1. Who processes your data
The data controller is ANDUTZA-IT SOLUTIONS S.R.L., Romanian tax identification number 46717918, Trade Register number J2022001041185, with its registered office at 63 Jidoștiței Street, Building BZ 15, Entrance A, Apartment 19, postal code 220239, Drobeta-Turnu Severin, Mehedinți County, Romania. The company operates the Severin City Residence brand and severinaparthotel.ro. Contact us at info@severinaparthotel.ro or +40 790 394 334.
2. Data we collect
- information voluntarily entered in the enquiry form: name or organisation, email address, requested dates, number of guests, purpose of stay, requested services and message;
- information communicated by telephone, WhatsApp or email;
- technical access data: full IP address, date and time, page viewed, language, source/referrer, device type, browser, operating system and country when supplied by the hosting infrastructure;
- interaction events such as opening a gallery, clicking WhatsApp or telephone links and submitting a form.
3. Purposes
We use the data to answer enquiries, prepare accommodation offers, administer bookings and requested services, measure site operation, prevent abuse and unauthorised access, investigate technical incidents and protect website security.
4. Legal basis
Enquiry data is processed to take steps at your request before entering into a contract and, where applicable, to perform that contract. Technical logs, including IP addresses, are processed for our legitimate interests in network and information security, fraud prevention and service availability. We assess the necessity of this processing and its impact on visitors' rights.
5. Retention
Technical logs containing full IP addresses are automatically deleted after a maximum of 90 days. Enquiries that do not lead to a booking are retained only as long as necessary to answer and follow up the request. Contractual, accounting and invoicing records are retained for the periods required by law.
6. Recipients
Data may be accessed by our hosting provider and technical suppliers only as necessary to operate and secure the website. Communications initiated through WhatsApp, telephone or email are also subject to the relevant provider's terms. We do not sell personal data or use it for behavioural advertising.
7. Cookies and audience measurement
Our internal statistics system does not use advertising cookies and does not create cross-site profiles. The administration panel uses a strictly necessary session cookie for administrator authentication.
8. Your rights
Subject to the GDPR, you may request access, correction, erasure or restriction, object to processing based on legitimate interests and, where applicable, request data portability. You may lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing or your local supervisory authority. To exercise your rights, email info@severinaparthotel.ro.
9. Security and changes
We apply technical and organisational safeguards to limit access, including administrator authentication and protected log files. We may update this policy when our services or legal requirements change. The latest update date is displayed on this page.