and last updated: 31 July 2026.<\/p>\n\t\t\n\n\t\t\n\t\t<p class=\"castor-legal__lead wp-block-paragraph\">This policy explains how MARTVAR SRL processes the personal data of Castor Guesthouse guests, enquirers and website visitors, why and for how long the data is retained, and how you can exercise your data-protection rights.<\/p>\n\t\t\n\n\t\t\n\t\t<div class=\"wp-block-group castor-legal__summary has-global-padding is-layout-constrained wp-block-group-is-layout-constrained\">\n\t\t\t\n\t\t\t<h2 class=\"wp-block-heading has-medium-font-size\">Data controller at a glance<\/h2>\n\t\t\t\n\t\t\t\n\t\t\t<ul class=\"castor-legal__facts wp-block-list\"><li><strong>Data controller:<\/strong> MARTVAR SRL<\/li><li><strong>Tax identification number (CUI):<\/strong> 17856408<\/li><li><strong>Trade register number:<\/strong> J19\/818\/2005<\/li><li><strong>Registered office:<\/strong> Str. Revolu\u021biei din Decembrie no. 15, apt. 34, 530212 Miercurea-Ciuc, Harghita, Romania<\/li><li><strong>Place of service:<\/strong> Harghita-B\u0103i 1001, Harghita County, Romania<\/li><li><strong>Data protection contact:<\/strong> <a href=\"mailto:castorharghita@gmail.com\">castorharghita@gmail.com<\/a>, <a href=\"tel:+40775351961\">+40 775 351 961<\/a><\/li><\/ul>\n\t\t\t\n\t\t<\/div>\n\t\t\n\n\t\t\n\t\t<nav class=\"wp-block-group castor-legal__toc has-global-padding is-layout-constrained wp-block-group-is-layout-constrained\" aria-label=\"On this page\">\n\t\t\t\n\t\t\t<p class=\"wp-block-paragraph\"><strong>On this page<\/strong><\/p>\n\t\t\t\n\t\t\t\n\t\t\t<ul class=\"wp-block-list\"><li><a href=\"#adatok-es-celok\">What data do we process and why?<\/a><\/li><li><a href=\"#forrasok\">Where do we obtain the data?<\/a><\/li><li><a href=\"#urlapok\">Contact and quotation-request forms<\/a><\/li><li><a href=\"#foglalas-es-fizetes\">Booking and payment<\/a><\/li><li><a href=\"#sutik-es-kulso-tartalom\">Cookies and external content<\/a><\/li><li><a href=\"#cimzettek\">Recipients and data transfers<\/a><\/li><li><a href=\"#megorzes\">Retention periods<\/a><\/li><li><a href=\"#jogok\">Your rights<\/a><\/li><li><a href=\"#kapcsolat-es-panasz\">Contact and complaints<\/a><\/li><\/ul>\n\t\t\t\n\t\t<\/nav>\n\t\t\n\n\t\t\n\t\t<section id=\"adatok-es-celok\" class=\"wp-block-group castor-legal__section has-global-padding is-layout-constrained wp-block-group-is-layout-constrained\">\n\t\t\t\n\t\t\t<h2 class=\"wp-block-heading has-large-font-size\">1. What data do we process and why?<\/h2>\n\t\t\t\n\n\t\t\t\n\t\t\t<h3 class=\"wp-block-heading has-medium-font-size\">Enquiries and quotation requests<\/h3>\n\t\t\t\n\t\t\t\n\t\t\t<p class=\"wp-block-paragraph\">We process your name, email address, telephone number, company name for a corporate event, and the proposed date, number of attendees and message content, so that we can respond, prepare a quotation and take steps at your request before entering into a contract. Our legal basis is Article 6(1)(b) GDPR; for a general enquiry, we rely on our legitimate interest in responding under Article 6(1)(f) GDPR.<\/p>\n\t\t\t\n\n\t\t\t\n\t\t\t<h3 class=\"wp-block-heading has-medium-font-size\">Booking and provision of the service<\/h3>\n\t\t\t\n\t\t\t\n\t\t\t<p class=\"wp-block-paragraph\">We process the identification and contact details of the guest and contact person, stay dates, selected services, number of guests, payment status, billing details and any special requests you communicate to us, in order to manage the booking, perform the contract, issue invoices and comply with legal obligations. Our legal basis is Article 6(1)(b) and (c) GDPR.<\/p>\n\t\t\t\n\n\t\t\t\n\t\t\t<h3 class=\"wp-block-heading has-medium-font-size\">Payment and accounting<\/h3>\n\t\t\t\n\t\t\t\n\t\t\t<p class=\"wp-block-paragraph\">We process the payment amount, status, date and transaction reference to verify payment, perform the contract, prevent fraud and comply with our accounting obligations. We do not receive or store full bank-card details or the security code.<\/p>\n\t\t\t\n\n\t\t\t\n\t\t\t<h3 class=\"wp-block-heading has-medium-font-size\">Website security and troubleshooting<\/h3>\n\t\t\t\n\t\t\t\n\t\t\t<p class=\"wp-block-paragraph\">The server and security systems may record technical logs, such as the IP address, date and time, requested page, and browser and device information, to maintain website security, prevent abuse and diagnose errors. Our legal basis is our legitimate interest in information security.<\/p>\n\t\t\t\n\t\t<\/section>\n\t\t\n\n\t\t\n\t\t<section id=\"forrasok\" class=\"wp-block-group castor-legal__section has-global-padding is-layout-constrained wp-block-group-is-layout-constrained\">\n\t\t\t\n\t\t\t<h2 class=\"wp-block-heading has-large-font-size\">2. Where do we obtain the data?<\/h2>\n\t\t\t\n\t\t\t\n\t\t\t<p class=\"wp-block-paragraph\">We usually obtain data directly from you through forms, by email or telephone, via the booking interface or at the property. We may also receive data from someone booking on behalf of other guests or from the booking intermediary you use. If you provide another person\u2019s data, please inform them of this policy in advance.<\/p>\n\t\t\t\n\t\t\t\n\t\t\t<p class=\"wp-block-paragraph\">Without the data marked as required, we cannot respond to your enquiry or process your booking. Please do not include health information or other special-category data in the general message field unless it is strictly necessary to arrange the requested service safely.<\/p>\n\t\t\t\n\t\t<\/section>\n\t\t\n\n\t\t\n\t\t<section id=\"urlapok\" class=\"wp-block-group castor-legal__section has-global-padding is-layout-constrained wp-block-group-is-layout-constrained\">\n\t\t\t\n\t\t\t<h2 class=\"wp-block-heading has-large-font-size\">3. Contact and quotation-request forms<\/h2>\n\t\t\t\n\t\t\t\n\t\t\t<p class=\"wp-block-paragraph\">The forms are handled by Contact Form 7. The source-page address, IP address and browser identifier may be associated with a submission for security and abuse-prevention purposes. Submissions are also recorded in the WordPress administration area through the Flamingo plugin and forwarded by email to Castor\u2019s Gmail mailbox. FluentSMTP may retain technical email logs for up to 14 days to investigate delivery failures.<\/p>\n\t\t\t\n\t\t\t\n\t\t\t<p class=\"wp-block-paragraph\">We retain closed enquiries that did not lead to a booking or contract for up to 12 months. If the discussion leads to a booking or contract, we may retain the related correspondence for as long as contractual or legal claims can be established, exercised or defended.<\/p>\n\t\t\t\n\t\t<\/section>\n\t\t\n\n\t\t\n\t\t<section id=\"foglalas-es-fizetes\" class=\"wp-block-group castor-legal__section has-global-padding is-layout-constrained wp-block-group-is-layout-constrained\">\n\t\t\t\n\t\t\t<h2 class=\"wp-block-heading has-large-font-size\">4. Online booking and payment<\/h2>\n\t\t\t\n\t\t\t\n\t\t\t<p class=\"wp-block-paragraph\">The online room-booking interface is provided by 5stardesk. When you open the service, the booking system receives technical information about the internet connection and may use session and preference cookies to operate. The provider sends the booking details entered in the interface to Castor so that the booking can be fulfilled.<\/p>\n\t\t\t\n\t\t\t\n\t\t\t<p class=\"wp-block-paragraph\">Online card payments take place on the secure Raiffeisen Bank \/ EuPl\u0103tesc interface. The payment service provider independently processes the card details and performs authentication, authorisation and fraud-prevention checks. We receive only the transaction result and the information needed for settlement.<\/p>\n\t\t\t\n\t\t<\/section>\n\t\t\n\n\t\t\n\t\t<section id=\"sutik-es-kulso-tartalom\" class=\"wp-block-group castor-legal__section has-global-padding is-layout-constrained wp-block-group-is-layout-constrained\">\n\t\t\t\n\t\t\t<h2 class=\"wp-block-heading has-large-font-size\">5. Cookies and external content<\/h2>\n\t\t\t\n\t\t\t\n\t\t\t<p class=\"wp-block-paragraph\">The website may use technical storage needed for its essential operation and language settings. We load the booking interface only after your express choice; at that point, 5stardesk may use session and language cookies and longer-lived technical identifiers. The external service processes data under its own rules.<\/p>\n\t\t\t\n\t\t\t\n\t\t\t<ul class=\"castor-legal__retention wp-block-list\"><li>5stardesk PHPSESSID: maintains the booking session until the browsing session ends.<\/li><li>5stardesk lang: remembers the selected language for up to 30 days.<\/li><li>5stardesk t and tid: technical identifiers used by the booking system for up to 360 days.<\/li><\/ul>\n\t\t\t\n\t\t\t\n\t\t\t<p class=\"wp-block-paragraph\">Some pages can display Google Maps. We load the external map only after your express choice. When it loads, Google receives information including your IP address, browser details and the address of the page visited, and may use its own cookies or similar technologies. The introduction video shown on the event pages is served from our own server, so playing it does not involve YouTube.<\/p>\n\t\t\t\n\t\t\t\n\t\t\t<p class=\"wp-block-paragraph\">We do not currently use Google Analytics, Meta Pixel or similar traffic-analysis or advertising-tracking systems. If we introduce consent-based analytics or marketing technologies in the future, we will activate them only after your prior choice and will update this policy.<\/p>\n\t\t\t\n\t\t<\/section>\n\t\t\n\n\t\t\n\t\t<section id=\"cimzettek\" class=\"wp-block-group castor-legal__section has-global-padding is-layout-constrained wp-block-group-is-layout-constrained\">\n\t\t\t\n\t\t\t<h2 class=\"wp-block-heading has-large-font-size\">6. Recipients, processors and international transfers<\/h2>\n\t\t\t\n\t\t\t\n\t\t\t<p class=\"wp-block-paragraph\">Data is accessible only to staff who need it for booking, hospitality, event organisation, invoicing or customer service. Where necessary, we use web-hosting and maintenance, email, booking, payment, accounting and information-security providers that act under contract and appropriate confidentiality and data-protection obligations.<\/p>\n\t\t\t\n\t\t\t\n\t\t\t<p class=\"wp-block-paragraph\">When Google provides international services, data may also be processed outside the European Economic Area. In such cases, the transfer may be covered by an adequacy decision applied by the provider, the EU\u2013US Data Privacy Framework or the European Commission\u2019s Standard Contractual Clauses. Current details are provided in the provider\u2019s privacy policy.<\/p>\n\t\t\t\n\t\t\t\n\t\t\t<p class=\"wp-block-paragraph\">We disclose data to a public authority, court or other authorised body when required by law or where necessary to establish, exercise or defend a legal claim.<\/p>\n\t\t\t\n\t\t<\/section>\n\t\t\n\n\t\t\n\t\t<section id=\"megorzes\" class=\"wp-block-group castor-legal__section has-global-padding is-layout-constrained wp-block-group-is-layout-constrained\">\n\t\t\t\n\t\t\t<h2 class=\"wp-block-heading has-large-font-size\">7. How long do we retain the data?<\/h2>\n\t\t\t\n\t\t\t\n\t\t\t<ul class=\"castor-legal__retention wp-block-list\"><li>Unsuccessful or closed enquiries: up to 12 months.<\/li><li>Booking and contract data: for the period of performance and then for the applicable limitation period.<\/li><li>Accounting records: for the period required by Romanian accounting law, generally 5 years from 1 July of the year following the relevant financial year.<\/li><li>Web-server and security logs: generally up to 30 days, unless investigating a security incident requires longer retention.<\/li><li>FluentSMTP technical email logs: up to 14 days.<\/li><\/ul>\n\t\t\t\n\t\t\t\n\t\t\t<p class=\"wp-block-paragraph\">When the retention period expires, we delete or irreversibly anonymise the data unless further retention is justified by law or an ongoing legal claim.<\/p>\n\t\t\t\n\t\t<\/section>\n\t\t\n\n\t\t\n\t\t<section id=\"biztonsag\" class=\"wp-block-group castor-legal__section has-global-padding is-layout-constrained wp-block-group-is-layout-constrained\">\n\t\t\t\n\t\t\t<h2 class=\"wp-block-heading has-large-font-size\">8. Data security and automated decision-making<\/h2>\n\t\t\t\n\t\t\t\n\t\t\t<p class=\"wp-block-paragraph\">To protect data, we use access controls, up-to-date software, secure connections, backups and other technical and organisational measures appropriate to the risk. Complete security cannot be guaranteed when data is transmitted over the internet, but we seek to reduce known risks and handle incidents appropriately.<\/p>\n\t\t\t\n\t\t\t\n\t\t\t<p class=\"wp-block-paragraph\">We do not carry out solely automated decision-making that produces legal or similarly significant effects, and we do not build a marketing profile about you on the website.<\/p>\n\t\t\t\n\t\t<\/section>\n\t\t\n\n\t\t\n\t\t<section id=\"jogok\" class=\"wp-block-group castor-legal__section has-global-padding is-layout-constrained wp-block-group-is-layout-constrained\">\n\t\t\t\n\t\t\t<h2 class=\"wp-block-heading has-large-font-size\">9. Your data-protection rights<\/h2>\n\t\t\t\n\t\t\t\n\t\t\t<p class=\"wp-block-paragraph\">Subject to the GDPR\u2019s conditions, you may request access to your personal data, rectification or erasure, restriction of processing and, where applicable, data portability. You may object to processing based on legitimate interests. Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing before withdrawal.<\/p>\n\t\t\t\n\t\t\t\n\t\t\t<p class=\"wp-block-paragraph\">You may send your request to our data-protection contact. To protect your identity, we may ask for reasonable verification. We respond without undue delay, normally within one month; for complex or numerous requests, this may be extended by a further two months, and we will inform you of the extension within one month.<\/p>\n\t\t\t\n\t\t<\/section>\n\t\t\n\n\t\t\n\t\t<section id=\"kapcsolat-es-panasz\" class=\"wp-block-group castor-legal__section has-global-padding is-layout-constrained wp-block-group-is-layout-constrained\">\n\t\t\t\n\t\t\t<h2 class=\"wp-block-heading has-large-font-size\">10. Contact, complaints and changes to this policy<\/h2>\n\t\t\t\n\t\t\t\n\t\t\t<p class=\"wp-block-paragraph\">For a data-protection question or request, email <a href=\"mailto:castorharghita@gmail.com\">castorharghita@gmail.com<\/a> or write to the registered office of MARTVAR SRL.<\/p>\n\t\t\t\n\t\t\t\n\t\t\t<p class=\"wp-block-paragraph\">You may lodge a complaint with the Romanian data-protection supervisory authority: Autoritatea Na\u021bional\u0103 de Supraveghere a Prelucr\u0103rii Datelor cu Caracter Personal (ANSPDCP), Bd. G-ral Gheorghe Magheru 28\u201330, Sector 1, 010336 Bucharest, <a href=\"mailto:anspdcp@dataprotection.ro\">anspdcp@dataprotection.ro<\/a>, <a href=\"https:\/\/www.dataprotection.ro\/\" target=\"_blank\" rel=\"noreferrer noopener\">www.dataprotection.ro<\/a>.<\/p>\n\t\t\t\n\t\t\t\n\t\t\t<p class=\"wp-block-paragraph\">We may update this policy when services, technologies or laws change. The current version is available on this page together with its effective date.<\/p>\n\t\t\t\n\t\t<\/section>\n\t\t\n\t<\/div>\n\t\n<\/section>","protected":false},"excerpt":{"rendered":"<p>ADATKEZEL\u00c9SI T\u00c1J\u00c9KOZTAT\u00d3 Hat\u00e1lyos \u00e9s utolj\u00e1ra friss\u00edtve: 2026. j\u00falius 31. Ez a t\u00e1j\u00e9koztat\u00f3 bemutatja, hogyan kezeli a MARTVAR SRL a Castor Panzi\u00f3 vend\u00e9geinek, \u00e9rdekl\u0151d\u0151inek \u00e9s weboldal-l\u00e1togat\u00f3inak szem\u00e9lyes adatait, milyen c\u00e9lb\u00f3l \u00e9s meddig \u0151rzi azokat, valamint hogyan gyakorolhatja adatv\u00e9delmi jogait. Az adatkezel\u0151 r\u00f6viden Adatkezel\u0151: MARTVAR SRL Ad\u00f3sz\u00e1m (CUI): 17856408 C\u00e9gjegyz\u00e9ksz\u00e1m: J19\/818\/2005 Sz\u00e9khely: Str. Revolu\u021biei din Decembrie nr. [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"page-no-title","meta":{"footnotes":""},"class_list":["post-3","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/castorharghita.ro\/en\/wp-json\/wp\/v2\/pages\/3","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/castorharghita.ro\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/castorharghita.ro\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/castorharghita.ro\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/castorharghita.ro\/en\/wp-json\/wp\/v2\/comments?post=3"}],"version-history":[{"count":5,"href":"https:\/\/castorharghita.ro\/en\/wp-json\/wp\/v2\/pages\/3\/revisions"}],"predecessor-version":[{"id":242,"href":"https:\/\/castorharghita.ro\/en\/wp-json\/wp\/v2\/pages\/3\/revisions\/242"}],"wp:attachment":[{"href":"https:\/\/castorharghita.ro\/en\/wp-json\/wp\/v2\/media?parent=3"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}