Privacy

Effective date: 2025

This Privacy Policy applies to the website www.casamonteverde.ro, owned and operated by STREET SHOES SRL, with registered address in Brașov, Str. Crișana no. 12B, apt. 1, Romania, telephone +40 721 932 324, e-mail contact@casamonteverde.ro.

Through this policy, we explain how we collect, use, store, and protect personal data provided by users, guests, partners, or other persons who interact with us, in accordance with Regulation (EU) 2016/679 on the protection of personal data (“GDPR”) and applicable legislation.

Data controller

The controller of personal data is STREET SHOES SRL.

What personal data we may collect

Depending on the nature of our relationship with you and the services requested, we may collect the following categories of personal data:

• identification data, such as your first and last name;
• contact details, such as your phone number, e-mail address and, where applicable, postal address;
• data necessary for booking and accommodation, such as stay period, arrival and departure dates, number of guests, preferences, or special requests;
• data necessary for billing and making payments;
• transaction-related data processed through the payment processor, to the extent necessary for payment confirmation, authorisation, or record keeping;
• data required to comply with legal obligations related to accommodation records and fiscal documents;
• data provided in communications with us, including via forms, e-mail, telephone, or other contact methods;
• data regarding the use of the website, collected through technologies such as cookies, under the conditions described in the Cookie Policy;
• images captured by video surveillance systems, if such systems are used on the premises, exclusively in common areas and in accordance with the law.

In the case of online payments, transactions are processed through a specialised payment service provider. We do not intentionally store full bank card data on our servers, except where strictly necessary and permitted by law or by the technical infrastructure used.

Purposes of processing

We may process your personal data for the following purposes:

• to manage booking requests and the contractual relationship regarding accommodation or related services;
• to communicate with you before, during, or after your stay;
• to process and confirm payments made online or by other accepted means;
• to issue invoices, fiscal documents, and comply with accounting and administrative obligations;
• to comply with legal obligations regarding accommodation records and reporting to competent authorities;
• to protect the safety of persons, property, and premises, where video surveillance systems are used;
• to respond to requests, questions, notices, or complaints sent to us;
• to defend our rights and legitimate interests, for example in the event of disputes, fraud prevention, or protection of our activity;
• to send commercial or marketing communications, only where we have your consent or where permitted by law.

Legal grounds for processing

We process personal data on one or more of the following legal grounds:

• performance of a contract or taking steps at your request before entering into a contract;
• compliance with a legal obligation applicable to us;
• our legitimate interest, where it does not override your rights and freedoms;
• your consent, where the law requires this basis, for example for certain marketing communications.

Where we collect data from

Data may be collected:

• directly from you, when you complete a form, make a booking, make a payment, contact us by e-mail or telephone, or otherwise provide us with information;
• through partners or booking platforms used by you;
• from persons authorised to make a booking or request on your behalf;
• through the use of the website, by means of cookies and similar technologies, according to the relevant policy;
• from video surveillance systems, if such systems are lawfully used on the premises.

Who we may disclose data to

Personal data may be disclosed, where appropriate and only to the extent necessary, to the following categories of recipients:

• authorised employees or collaborators of STREET SHOES SRL;
• service providers contracted to support our operations, such as IT services, accounting, payment processing, booking services, or administrative support;
• the payment processor and, where applicable, banking or financial institutions involved in the authorisation and settlement of payments;
• contractual partners involved in delivering the services requested by you;
• public authorities or competent institutions, where we are legally required to do so;
• consultants, lawyers, auditors, or other professionals, to the extent necessary to protect our rights or legitimate interests.

We do not sell your personal data.

Data transfers

In certain situations, your data may be processed by service providers or partners located in other Member States of the European Union or, where applicable, outside the European Union, for example in connection with booking platforms, IT services, payment services, or other tools used in the course of our activity.

Where a transfer outside the European Economic Area takes place, we will take reasonable measures to ensure that the data benefits from an adequate level of protection in accordance with applicable law.

Data security

We implement reasonable technical and organisational measures to protect personal data against unauthorised access, loss, destruction, disclosure, or improper use. Access to data is limited to those who need it for the performance of their duties.

For online payments, the data necessary for payment processing is transmitted through secure connections to the payment processor used. The processing of such data is also subject to the policies and security measures applied by that provider.

Data retention

We retain personal data only for as long as necessary for the purposes for which it was collected, for the performance of contractual obligations, for compliance with legal obligations, or for the defence of our rights and interests.

The actual retention period may vary depending on the category of data and the applicable legal obligations. For example, certain accounting and fiscal documents must be retained for the period required by law, while video surveillance recordings, where applicable, are retained for a limited period proportionate to the purpose pursued.

Marketing communications

To the extent that we carry out direct marketing activities, these will take place only in accordance with applicable law. Where processing is based on consent, you may withdraw that consent at any time, without affecting the lawfulness of processing carried out before the withdrawal.

Your rights

Under the conditions provided by the GDPR, you benefit from the following rights:

• the right to be informed;
• the right of access to data;
• the right to rectification;
• the right to erasure;
• the right to restriction of processing;
• the right to data portability;
• the right to object;
• the right not to be subject to a decision based solely on automated processing, including profiling;
• the right to withdraw consent, where processing is based on consent;
• the right to lodge a complaint with the National Supervisory Authority for Personal Data Processing.

To exercise these rights, you may send us a written request at STREET SHOES SRL, Brașov, Str. Crișana no. 12B, apt. 1, Romania, or by e-mail at contact@casamonteverde.ro.

Supervisory authority

If you consider that your rights have been violated, you have the right to contact the National Supervisory Authority for Personal Data Processing.

Contact details:

• B-dul. G-ral. Gheorghe Magheru no. 28-30, district 1, Bucharest, postal code 010336
• Phone: +40 31 805 92 11
• E-mail: anspdcp@dataprotection.ro

Changes to this policy

We reserve the right to update this Privacy Policy from time to time in order to reflect legal, technical, or operational changes. The updated version will be published on this page.

We recommend checking this page periodically in order to stay informed about the latest version.