Book

Privacy policy

Here you can find out what data you give us when you use the Cuibul Bucovinei website, what we do with it and what rights you have. In short: we ask only for what we need to reply to a booking request.

Last updated: 2 November 2026

This is an English translation of our privacy policy, for your convenience. The Romanian version (Politica de confidențialitate) is the reference: if the two ever differ, the Romanian version applies.

1. Who we are

The website cuibulbucovinei.com belongs to Cuibul Bucovinei, a place with 4 wooden cabins in Poiana Stampei, Suceava County.

The controller of your data is Sergiu Vasilenco, a private individual, who runs Cuibul Bucovinei (Prăleni, Poiana Stampei commune, Suceava County, Romania). You can reach us by phone or on WhatsApp on +40 744 238 333, or by post at the same address. We do not have an email address.

We process the data in accordance with Regulation (EU) 2016/679 (GDPR), Law No. 190/2018 and Law No. 506/2004.

2. What data we collect and where from

  • From the booking form: the cabin you choose, check-in and check-out, the number of guests, your full name and your phone number.
  • From WhatsApp and from calls: your phone number, plus your WhatsApp name and profile photo, if they are visible.
  • From Google Analytics, only if you accept: the pages you visit, your device, your approximate city or country, where you came from and which buttons you press. Your name and phone number do not reach Google Analytics.
  • From the hosting server (Cloudflare): your IP address, your browser, the pages requested, the date and the time. Cloudflare records them in the server logs, to deliver and protect the website. We do not keep these logs.

The form sends nothing to our server. When you tap “Send on WhatsApp”, your WhatsApp opens with the message already written, and you decide whether to send it.

4. How long we keep it

  • Requests that don’t become a booking: at most 30 days from the last message. Then we delete the conversation.
  • If you book: for as long as the booking and the stay last. After that, your name and phone number may stay in our phone’s contacts. We keep accounting documents for as long as the law requires, usually 10 years (Law No. 82/1991).
  • Google Analytics data: 14 months, then it is deleted automatically.
  • Server logs: we do not keep them. Cloudflare keeps them for as long as its own terms provide.
  • Your cookie choice: 6 months.

5. Who we share it with

We do not sell or rent out your data. It goes only to:

  • WhatsApp (Meta): the message goes from your account to ours. WhatsApp Ireland Limited is an independent controller.
  • Google: Google Analytics (only with your consent) and Google Maps (only if you open the map).
  • Airbnb: the cabin links lead to Airbnb, which processes the booking under its own policy. We do not send it the data from the form.
  • Cloudflare: hosts the website and delivers it through its network of servers (CDN), as our processor. The data may also be processed outside the EEA, under the terms of Cloudflare’s data processing agreement (standard contractual clauses).
  • Authorities: only when the law requires us to.

6. Transfers outside the EEA

Some data may go outside the European Economic Area (EEA), for example to the US:

  • Cloudflare: delivers the website through servers in many countries, so your IP address, your browser and the pages requested may also be processed outside the EEA.
  • Google Analytics, only if you accept: Google may process the analytics data in the US.

For these transfers, Cloudflare and Google use the safeguards the GDPR requires: the adequacy decision for the EU-US Data Privacy Framework (Decision (EU) 2023/1795) and/or the standard contractual clauses approved by the European Commission. In the same way, Meta (WhatsApp), Airbnb and Google (for Google Maps) may transfer data to the US or to other countries, within their group of companies, with the same safeguards.

7. Your rights

  • Access: to find out what data we hold about you and to receive a copy.
  • Rectification: to have us correct incorrect data.
  • Erasure: to have us delete the data when we no longer have a reason to keep it.
  • Restriction and portability: to have us stop using it for a while, or to receive it in an easy-⁠to-⁠use format.
  • Objection and withdrawal of consent: at any time, with effect for the future.
  • Complaint to the National Supervisory Authority for Personal Data Processing (ANSPDCP); see section 8.

We reply free of charge, within one month at most. We may ask you to confirm who you are.

8. How to contact us and where to complain

For any request about your data, message us on WhatsApp, call us on +40 744 238 333 or send a letter to Prăleni, Poiana Stampei commune, Suceava County, Romania.

  • ANSPDCP: B-dul G-ral. Gheorghe Magheru nr. 28-30, sector 1, 010336 București
  • Website: www.dataprotection.ro · email: anspdcp@dataprotection.ro · phone: +40 318 059 211

9. Minors

The website is not aimed at children. A booking request must be sent by an adult. If you find out that a child has sent us data, tell us and we will delete it.

10. Changes to this policy

We may update this policy if the website or the law changes. The date at the top shows the latest version. We announce important changes on the website.

Questions about your data?

We reply on WhatsApp or by phone. Usually within 24 hours.

Message us on WhatsApp Call: +40 744 238 333