TCIApartments.ro website, further referred to as “the Website” is owned by TCI Contractor General S.A., headquarter in Romania, Cluj-Napoca, 2nd Alexandru Vaida Voivod street, registered at the Cluj-Napoca Trade Registry under the number J12/70/1991, VAT number RO199141. TCI Contractor General, further referred to as “TCI”, is the data controller of the personal data submitted and processed by accessing the Website, or in the event of participating in a promotion campaign, awarding process or event organised by us.
We process the personal data provided by you, further referred to as “The User” or “You”, in accordance with the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation).
This Privacy Notice (“Information”) applies to TCI CONTRACTOR GENERAL S.A. and all its secondary officies, including TCI APARTMENTS (hereinafter referred to as “TCI” or “we”). TCI makes every effort to provide you with products, services and experiences at the highest level. We are glad you are our customer and we value your loyalty. We are aware that confidentiality is an important issue for each client. Through this Information, we explain our practices regarding the personal data we collect or through this website or through our applications / forms, through written or oral communications with us, when you visit one of our properties or from other sources.
Please remember that this information is not valid for our processing in the name of certain parties and according to their necessary instructions, such as corporate clients (employers), tour operators and travel agents.
“Personal data” – means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;
“Special categories of personal data” revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, and the processing of genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person’s sex life or sexual orientation shall be prohibited.
“Processing of personal data” (Processing) means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;
“Controller” means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law;
“Processor” means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller;
“Third party” means a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorised to process personal data;
“Consent” of the data subject means any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her;
“Pseudonymisation” means the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures to ensure that the personal data are not attributed to an identified or identifiable natural person;
ANSPDCP – means the public independent authority of supervision in Romania, respectively The National Su Supervisory Authority for the Processing of Personal Data
GDPR – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation).
PERSONAL DATA OPERATOR IDENTIFICATION AND CONTACT INFORMATION
Website www.tciapartments.ro (referred to as the “website”) is administered by:
TCI CONTRACTOR GENERAL S.A.
Registered at the Cluj-Napoca Trade Registry under the number J12/70/1991
Addresss: Cluj-Napoca, 2nd Alexandru Vaida Voivod street, Cluj
Tel.: (+40) 770.469.705, (+40) 364.883.160
WHICH DATA ARE PROCESSED
It is possible to collect personal data at every meeting or interaction with guests, as well as within the other aspects of our activity. This personal information may include:
The data processed are those that you provided, namely:
Data collected automatically:
While surfing the website, the following information can be collected, which is stored in the website’s server log file:
These data are collected to examine users’ trends and gather aggregate information, manage and ensure website safety, and cannot reveal the user’s identity.
In addition, we collect other personal information, in certain situations, such as:
PERSONAL INFORMATION WE COLLECT FROM THIRD PARTIES
It is possible to collect information about you from third parties, such as the services related to social networks that are in accordance with the settings made by you for these services and from other third-party sources that are authorized to transmit your data to us (such as real estate agents, tourism agencies or tour operators). We use and distribute this information (and we may add this information to other information we hold about you) for the purposes described in this Information.
PURPOSE OF PERSONAL DATA COLLECTION
We use your personal information for different purposes, including to provide and customize the services you request and expect from TCI, to provide the expected level of hospitality on our property and to perform direct marketing and promotional actions, as well as shown below:
HOW ARE YOUR DATA USED
The processing of your personal data is done through the stages indicated in Article 4, n. 2) of GDPR, viz.: collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction. Collection is both paper-based and electronically-based, and includes measures aimed at ensuring the security and confidentiality of your data.
PERSONAL INFORMATION WE TRANSFER
The controller can communicate your data without your consent to perform service purposes:
Other: in addition, TCI may disclose personal information for:
If your data might be transferred outside the European Union, in order to protect your data in the context of these transfers, the controller takes specific measures, among other the consent of the data subject, the decision of adequacy and the standard contractual clauses adopted by the European Commission.
When you visit or interact with the website, www.tciapartmets.ro, we collect other information that will not identify you directly regarding the use of the website, such as a catalog of the websites you visit and the number of our site visits. We use “Other information”, as well as data received from third parties, to send you emails and advertisements online (on our sites and on other sites) and on mobile.
PERSONAL INFORMATION ABOUT CHILDREN
We do not knowingly collect personal information about persons under 18 years old. As a parent or guardian, please do not allow children to transmit personal data without your permission.
THE LEGAL TERMS OF THE PROCESSING
We have several legal grounds for collecting the information we have you already informed:
PROTECTION OF PERSONAL DATA
TCI will take all reasonable measures to:
We also ask our affiliates and service providers with whom we share personal information to make reasonable efforts to maintain the confidentiality of personal information about you. For online transactions, we use reasonable technological measures to protect the personal information you transmit to us through our website. However, unfortunately, no security system or data transmission system on the Internet can guarantee the security of your data. For the protection of your private life, we recommend that you do not send us credit card numbers or any other confidential personal information by e-mail. We will not contact you via mobile / text messages or emails to request confidential information or credit card details. We will only ask for your credit card details by phone when making a reservation.
MODIFYING AND ACCESSING YOUR PERSONAL DATA
Data subject shall have the right to obtain from the controller confirmation as to whether or not personal data concerning him or her are being processed, and, where that is the case, access to the personal data and the following information:· To access your data: You have the right to access your data to know which of the personal data we process and the conditions under which are processed.· To request the rectification or deletion of your data: In certain circumstances, you have the right to rectify the personal data that you consider to be inaccurate and concerning you, which are subject to processing by the Company, as well as the right to request the deletion of data, when, among other reasons, the data is no longer needed for the purposes for which it was collected· To request the restriction of the processing of your data: In certain circumstances, you have the right to request the restriction of the processing of your data, in which case we inform you that we will keep the data in relation to which you have requested the restriction of the processing only for the exercise or defense of a legal right.· On the portability of your data: In certain circumstances, you will have the right to receive the personal data that concerns you, and which you have provided to us, in a structured format that is currently used and can be read automatically, as well as to be transmitted by the Company to another operator.· To disagree the processing of your data: In certain circumstances and for reasons related to your particular situation, you have the right to oppose the processing of your data, in which case the processing will cease, unless we have to continue to do so for compelling legitimate reasons or for the exercise or defense of a legal right.· Not to be the subject of a decision based solely on automated processing, including the creation of profiles, which produces legal effects that affect the data subject or affect him in a similar way in a significant way. We also remind you that you have the right to withdraw any consent you have provided for the processing of your data, without this affecting the legality of the processing based on the consent before it is withdrawn.
TCI has the right, under the legal provisions, to request additional information necessary to confirm the identity of the data subject, in case he has any doubts about the identity of the requesting person. TCI will provide the requested information within maximum one month from the receipt of the request. This period can be extended by a further two months if necessary, depending on the complexity of the applications and their number.
TCI informs that you can fill a complaint at the Data Protection Authority (ANSPDCP) in Romania. However, we encourage you to forward your complaint to the data protection officer in the first instance, to be resolved amicably.
The National Supervisory Authority for the Processing of Personal Data
B-dul G-ral. Gheorghe Magheru 28-30
Sector 1, cod postal 010336
Tel: +40.318.059.211 ; +40.318.059.212
STORAGE OF PERSONAL DATA
We keep your personal data for the period necessary to achieve the purposes explained in this Information, if a longer period of storage time is not required or permitted by the applicable law. We will destroy your personal information as soon as possible in a way that it can no longer be recovered or reconstituted. If personal information is printed on paper, will be destroyed in a secure manner by chipping or burning documents on paper or otherwise, and if are saved on electronic media, they will be destroyed by technical means to ensure that information can no longer be retrieved or reconstituted later.
If you have provided us your contact information (postal address, fax number, e-mail address or telephone number), we may inform you, depending on your preferences and with your agreement in the necessary cases, about our products and services or invite you to events via email, online advertising, social networks, telephone, text messages (including SMS and MMS). If you prefer not to receive advertising material by e-mail, you can unsubscribe using the unsubscribe function from the e-mail you receive from us. Unsubscribe requests may take up to ten business days to take effect. To unsubscribe from the text messages, communicate to our email firstname.lastname@example.org the fact that you no longer want to receive text messages from our hotel or reply to the message with the text “STOP”.
MODIFICATIONS OF THE INFORMATION
It is possible to make changes to this Information periodically. If we make significant changes to this Information, we will publish a link to the Revised Information on the home page of our website, and if you have registered for any of our products or services, we will inform you through a communication channel. You can find the date of the last update of the Information, by consulting the link and the date from the beginning of the Information. Any change of this Information will come into effect when the revised Information is published on the site.