Transylvania

Legal

Privacy Policy

Last updated: July 2026

This policy explains what personal data we collect when you use this website, why, and the rights you have under the EU General Data Protection Regulation (GDPR). We keep it deliberately short and plain.

Who we are

Transylvania Private Tours (“we”, “us”) runs this website and provides private day tours in Transylvania, Romania. For any privacy question, or to exercise your rights, contact us at mariusdobrescu79@gmail.com or on WhatsApp at +40 741 575 888.

The operator's full legal identity and registered address will be added here.

What we collect

  • Inquiry details — when you use the inquiry form or message us on WhatsApp, we receive what you choose to send: typically your name, email, preferred date, number of guests and message. The form opens WhatsApp with a pre-filled message, so your inquiry reaches us through WhatsApp; we do not store it on this website.
  • Usage data — only if you accept cookies, analytics and advertising tools collect information such as the pages you view, approximate location, device/browser and how you reached us.

Why we use it, and our legal basis

  • To answer your inquiry and plan or quote your tour — to take steps at your request before a possible contract (Art. 6(1)(b) GDPR) and our legitimate interest in replying to you (Art. 6(1)(f)).
  • To measure and improve our website and advertising — on the basis of your consent (Art. 6(1)(a)), which you can withdraw at any time.

Cookies and analytics

We only use cookies as described in our Cookie Policy. Non-essential cookies (Google Ads and, if enabled, Google Analytics) load only after you accept them in the consent banner. Vercel Web Analytics is cookieless.

Who we share it with

We rely on trusted providers who act as our processors or as independent controllers: Google (Google Ads and, if enabled, Google Analytics), Meta Platforms Ireland (WhatsApp, when you message us) and Vercel (website hosting and cookieless analytics). Some may process data outside the EU/EEA, including the United States, under appropriate safeguards such as Standard Contractual Clauses or an adequacy decision. We never sell your data.

How long we keep it

We keep inquiry correspondence only as long as needed to handle your request and for a reasonable period afterwards. Analytics data is retained according to the providers' settings. You can ask us to delete your data at any time.

Your rights

Under the GDPR you can access, correct, delete, restrict or object to the processing of your data, ask for portability, and withdraw consent at any time. To exercise any of these, contact us at mariusdobrescu79@gmail.com. You also have the right to complain to the Romanian supervisory authority, ANSPDCP (www.dataprotection.ro).

Changes

We may update this policy from time to time; the date above shows the latest version.