Privacy policy clarifications
Last updated: 13 August 2026. This section supplements the information already published on this page and should be read together with it.
Controller and contact
S.C. Orient Comex S.R.L. is the controller of personal data collected through this website and in connection with enquiries and accommodation bookings. Privacy requests may be sent to contact@complexpoienita.ro.
Data, sources and purposes
Depending on how you interact with us, we may process identification and contact details, booking and payment information, stay preferences, correspondence, technical website data and information required by law. Data is generally received directly from you, from the person making the booking or from a booking/payment provider you use.
Legal grounds
- steps requested before entering into a contract and performance of the accommodation contract;
- compliance with accounting, tax, public-health and other legal obligations;
- our legitimate interests in securing the website, answering requests and defending legal rights;
- consent, where the law requires it, which may be withdrawn at any time.
Recipients, transfers and retention
Data may be shared only as necessary with authorised staff, IT, hosting, booking, payment, accounting or professional-service providers and public authorities. If a supplier processes data outside the European Economic Area, appropriate legal safeguards will be used. Data is retained only for the period required by the stated purpose, applicable law and the establishment, exercise or defence of legal claims.
Your rights
Subject to the conditions in the GDPR, you may request access, rectification, erasure, restriction, portability or object to processing. You may withdraw consent and lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP).
Security and changes
We apply reasonable technical and organisational safeguards. No online system can guarantee absolute security. Material changes to this policy will be published on this page with an updated date.
Website, contact form and Google services
Updated on 21 August 2026. This section describes the technologies planned for the new website and supplements, without replacing, the information above.
Contact form
When you write to us, we process the name, email address, optional telephone number, selected subject, message, date/time and security information needed to prevent abuse. We use these data to answer the request, take pre-contractual steps requested by you, protect the website and, where relevant, manage a booking. Mandatory fields are identified in the form. Messages are not used for advertising without a separate legal basis.
Google Analytics
Google Analytics is loaded only after the visitor enables the analytics category in the cookie settings and only when a valid Measurement ID has been configured. It may process online identifiers and information about pages, device/browser and interactions to produce usage statistics. Advertising storage, advertising personalisation and Google signals are disabled by the theme configuration. Consent can be withdrawn at any time through “Cookie settings” in the footer.
Google Search Console
Search Console is used to monitor indexing, technical errors and aggregated search performance. The HTML verification meta tag does not itself set cookies. Google may nevertheless provide aggregated data collected in connection with its own search service under its own notices.
Maps, booking and external providers
Google Maps frames load only after consent or an explicit request. Online booking functions are supplied by the configured booking provider and may process data under its own privacy information when the visitor uses that service. Links to Google Maps, Waze, social networks and other third-party sites open services controlled by those providers.
Recipients, transfers, retention and rights
Data may be accessed, only as necessary, by authorised staff and hosting, email, security, analytics, booking, payment, accounting or professional-service providers. International transfers, where applicable, are based on the safeguards required by law. Contact messages are retained only for as long as needed to answer and document the request and to meet legal or claim-related obligations. You may exercise the GDPR rights described above by writing to contact@complexpoienita.ro and may complain to ANSPDCP.