Privacy Policy

This policy explains how STARMIN CLUB SRL, under the trade name Cetina Rânca, collects, uses, stores and protects the personal data of site visitors, customers and persons requesting information or services.

1. Personal data controller

Operator: STARMIN CLUB SRL

CUI: 22683206

Brand name: Cetina Rânca

Registered office: 21 Victoriei Street, block 21, staircase 1, apartment 2, Târgu Jiu, Gorj County

Work location: 200 Gheorghe Tătărescu Street, Novaci, Gorj County

Phone number: +40 728 113 902

E-mail address: cetina.ranca@gmail.com

Legal representative: Adina Seliste

The company has not appointed a person responsible for a separate data protection officer (DPO). Questions and requests related to personal data, may be sent to the email address cetina.ranca@gmail.com.

2. Scope of application

The policy applies to data processing carried out in connection with the website https://cetina-ranca.ro, with information requests, offers, reservations, contracting and provision of Cetina Rânca services, as well as with interactions by telephone, email, online forms, messaging applications, social networks or external booking platforms.

It is addressed to the visitors of the website, for clients and potential clients, to the people who have booked for your group, companions, and representatives of legal entities, the participants of the event, and anyone else who comes in contact with the company in the context of its business activities.

3. Principles of processing

STARMIN CLUB SRL aims to process personal data legally, fairly and transparently, only for specified and legitimate purposes. The requested data is limited to what is necessary, is kept for justified periods and is protected by technical and organizational measures proportionate to the risks.

4. Categories of data that may be processed

4.1. The data of the identification and contact details

first and last name;
phone number, and email address;
street address, city and country, then when it is needed.
the data of the representative of a company or organisation;
identifying information is requested in the manner required by the law applicable to the accommodation, if applicable.

4.2. The data relating to the reserve, and the services you have requested

the period of the requested date of arrival and departure.
the number of people and type of the services or of the premises sought;
the preferences, requirements, logistics and comments provided on a voluntary basis;
the history of applications, offers, reservations, amendments, and cancellations;
correspondence relating to the services to be provided.

4.3. Financial information and billing

the data for the issuing of invoices and the financial and accounting documents;
the value for services, payments, payments, refunds, and hips;
name, company name, and the customer is a legal person;
the information provided by the institution for the payment of the confirmation of a transaction.

When the payment is processed by an external provider, the full card details are processed directly by the respective provider, according to their own terms. STARMIN CLUB SRL does not seek to collect or retain full bank card details.

4.4. Data communications

the content of the message, and the forms are sent;
e-mail and messaging software;
complaints, claims, assessments, and responses thereto;
the information communicated on a voluntary basis, in the context of the discussions with the representatives of the company.

4.5. The technical data and the usage of the website

the IP address, type of device, operating system, and browser.
the date and time of your access, the pages you have visited and the errors in technical;
the source of the visit, online identifiers, and information security.
the data collected through cookies and to other similar technologies, according to the Policy relating to cookies.

4.6. Special categories of personal data

We are not asking for it in the usual way, sensitive data. Please do not send the data relating to health, disabilities, allergies, or other special categories than when they are strictly necessary for the safety or adjustment to a job. In these cases, the processing will be limited to what is necessary, and it will be an appropriate legal basis.

5. The sources of the data

The data is mainly obtained directly from the data subject. Depending on the situation, they may also originate in the person of the reservation in the name of the group, from your employer or organization that hires the services of a platform with room to a partner involved in the provision of the service or the public's legitimate.

The person who transmits the data to the other participants, you have to make sure that you have the right to do so, and that the persons concerned have been informed in an appropriate manner.

6. Purposes and grounds of processing

Responding to requests and preparing offers:

Purpose: management of the questions, check the availability of the transmission of the tenders, and the conduct of the appeals of pre -
Topic: steps at the request of the individual prior to the conclusion of the contract, legitimate interest to manage the communications

Reservations and service provision:

Part of your registration, confirmation, amendment, and enforcement of the reservations; arranging for the services required
Topic: the conclusion and execution of the contract

- Payments & invoicing:

Part of the collection of advances, payments, refunds, issuing of documents, accounting and tax
Topic: implementation of the contract and the fulfilment of our legal obligations

Legal obligations:

Part of the records required by tax law, accounting, tourism, consumer protection or other relevant legislation
Basis: legal obligation

Safety and the prevention of their abuse:

Purpose: the protection of the site, your accounts, your devices, and infrastructure, the identification of the occurrence of fraud or unauthorized use
Basis: legitimate interest in the security and protection of the work

Complaints and defense of rights:

Part of the settlement of claims, recovery of claims, the establishment, exercise or defense of the rights
Basis: legal obligation and/or the legitimate interest of

Commercial advertisements:

Purpose: sending news, promotions and offers, where applicable
Basis: consent, or any other basis prohibited by law; right to object at any time to

The analysis and improvement:

Purpose: an understanding of the use of the website, and to improve the services, to the extent that they are used the tools of analysis
Basis: consent, to the technologies of the non-essential; a legitimate interest to aggregate information, which do not require your consent

7. The mandatory nature of the provision of data

Some of the data is necessary in order to respond to the request, in order to prepare you an offer, make a reservation to deliver our services, you issue the documents to the tax, or to comply with our legal obligations. In the absence of necessary data, we may not be able to conclude or execute the contractual relationship. The data are indicated as optional, it can be provided to the volunteer.

8. Business communication

Promotional offers and marketing messages will be sent only under the conditions allowed by the regulations. When the processing is based on consent, it can be withdrawn at any time. A person can opt-out mechanism is included in the message, or by sending a request to the cetina.ranca@gmail.com. The withdrawal does not affect the lawfulness of the processing carried out earlier.

9. The recipients of the data

To the extent necessary, the data may be communicated to the following categories of recipients:

providers of web hosting, maintenance, security, and IT services;
providers of e-mail communications, messaging apps and cloud services;
platform, the priority of payments, and financial institutions;
the providers and staff involved in the organisation of the service;
services, accounting, audit, consulting, legal, or tax;
the providers of the analysis, or marketing, only according to the preferences of the terms and conditions applicable law;
government authorities, courts, regulatory agencies, or research, is when such disclosure is required or permitted by law.

Service providers that act on behalf of the society, are getting only the data needed, and they are subject to contractual obligations relating to the privacy, security, and the use of the data solely for the purpose set forth. No personal data is sold and there are not rented.

10. Transfers outside the European Economic Area

Certain digital service providers may process data in countries outside the European Economic Area. When such a transfer occurs, mechanisms provided for by law, such as adequacy decisions, standard contractual clauses or other recognized guarantees, are followed. Further information regarding a specific transfer can be requested by email.

11. Storage

Your data is stored only as long as necessary for the purpose for which it was collected, taking into account the duration of the contractual relationship, the legal limit for filing their tax obligations and accounting for, the periods of limitation, and the need for resolution of any complaints or disputes.

applications that do not have a reservation, they are kept for a reasonable period of time necessary for communication, and for the defence of any rights.
the data related to the booking and the contract shall be kept for the duration of the operation and thereafter as required by law and the statute of limitations;
accounting and taxation are kept for the time periods set out in the relevant legislation.
the data for marketing purposes are used to the withdrawal of the consent or to exercise the right to object, the preservation of evidence is strictly necessary with regard to the choice made;
the data and the logs of the security shall be retained for a limited period of time proportionate to the aim.

After the expiry of the relevant period, the data shall be deleted, made anonymous, or stored in accordance with the law.

12. Data security

The Company uses reasonable technical and organizational measures to protect data against unauthorized access, loss, destruction, modification or disclosure. These may include access control, passwords, backups, system updates, device protection, confidentiality obligations and incident management procedures.

No method of transmission or electronic storage, do not provide absolute security. In the event of an incident, the company will assess the risk of, and will comply with the obligations of the troubleshooting, documentation, and notification is required by law.

13. Rights of data subjects

Right of access: to obtain confirmation that your data is being processed and for information regarding the processing is carried out.

The right to rectification: the correction of inaccurate data and completion of incomplete data.

The right to erasure: the deletion of the data in the cases provided for by law, no right is absolute, when the retention is required by a legal obligation or necessary for the defense of the law.

Right to restriction: a temporary ban on the use of the data in the cases set out by the GDPR.

Right to portability: receive some data in a structured format, and to transmit them to another controller when the legal requirements are met.

Right to object: the opposition to processing based on legitimate interests, and, at any time, to the direct marketing.

The withdrawal of consent shall: the retreat at any time, without affecting the lawfulness of the processing of the previous one.

Rights regarding automated decisions: right not to be subject to a decision based solely on automated processing which produces legal effects or a similar material, in accordance with the law.

Right to complaint: the submission of a complaint to the National Supervisory Authority for personal Data Processing with your Personal information and the complaint to the relevant authorities.

14. The exercise of the rights

Requests can be sent to cetina.ranca@gmail.com or by mail to the registered office of STARMIN CLUB SRL. The request must describe the right exercised and allow the identification of the applicant and the processing concerned.

To prevent unauthorized disclosure, the company may request reasonable additional information to verify identity. The response will be sent within the legal deadline. Requests are, in principle, free of charge; for manifestly unfounded or excessive requests, the measures permitted by the GDPR may be applied.

15. Minors' data

The site does not pursue the unjustified collection of children's data. Reservations and contracts are made by persons with legal capacity. When the services include minors, their data is processed only to the extent necessary to organize the services, comply with legal obligations and protect the interests of the minor. The parent or legal representative may exercise the applicable rights under the law.

16. My social networks and services

The website may also include links to maps, media, booking platform, payment services, applications, or components of the social networking sites. The providers of such services can process data as independent operators, in accordance with their policies. Individuals are encouraged to consult with notices of the providers prior to using the services of foreign affairs.

17. Video surveillance

If the point of use systems of video surveillance, the monitoring will be flagged and you will be provided specific information on the controller, the purpose, the reason for the receptors, and the duration of the storage of the images. This policy does not replace the information to a separate amount of video surveillance.

18. Cookies

The information relating to the use of cookies and similar technologies used by the site, the categories of them, your consent and preferences are given in the separate document "cookie Policy", which is available on our website.

19. Policy changes

The policy can be updated when you change the law, the service, the functionality of the site, the service providers or treatment. The current version and the date of the last update will be posted on the web site. Relevant changes will be communicated to you, by appropriate means when necessary.

20. Contact supervisor

If you have questions or requests relating to your personal data:

E-mail address: cetina.ranca@gmail.com

Phone number: +40 728 113 902

Email address: Victoriei Street no. 21, block 21, staircase 1, apartment 2, Târgu Jiu, Gorj County

Complaints can be addressed to the National Supervisory Authority for Personal Data Processing, according to the procedure published by the authority.

Main legal framework

Regulation (EU) 2016/679 (GDPR); Law No. 190/2018 on measures implementing the GDPR; Law No. 506/2004 on the processing of personal data and the protection of privacy in the electronic communications sector; other regulatory acts applicable to the activity and services provided.

Last updated: July 14, 2026