Privacy Policy

1. Who we are

Your data is handled by:

SC B&D Castle Management SRL
Sat Tălișoara, Comuna Brăduț, nr. 213J, Județul Covasna, România
CUI: RO26094610
Phone: +40 725 942 787
Email: office@danielcastle.ro

We respect your privacy and handle your personal data with care, transparency, and responsibility.

2. What data we collect

Depending on how you interact with us, we may collect:

When you make a reservation

• Name and surname
• Email address
• Phone number
• Billing details (address, company details if applicable)
• Payment details (processed securely via third-party providers)
• Stay details (dates, preferences, special requests)

During your stay

• Information required by law for accommodation (ID details)
• Preferences (e.g. dietary requirements, spa bookings)

When you contact us

• Any information you choose to share via email, phone, or forms

When you use our website

• Technical data (IP address, browser type, device)
• Cookies and usage data (see Cookies Policy)

3. Why we collect your data

We use your data to:

• Process and manage your reservation
• Provide services during your stay
• Communicate with you before, during, and after your visit
• Issue invoices and comply with legal obligations
• Improve our services and guest experience
• Send relevant updates or offers (only if you have agreed)

4. Legal basis for processing

We process your data based on:

• Contract – to provide the services you booked
• Legal obligations – e.g. invoicing, guest registration
• Legitimate interest – to improve services and communication
• Consent – for marketing communications and cookies (where applicable)

5. How we store and protect your data

Your data is stored securely and protected against unauthorized access, loss, or misuse.

We work with trusted service providers who are also required to comply with GDPR.

We retain your data only for as long as necessary:

• to fulfill legal obligations (e.g. accounting records)
• or to maintain our relationship with you as a guest

6. Sharing your data

We do not sell your data.

We may share it only with:

• Payment processors
• Booking platforms (if you used one)
• IT and system providers
• Email marketing platforms (e.g. Mailchimp)
• Analytics and advertising partners (see below)
• Authorities, when required by law

7. Marketing & third-party tools

Email marketing (Mailchimp)

If you subscribe to our newsletter or have agreed to receive updates, your email address may be processed through Mailchimp, a platform used for sending newsletters and managing communication.

You can unsubscribe at any time using the link included in each email.

Analytics (Google Analytics)

We use Google Analytics to understand how visitors use our website and to improve the user experience.

This may include:

• Pages visited
• Time spent on the site
• General location (not precise)

Google Analytics processes data in accordance with its own privacy policies.

Advertising (Meta Pixel)

We use Meta Pixel (Facebook Pixel) to:

• Measure the effectiveness of our advertising
• Show relevant ads to users who have interacted with our website

This allows us to better tailor our communication and promotions.

All tracking technologies are used in accordance with your cookie preferences. For more details, please see our Cookies Policy.

8. Your rights

Under GDPR, you have the right to:

• Access your personal data
• Request correction of inaccurate data
• Request deletion ("right to be forgotten")
• Restrict processing
• Object to processing
• Request data portability

To exercise any of these rights, contact us at: office@danielcastle.ro

9. Data security incidents

In the unlikely event of a data breach, we will:

• Take immediate measures to limit the impact
• Notify the relevant authorities if required
• Inform affected individuals when necessary

10. Updates to this policy

We may update this Privacy Policy from time to time. The latest version will always be available on our website.