Privacy Policy

1. Data controller

The data controller is Tibrea Mihaela, a natural person operating accommodation services under the trade name Eden Suites Timișoara, at Strada Samuil Micu 27, 300125 Timișoara, Romania.

Privacy contact: contact@edensuitestimisoara.ro, phone +40 (770) 743 536.

2. Introduction

We respect your privacy and protect personal data in accordance with Regulation (EU) 2016/679 (GDPR) and applicable Romanian law. This policy describes what we process, how we use it and your rights.

3. Data we collect

• Contact and identity data: name, email, phone, country of residence.
• Booking data: stay dates, number of guests, accommodation preferences.
• Payments: we do not process card payments on this website; bookings are made via Booking.com, Airbnb, bank transfer or other electronic channels agreed at booking.
• Communications: messages via WhatsApp, Viber, email or phone for managing bookings.
• Website: our hosting provider (Vercel) may log technical data (e.g. IP address) without marketing or profiling tools on our site.

The price/availability form on the site does not send data to our server; the message is built in your browser and is only sent if you choose WhatsApp or email on your device.

4. Purpose and legal basis

We process data to manage bookings and stays, communicate with guests, comply with legal obligations and operate this presentation website. Legal bases include contract, legal obligation and, where applicable, legitimate interest.

5. Cookies and third-party services

We do not use analytics or advertising tools (e.g. Google Analytics, Meta Pixel) on this site. We do not set our own marketing cookies.

• Google Fonts — fonts loaded from Google; Google may receive your IP address.
• Embedded Google Maps (footer, Transport page) — Google may use cookies when the map loads.
• External links (WhatsApp, Booking.com, Airbnb, social networks) — their policies apply when you open them.

6. Sharing, retention, rights

Data may be shared with booking platforms, service providers (hosting, email) and authorities where required by law. We retain data as long as needed for the contract, legal obligations and disputes, then delete or anonymise it.

Under GDPR you have rights of access, rectification, erasure, restriction, portability and objection, and you may complain to the Romanian supervisory authority (ANSPDCP). Contact: contact@edensuitestimisoara.ro.

7. Changes

We may update this policy; the date at the top shows the latest revision.