Entry-header image

Confidentiality policy

The confidentiality of your personal data is one of the mail concerns of surasasului.ro, project belonging to S.C. ȘURA SASULUI S.R.L., headquarters in Amnaș Village,  Săliște Town, 400 Strada de Sus, Sibiu County, phone/fax: 0723342979, Email: office@surasasului.ro Tel 0745039293, VTA code: 41313200, as  data operator.

This document has the role of informing you about the processing of your personal data, in the context of using the website https://www.surasasului.ro, which we will further refer to as “the site”.


1. The categories of personal data processed

2. Purposes and grounds of processing

3. The duration for which we process your data

4. Disclosure of personal data

5. Transfer of personal data

6. Your rights

7. Changes to the privacy policy

1. The categories of personal data processed

A. If you are a customer of the site, it will process your personal data, such as:

•             Name and surname

•             Phone number

•             Email Address

•             Billing address

• Data about how you use the site (for example, your behaviour / preferences / habits

• As well as any other categories of data that you provide directly in the context of creating the user account, in the context of placing an order / reservation through the site or in any other way resulting from the use of the site.

If you do not complete the order / reservation, the e-mail address and other data provided will not be stored, and the created account / data will be automatically deleted.

B. If you are only a visitor, the site will process your personal data that you provide:

•  Directly in the context of using the site, such as the data you provide in the contact / questions / complaints section, if you choose to contact us in this manner

• Indirectly, data such as: IP address, browser used, browsing duration, search history, operating system used, language and pages viewed, complete URLs, sequence of clicks to, through and from our site , information or products viewed / searched, duration of visits on certain pages, information on the interaction with the pages (eg scrolling, clicks, mouse clicks), data on user behaviour.

2. Proposes and grounds for data processing

A. If you are a customer of the site, it processes your personal data as follows:

• for the development of the contractual relationship between you and surasasului.ro, respectively for getting, validating, and invoicing the order / reservation placed on the site, your information on the status of the order / stay

Ground:  The processing of your data for this purpose is based on the contract concluded between you and defined in the Terms and Conditions https: //www.surasasului/termeni-si-conditii. The provision of your personal data is necessary for the execution of this contract. Refusal to provide data may result in the impossibility of conducting contractual relations between you and https://www.surasasului.ro,

•             for fulfilling the legal obligations incumbent in the context of the services provided through the site, including the obligations in fiscal matters, as well as in archiving matters.

Ground:  The processing of your data for this purpose is necessary based on legal obligations. Providing your data for this purpose is necessary. The refusal to provide the data may have as a consequence the impossibility to respect the legal obligations incumbent on it and therefore the impossibility to offer you the services through the site.

•             for marketing activities, respectively for the transmission, through the means of distance communication (e-mail, sms) of commercial communications regarding the products and services offered by, through the site.

Ground: The processing of your data for this purpose is based on your consent, if you choose to provide it.

To unsubscribe from receiving such commercial communications you can use the option at the end of each e-mail / sms containing commercial communications. In addition, you can unsubscribe by request at office@surasasului.ro

Providing your data for this purpose is voluntary. Refusal to provide consent for the processing of your data for this purpose will not have negative consequences for you.

3. The duration for which we process your data

surasasului.ro will process your personal data as long as it is necessary to achieve the processing purposes mentioned above.

If you are a customer, we will process your data for the entire duration of the contractual relationship and subsequently according to the legal obligations incumbent on you (eg, in the case of financial-accounting supporting documents for which the retention period provided by law is 10 years at the end of the financial year during which they were prepared).

If you withdraw your consent for the processing of data for marketing purposes, we  will stop processing your personal data for this purpose, without affecting the processing carried out on the basis of the consent expressed by you before its withdrawal.

4. Disclosure of personal data

We do not rent / sell your personal data to third parties.

In addition to the data operator, in certain situations, the data may be accessible to third parties such as service providers, transport operators, hosting providers, IT companies, appointed, if necessary, as persons authorized by the Operator.

They are obliged by contract to maintain the confidentiality of the data and to use them exclusively for the purpose for which they were provided.

We may also disclose your personal data to central / local public authorities, in the following exemplary cases listed:

• for site administration

• in situations where this communication would be necessary for the awarding of prizes or other facilities to the persons concerned, obtained as a result of their participation in various promotional campaigns organized by the site;

• for maintaining, personalizing and improving the site and the services performed through it

• for performing data analysis, testing and research, monitoring usage and activity trends, developing security features and user authentication

• for the transmission of commercial marketing communications, under the conditions and limits provided by law

• when the disclosure of personal data is provided by law, etc.


5. Transfer of personal data

The personal data provided to can be transferred outside of Romania, but only to European Union countries.

6. Your rights

Under the conditions provided by the legislation on the processing of personal data, as data subjects, you benefit from the following rights:

•             the right to information – the right to receive details regarding the processing activities performed by www.surasasului.ro, according to those described in this document;

• the right of access to data, the right to obtain confirmation from the party regarding the processing of personal data, as well as details regarding the processing activities such as the way in which the data are being processed, the purpose for which the processing is done, the recipients or categories of recipients data, etc .;

• the right to rectification – the right to obtain the correction, without justified delays, by inaccurate / unjustified personal data, as well as the completion of incomplete data;

• the right to delete data, without undue delay, (“right to be forgotten”) – certain conditions apply; It is possible that, following the request to delete the data, to anonymize this data (thus depriving them of personal character) and to continue in these conditions the processing for statistical purposes;

• the right to restrict processing, under certain conditions;

• the right to data portability – the right to receive personal data in a structured way, commonly used and in an easy-to-read format, as well as the right to have this data transmitted by another data controller, insofar as the conditions provided by law are met;

• the right to opposition

– regarding the processing activities, it can be exercised by sending a request according to those indicated below;

– at any time, for reasons related to the particular situation of the data subject, that the data concerning one particular person to be processed on the basis of one’s legitimate interest or on the basis of the public interest, unless one can prove that one has legitimate and compelling reasons which justifies the processing and which prevails over the interests, rights and freedoms of the persons concerned or whose purpose is to establish, exercise or defend a right in court;

– at any time, free of charge and without any justification, for the data concerning  one person to be processed for the purpose of direct marketing.

•             the right not to be subject to an individual decision; the right not to be the subject of a decision taken solely on the basis of automatic processing activities, including the creation of profiles, which produce legal effects concerning the data subject or significant measure;

•             the right to address the National Authority for the Supervision of Personal Data Processing or the competent courts, to the extent deemed necessary.

For any additional questions regarding the way in which personal data are processed and in order to exercise your rights mentioned above, please contact the email address: office@surasasului.ro

7. Changes to the privacy policy

We reserve the right to change this privacy policy. In case of major changes in the future you will be notified by email (if possible) or by posting a specific message on the site.

This website uses cookies.