Privacy Policy

This Privacy Policy explains how România Mea ("we", "us") processes personal data when you use romaniamea.online (the "Site"), in accordance with the EU General Data Protection Regulation — Regulation (EU) 2016/679 (GDPR) and applicable Romanian law (including Law no. 190/2018).

Who we are (data controller)

The Site is operated by [SC ... SRL / date firmă] ("the Operator"). For any privacy request, contact us at contact@romaniamea.online. Full operator details are set out in our Terms of Use.

What data we process

• Contact & partnership form data — the name, email address, business/website and message you submit. This form is delivered to us by email through our processor Web3Forms.
• Enquiry / lead form data — the name, email, phone and message you provide, stored in our database hosted by Supabase.
• Analytics data — when you consent, we use Google Analytics 4 to collect pseudonymous usage data (pages viewed, approximate location, device/browser, interactions) via cookies and similar technologies.
• Technical data — our hosting provider automatically logs technical information such as IP address and request data for security and operation.

We do not knowingly collect data from children, and we do not carry out automated decision-making that produces legal effects.

Legal basis for processing

• To provide and secure the Site — our legitimate interest (Art. 6(1)(f) GDPR).
• To answer your messages and enquiries — your consent and/or steps taken at your request prior to a contract (Art. 6(1)(a)/(b) GDPR).
• To measure audience and improve the Site (analytics) — your consent (Art. 6(1)(a) GDPR), given via our cookie banner.
• To display and attribute affiliate/advertising links — your consent for any non-essential cookies.

Cookies and consent

We use cookies as described in our Cookie Policy. Non-essential cookies (analytics, advertising) are set only after you accept them; by default they are denied under Google Consent Mode v2. You can change or withdraw your choice at any time.

Recipients and processors

We share data only as needed with service providers acting on our instructions, including: Web3Forms (contact-form delivery), Supabase (database hosting for enquiries), Google (Analytics), and our web host Hostinger. When you click an affiliate link, the partner (Stay22, GetYourGuide, Travelpayouts and its brands, Tiqets) may set its own cookies under its own privacy policy. Weather data is retrieved from Open-Meteo without transmitting personal data.

International transfers

Some providers are located outside the European Economic Area (e.g. in the United States). Where this is the case, transfers are protected by appropriate safeguards such as the EU Standard Contractual Clauses or an adequacy framework.

How long we keep data

We keep enquiry and contact messages only as long as necessary to handle your request and for a reasonable follow-up period, then delete or anonymise them. Analytics data is retained according to our Google Analytics retention settings.

Your rights

Under the GDPR you have the right to access, rectify, erase ("right to be forgotten"), restrict and object to the processing of your data, the right to data portability, and the right to withdraw consent at any time. To exercise these rights, email contact@romaniamea.online.

You also have the right to lodge a complaint with the supervisory authority — in Romania, the National Supervisory Authority for Personal Data Processing (ANSPDCP) (www.dataprotection.ro).

Changes

We may update this Policy; the "last updated" date below reflects the current version.