privacy policy

Introduction

This Privacy Policy was created by www.bookingvacante.ro and is addressed to all users of our website, including those who use or intend to use our products and services.

By choosing to use www.bookingvacante.ro, you are placing your trust in us and we take this responsibility seriously, committing to protecting your personal data, using it exclusively for legitimate purposes.

This policy explains how we collect, use and process personal data when:

• visit our website,
• purchase products or services related to travel packages through our platform
• use our mobile app

The document also details your rights regarding the protection of personal data as well as how you can contact us.

Our website www.bookingvacante.ro offers online travel-related services through this website and mobile application, with the help of authorized partners. Any personal data collected is processed strictly to facilitate, manage and improve your travel experience, including:

• processing reservations,
• customer assistance and support,
• relevant communications about your services and travels.
• 
  

This Privacy Policy applies to all travel-related information processed by www.bookingvacante.ro, across all our services.



Terms used

Throughout this Privacy Policy, we use terms that have specific meanings in the context of our website and the services we offer. These terms are defined and explained in the following section.

Summer



The table below provides a summary of how we handle your personal data under this Privacy Policy. By clicking "Read more" or scrolling down the page, you will be able to access detailed information about each activity.

Collection of personal data

Depending on your relationship with us, we may collect the following types of data, either automatically through your interactions with our website and applications or provided directly by you:

• Contact information: name, surname, email, phone number, home address
• Additional personal data: date of birth/age, current location, names and dates of birth of people you are traveling with, as well as any preferences you may have for your trip (e.g. dietary or accessibility requirements).
• Reservation information: for flights and certain attractions, we may collect additional data, such as passport or national identity data, also required for online check-in (example: ID series and number, etc.)
• Financial/payment information: payment method
• Data collected automatically when you visit our website: IP address, browser type, operating system, date and time of access and pages visited. This data is collected through server logs and security systems.

When you contact our customer service team, whether via the platform, phone or social media, we may collect information such as your name, call metadata (where you called from, date and duration of the call) and messages sent.

During or after your trip, we may invite you to submit reviews about your experiences. On our platform, we collect the information you include in your reviews, along with your first or display name and avatar, if you choose to use one.

Important note: Whenever you provide information about other people, please ensure that they are aware and understand how Bookingvacante.ro uses their personal data, as described in this Privacy Policy.

How we use data

We use your personal data to provide you with a complete and personalized experience on our platform. This includes, among others: providing requested products and services, managing reservations and customer support, improving and personalizing services, communicating relevant offers and information, conducting market research, ensuring data security, and managing customer reviews or destination information.

Specifically, we use your data for the following purposes:

• Communicating with you: We may contact you by email, phone, SMS, push notifications or messages through the Platform, depending on the contact details you have provided. We use your personal data in these communications to: manage requests, information requests, support requests, assist through automated tools (e.g. chat), complete unfinished reservations, send surveys or review requests, provide travel information and send important administrative or security messages. The personal data used may include your name, email address and booking details, such as booking ID and associated locations.

• Travel reservations: We process personal data to manage and complete your travel reservation. This includes sending you reservation-related communications, such as confirmations, payment details, updates and notifications. In some cases, we may use your data to facilitate online check-in with travel suppliers or to manage any damage deposits. For these services, we may use your contact details and reservation-related information, such as confirmation codes and travel details.

• Customer Service: To provide you with efficient assistance, we share relevant booking information, such as trip details, prices, and the date and time you made your booking, with our support team. This allows us to promptly answer your questions and provide you with the support you need to resolve any issues.

• Feedback: During or after your trip, we may invite you or your companion to submit a review. Reviews help other travelers make informed decisions while keeping your identity private. All reviews are moderated to ensure they comply with our Terms and Conditions of Use.

• Marketing: We process your personal data for personalized marketing, if you have opted in to receive such communications, as well as for market research, based on our legitimate interests or your consent, in accordance with the GDPR. This includes identifying offers and services that are relevant to you and sending you promotions or updates via email, in-app notifications or other similar channels, from which you can unsubscribe at any time. To tailor these communications and displays on our Platforms, we may use information about your interactions with our services, such as bookings, searches, preferences and browsing behavior, including data collected through cookies.

• Security: We use your personal data to keep our Platform safe and secure, to prevent fraud and to detect illegal or abusive activities. Data collected automatically (e.g. IP) serves the purpose of preventing unauthorized access and cyber attacks, to keep the Platform functional and to make the site compatible across devices.

• Legal or Statutory Purposes: We may use your personal data to comply with our legal obligations, such as record keeping, compliance monitoring, or reporting requirements (for example, under antitrust laws, trade sanctions and embargoes, anti-money laundering laws, financial and credit checks, and for the prevention and detection of fraud or crime). Your data may also be used, if necessary, to comply with court orders and to protect and exercise our legal rights.

Legal basis for data processing

We rely on certain legal bases to collect, process and use your personal data. These include:

• Processing necessary to provide you with the travel products and services you have requested
• Processing necessary to comply with legal obligations
• Processing based on our legitimate interests

In general, the provision of personal data is voluntary. However, in certain situations, it may be necessary, and its absence may limit or prevent the provision of certain services.

In certain cases, we may also use your personal data to:

• Management and resolution of legal claims or disputes
• Responding to requests or investigations from regulatory authorities
• Application of Booking Terms and Conditions
• Complying with legal requests from public authorities or law enforcement
• Compliance with our legal and regulatory obligations, in accordance with applicable European and national legislation.
• 
  

For example, this may require processing information related to your booking history, specific bookings and associated payment details.

When we process your personal data for the purposes described above, we rely on the legal bases set out in the General Data Protection Regulation (GDPR). These legal bases are summarised below:

Personal data shared with third parties

We share your personal data with certain third parties, including: Partners (accommodation units, airlines, etc.), Third Parties, connectivity providers, professional service providers (financial, legal, our website hosting platform, etc.) and other business partners, to the extent necessary, in accordance with the purposes and applicable legal bases described in this Policy.

Our service providers and business partners are required to handle your personal data in accordance with this Privacy Policy, to comply with applicable law and, when necessary, to assist us in providing products, services or support to you.

We may disclose your personal data to law enforcement agencies when required to do so by law or when strictly necessary for the prevention, detection or investigation of crime and fraud, or if we are expressly required to do so by law. We may also need to share your data with competent authorities to protect and defend our rights or property, as well as the rights and property of our business partners.

Your rights

As a data subject, you have certain rights that you can exercise, and we will respond to you in accordance with applicable legal provisions. It is important to note that certain rights may be limited in certain situations. For further details or to submit a request, please contact us.

Thus, you benefit from the following rights:

• The right to information: to be informed about how we process your data (this is demonstrated by the presentation and communication of this Policy)
• Right of access: to have access to the personal data we hold and to request information about it.
• Right to rectification: to request the correction of inaccurate or incomplete personal data.
• Right to erasure: to request the removal of personal data from our records, where applicable
• Right to object: to object to the way we process your personal data.
• The right to data portability: to receive your personal data in an automated format, where possible.
• Rights related to automated decisions and profiling: to object to automated decisions that may have significant effects on you (we do not use profiling algorithms).
• Right to file a complaint: contact the Data Protection Supervisory Authority, www.dataprotection.ro, to file a complaint.

Data retention period

We do not keep your data longer than necessary.

We have implemented technical and organizational measures to manage the process and criteria for deleting your personal data.

Your data will be deleted when it is no longer necessary in relation to the purposes for which it was collected, or upon withdrawal of consent, where applicable, except in situations where the law requires its retention.

However, certain data may be retained to protect you or others against potential legal claims, for the duration of the relevant retention period or until such claims are resolved.

Data security

We are constantly concerned about the protection of your personal data. To this end, we have implemented appropriate technical and organizational measures that help us prevent unauthorized access, loss, destruction or inappropriate disclosure of your information. We also constantly monitor and update these measures to ensure that the data is managed securely and in accordance with applicable legal requirements.

About us

The controller responsible for the processing of your data, as described in this Privacy Policy, is German Travel Solutions SRL, a Romanian company, with its registered office at Str. Fabricii de Zahar no. 165, Cluj Napoca, Cluj, Romania.

Contact date: dpo@bookingvacante.ro

update

We may update this policy from time to time. We encourage you to review it from time to time to stay informed of how we are protecting your data. In the event of changes that may have a significant impact on you, we will take appropriate steps to notify you before they become effective.



Date: 23.12.2025