Informativa sulla privacy

1. Introduction

Romania Best Tours & Trips S.R.L. (“Best Tours & Trips”, “we”, “us”, or “our”) respects your privacy and is committed to protecting your personal data in accordance with Regulation (EU) 2016/679 (“GDPR”) and applicable Romanian legislation.

This Privacy Policy explains how we collect, use, store, disclose, and protect your personal data when you access or use our website www.besttt.ro and the services provided through it.

Data Controller

Romania Best Tours & Trips S.R.L.

Registration Number: J40/10256/2024

Fiscal Identification Code (CIF): 50121912

Website: www.besttt.ro

General Contact: contact@besttt.ro

Booking Department: booking@besttt.ro

2. Personal Data We Collect

Depending on your interaction with us, we may collect the following categories of personal data:

Identification Information

• Full name;

• Nationality;

• Country of residence;

• Billing address.

Contact Information

• Email address;

• Telephone number;

• Accommodation address during your stay.

Booking Information

• Reservation details;

• Travel dates;

• Number of participants;

• Selected services;

• Booking history.

Payment Information

Online payments are securely processed by Stripe, Inc. and its affiliated entities.

Best Tours & Trips does not collect or store complete payment card information. Payment card details are transmitted directly to Stripe through secure encrypted connections and processed according to applicable security standards, including PCI-DSS requirements.

Technical Information

• IP address;

• Browser type;

• Device information;

• Operating system;

• Cookie identifiers;

• Website usage information.

3. How We Receive Information About You

We receive information:

• when you make a booking through our website;

• when you contact us by email, telephone, or contact forms;

• when you complete a payment through Stripe;

• when you use our website and services;

• from analytics providers and trusted third-party service providers.

4. Legal Basis for Processing

We process personal data based on one or more of the following legal grounds:

Performance of a Contract

For:

• processing reservations;

• providing booked services;

• issuing confirmations and vouchers;

• customer support.

Compliance with Legal Obligations

For:

• invoicing;

• accounting records;

• tax obligations;

• compliance with Romanian and European legislation.

Legitimate Interests

For:

• fraud prevention;

• website security;

• service improvements;

• complaint handling;

• maintaining business records.

Consent

For:

• newsletters;

• marketing communications;

• analytics cookies;

• advertising cookies.

Users may withdraw their consent at any time.

5. How We Use Personal Data

We may use personal information to:

• process bookings;

• communicate regarding reservations;

• provide customer support;

• send operational updates;

• issue invoices;

• comply with legal obligations;

• improve our services;

• prevent fraud;

• perform internal analytics;

• send marketing communications, where permitted by law.

6. Sharing Information with Third Parties

We do not sell or rent personal data.

We may share personal information with trusted third-party providers necessary for operating our business, including:

Payment Providers

• Stripe.

Technology Providers

• Google Workspace;

• Google Drive;

• Google Sheets;

• hosting providers.

Communication Providers

• Brevo.

Analytics and Advertising Providers

• Google Analytics;

• Google Ads;

• Meta Platforms Ireland Ltd. (Facebook and Instagram services).

Tourism Partners

• GetYourGuide;

• Viator;

• Headout;

• local suppliers;

• guides;

• transport providers.

Authorities

We may disclose information when required by law or by competent authorities.

7. International Transfers

Certain service providers, including Stripe, Google and Meta, may process personal data outside the European Economic Area.

Whenever such transfers occur, appropriate safeguards, including Standard Contractual Clauses approved by the European Commission, are implemented to ensure an adequate level of protection.

8. Data Retention

We retain personal data only for as long as necessary for the purposes described above and in accordance with applicable laws.

Typical retention periods are:

• accounting and tax documents: according to Romanian legislation;

• booking records: up to 5 years;

• customer correspondence: up to 3 years;

• marketing communications: until consent is withdrawn;

• cookies: according to the applicable Cookie Policy.

9. Cookies

Our website uses cookies and similar technologies.

These may include:

Essential Cookies

Necessary for the proper functioning of the website.

Cookie analitici

Used to understand website performance and visitor behavior.

Examples include:

• Google Analytics.

Marketing Cookies

Used to deliver personalized advertisements and measure advertising effectiveness.

Examples include:

• Google Ads;

• Meta Pixel.

Users may manage cookie preferences through browser settings or through the cookie consent banner available on the website.

10. Your Rights Under GDPR

Users have the right to:

• access their personal data;

• rectify inaccurate data;

• request deletion of personal data;

• restrict processing;

• object to processing;

• data portability;

• withdraw consent at any time;

• lodge a complaint with a supervisory authority.

Requests may be sent to:

contact@besttt.ro

11. Complaints

Users have the right to lodge a complaint with:

National Supervisory Authority for Personal Data Processing (ANSPDCP)

Website:

https://www.dataprotection.ro

12. Security

We implement appropriate technical and organizational measures intended to safeguard personal information against:

• unauthorized access;

• accidental loss;

• misuse;

• disclosure;

• alteration.

However, no method of transmission over the Internet can be guaranteed to be completely secure.

13. Minors

Our services are not directed to persons under 18 years of age.

We do not knowingly collect personal information from minors without the consent of a parent or legal guardian.

Parents or guardians who believe that a child has provided personal data should contact us at:

contact@besttt.ro

14. Marketing Communications

With your consent, we may send:

• newsletters;

• promotional campaigns;

• special offers;

• service announcements.

Users may unsubscribe at any time by using the unsubscribe link included in our communications.

Withdrawal of consent does not affect the lawfulness of processing carried out before such withdrawal.

15. Automated Decision-Making

We do not use automated decision-making or profiling producing legal or similarly significant effects on users.

16. Third-Party Websites

Our website may contain links to third-party websites.

We are not responsible for the privacy practices or content of those websites.

Users are encouraged to review the privacy policies of third-party websites before using them.

17. Changes to this Privacy Policy

We reserve the right to modify this Privacy Policy at any time.

Any changes become effective upon publication on www.besttt.ro.

Continued use of the website constitutes acceptance of the revised Privacy Policy.

18. Contact Us

For any questions regarding this Privacy Policy or the processing of personal data, please contact:

Romania Best Tours & Trips S.R.L.

Website:
www.besttt.ro

General Contact:
contact@besttt.ro

Booking Department:
booking@besttt.ro