Casa Criss respects visitor privacy and processes only the information needed to answer enquiries, manage bookings, provide accommodation and comply with legal duties.
1. Data controller
The controller is Bujac Cristian Lucian PFA, tax ID 49058935, Trade Register no. F29/1091/2023. Contact: rezervari@casacriss.eu, 0761 078 708.
2. Information we may process
- Name, phone number, email address and message content.
- Stay dates, selected apartment, estimated arrival/departure times, number of guests and pet information.
- Billing, payment and legally required accommodation records after confirmation.
- Limited technical and security logs generated by the server or hosting provider.
3. Purposes and legal bases
We use the data to respond before a contract, perform confirmed bookings, meet legal obligations and protect the website and our legitimate interests. Optional external services are loaded only according to your consent choices.
4. Recipients and international transfers
Data may be processed by hosting, email, accounting, payment or communication providers strictly as needed. If you choose WhatsApp or another external platform, that provider processes the information under its own terms and privacy policy.
5. Retention and your rights
Enquiry data is kept only as long as necessary; booking and accounting records follow statutory retention periods. Under the GDPR you may request access, correction, deletion, restriction, portability or object to processing, and you may lodge a complaint with the Romanian data protection authority.
6. Contact
For privacy requests, email rezervari@casacriss.eu. Last updated: 18 September 2026.