Sienna Chalet
← Back to the site
RO EN

Sienna Chalet

Privacy policy

Last updated: 1 October 2026

This page explains which personal data we process when you visit siennachalet.ro, send us a stay request, contact us or stay at Sienna Chalet, and what your rights are. We use as little data as possible and never use it for marketing.

1. Who is responsible for your data

Sienna Chalet is run by Daniel Dobos, a private individual, who is the controller of your data. The property is in Peștera, Moieciu commune, postcode 507136, Brașov County, Romania.

For any question about your data, email us at siennachalet@gmail.com or call +40 740 020 668.

2. What data we process and why

Stay requests sent through the website

Your name, email address, phone number (if you add it), stay dates, number of adults, message and confirmation that you have read the data information. We use them to reply and, if you wish, to arrange the booking. Legal basis: steps taken at your request before entering into a contract (Article 6(1)(b) GDPR).

Messages by email, phone or WhatsApp

The data you choose to send us, so that we can reply. The legal basis is the same.

Your booking and stay

The data needed for the booking and, on arrival, the guest registration details required by law. Legal basis: performance of the contract and compliance with legal obligations (Article 6(1)(b) and (c) GDPR).

Visiting the website

Technical data such as your IP address, browser type and the pages you visit, which appear in the server logs and in the visitor statistics. Legal basis: our legitimate interest in keeping the website secure and understanding, in aggregate, how many visitors we have (Article 6(1)(f) GDPR).

We do not ask for sensitive data, make automated decisions about you or build profiles.

3. Security cameras

For the safety of guests and the property, Sienna Chalet has security cameras outdoors only: at the entrance, in the parking area, in the back garden, on the terrace and around the perimeter of the property. There are no cameras inside the house.

The legal basis is our legitimate interest in protecting people and property (Article 6(1)(f) GDPR). Recordings are deleted automatically after 30 days at most. If an incident occurs, the relevant recordings may be kept for as long as needed to clarify it and may be made available to the competent authorities.

4. Who else receives the data

We do not sell your data or share it with anyone for marketing. For the website and for communication we use a few providers, who process data only on our behalf:

  • Web3Forms: emails us the requests sent through the form;
  • Google (Gmail): hosts our mailbox;
  • Hostinger: hosts the website and the server logs;
  • Cloudflare: cookie-free visitor statistics (Cloudflare Web Analytics).

If you message us on WhatsApp, your messages are also processed by WhatsApp (Meta) under its own policy. Bookings made through Airbnb or Booking.com are processed by those platforms as independent controllers, under their own policies. We share data with authorities only when the law requires it.

5. Transfers outside the European Union

Some of the providers above may process data outside the European Economic Area, for example in the United States. In those cases the transfer relies on the safeguards provided by the GDPR, such as European Commission adequacy decisions or standard contractual clauses.

6. How long we keep data

  • Requests and messages that do not become a booking: as long as needed to reply and to answer any related questions.
  • Booking and stay data: for the period required by tax and guest registration laws.
  • Camera recordings: 30 days at most, except in the situations described above.
  • Server logs: for the period set by the hosting provider, for security.

7. Cookies and local storage

The website does not use cookies. The only thing saved in your browser is your language choice (Romanian or English), stored locally so you don’t have to choose it on every visit. You can delete it at any time in your browser settings. Visitor statistics are provided by Cloudflare Web Analytics, which uses no cookies and does not identify you personally.

8. Your rights

Under the GDPR, you have the right to:

  • know what data we hold about you and receive a copy;
  • ask us to correct inaccurate data or delete it;
  • ask us to restrict processing or to port your data;
  • object to processing based on our legitimate interest, including video surveillance;
  • withdraw your consent at any time, without affecting earlier processing.

You can write to us at any time at siennachalet@gmail.com. We reply within one month. You also have the right to lodge a complaint with the Romanian data protection authority (ANSPDCP), www.dataprotection.ro.

9. Security

The website uses an encrypted connection (HTTPS), and access to requests and messages is limited to us. There are no user accounts and we do not store payment details.

10. Minors

Sienna Chalet welcomes adult guests only, and the website is not aimed at minors.

11. Changes

We may update this policy when the way we handle data changes. The date of the last update is shown at the top of the page.