Last updated: 1.11.2025
This website (www.nivalisresortandspa.com) is operated by NIVALIS RESORT S.R.L. (hereinafter: "Nivalis Resort & SPA"), with registered office at Cluj County, Cluj-Napoca City, SANATORIULUI Street, No 23, registration number J2025084037005, Tax ID 52825701.
By accessing this website or making a booking with Nivalis Resort & SPA, you confirm that you have read, understood and accepted this Privacy Policy in its entirety.
We collect the following categories of personal data: name, contact details (email, phone), booking information (dates, room type), payment details (via our secure provider), device and technical information (IP, browser) and marketing preferences.
We use your personal data to:
We process your personal data based on:
The data is kept for as long as necessary to fulfill the above purposes: for example, data from the accommodation form (customer identification data) for 5 years, accounting documents (invoices, receipts, etc.) are kept for 10 years, and data provided for marketing purposes until consent is withdrawn.
Customers' personal data may only be disclosed to the extent necessary to fulfill the purposes for which it was collected and in accordance with applicable law.
The Operator may disclose data to:
Data will not be transferred to countries outside the European Economic Area (EEA) unless an adequate level of protection is ensured in accordance with European Union standards or if there are appropriate safeguards (such as standard contractual clauses approved by the European Commission).
Right to be informed – the data subject has the right to be informed, in a clear and transparent manner, about how their personal data is collected and used.
Right of access – the data subject has the right to obtain confirmation that their data is being processed and to receive a copy of it, as well as information about the purposes of processing, the recipients, and the storage period.
Right to rectification – the data subject may request the correction or completion of inaccurate or incomplete personal data.
Right to erasure ("right to be forgotten") – data may be erased at the request of the data subject if it is no longer necessary for the purposes for which it was collected or if the processing is based on withdrawn consent.
Right to restrict processing – in certain situations, the data subject may request the limitation of data processing (for example, during the verification of data accuracy or in case of an objection).
Right to data portability – the data subject may request the transfer of their personal data in a structured, commonly used, and machine-readable format, either to themselves or to another controller.
Right to object – the data subject may object at any time to the processing of their data for direct marketing purposes or based on the controller's legitimate interest.
Right not to be subject to automated decision-making – the data subject has the right not to be subject to a decision based solely on automated processing that produces legal effects or significantly affects them.
Right to lodge a complaint – the data subject has the right to contact the National Supervisory Authority for Personal Data Processing (ANSPDCP) if they believe their rights have been violated.
To exercise your rights, please contact us at dataprotection@nivalisresortandspa.com.
The organization implements and maintains appropriate technical and organizational measures, in accordance with Article 32 of Regulation (EU) 2016/679 (GDPR), to ensure an adequate level of security and confidentiality of personal data.
These measures are designed to protect the data against unauthorized access, use, alteration, disclosure, or destruction, and include, but are not limited to:
The security measures are reviewed and updated periodically, taking into account technological developments, the nature of the processed data, and the risks identified in processing activities.
Our website uses cookies and similar technologies to enhance functionality and user experience. For details, please see our Cookie Policy.
We may modify this Privacy Policy from time to time. The version published on the website is the effective version. Please check regularly for updates.
Last updated: 1.11.2025
If you have any questions about this Privacy Policy or how we handle your personal data, please contact us:
Email: dataprotection@nivalisresortandspa.com
Phone: +40 754 885 599
Address: Stațiunea Buscat Muntele Bǎișorii 328 M, Cluj 407068, Romania
