1. Who we are
The controller of your personal data is A&K LUXURY DEVELOPMENT S.R.L., a Romanian company registered with the Trade Register under no. J40/12795/2018, unique registration code (CUI) 39841898, EUID ROONRC.J40/12795/2018, with its registered office at Str. Gheorghe Țițeica nr. 178, Subsol, Biroul nr. 2, Sector 2, Bucharest, Romania (“A&K”, “we”, “us”).
We rent furnished apartments in Bucharest for short stays, by the night or by the week. For anything related to your personal data, write to developmentluxury57@gmail.com or call +40 746 774 348.
2. What this policy covers
This policy explains how we process personal data when you visit this website, send us an enquiry (by the contact form, email, phone or WhatsApp), book and stay in one of our apartments, or otherwise deal with us. It is written to meet the requirements of Regulation (EU) 2016/679 (the General Data Protection Regulation, “GDPR”) and Romanian Law no. 190/2018 implementing the GDPR.
3. The data we process
Enquiries and contact
- Your name, email address and phone number.
- The dates, number of guests and type of stay you ask about, and anything you write in your message.
- The content of our correspondence by email, phone or WhatsApp.
Bookings and stays
- Booking details: apartment, dates, number of guests, rate, deposit and any special arrangements.
- Guest identity details where Romanian law requires accommodation providers to keep records of guests, such as name, date and place of birth, citizenship, and the type, series and number of the identity document.
- Payment-related information: amounts, dates, method of payment, invoice and receipt details, and bank details needed for a transfer or a deposit refund. We do not collect card numbers through this website.
- For business stays: the company name, registration details and billing address used for invoices.
- Information about the condition of the apartment at check-out, where relevant to the deposit or to damage.
Website
This website does not use analytics or advertising tools and does not create user accounts. Our host’s servers may record standard technical data (such as IP address, date and time, and the page requested) for security and to deliver the site. Your browser also contacts Google to load our fonts; see the Cookies Policy.
The contact form does not send or store anything on our website. It opens your own email app or WhatsApp with a prepared message; the data reaches us only if you choose to send that message.
4. Purposes and legal bases
| Purpose | Legal basis (GDPR) |
|---|---|
| Answering your enquiry, checking availability and sending you a rate | Steps taken at your request before entering into a contract, Art. 6(1)(b) |
| Confirming and managing your booking and stay, check-in and check-out, deposits | Performance of a contract, Art. 6(1)(b) |
| Keeping guest records required for accommodation | Legal obligation, Art. 6(1)(c) |
| Issuing invoices, keeping accounting and tax records | Legal obligation, Art. 6(1)(c) |
| Handling damage, complaints and legal claims | Our legitimate interest in protecting our property and rights, Art. 6(1)(f) |
| Keeping the website secure and working | Our legitimate interest, Art. 6(1)(f) |
| Any purpose for which we ask for your consent | Consent, Art. 6(1)(a), which you can withdraw at any time |
Where the law requires us to collect certain details, such as identity details for guest records or billing details for invoices, we cannot complete the booking without them.
We do not use your data for automated decision-making or profiling, and we do not sell it.
5. Where the data comes from
Mostly from you. If a company or another person books on your behalf (for example an employer or a travel companion), we receive your details from them for the purposes above.
6. How long we keep it
- Enquiries that do not lead to a booking: up to 12 months after our last exchange, then deleted.
- Booking correspondence and records: for the duration of the contract and afterwards for the limitation period in which legal claims may arise under Romanian law, generally three years.
- Guest records: for the period required by the Romanian rules on accommodation records.
- Invoices and accounting documents: for the period required by Romanian accounting law, currently ten years.
When a period ends we delete the data or make it anonymous, unless we need it longer to establish, exercise or defend a legal claim.
7. Who receives it
Only the people and providers who need the data for the purposes above:
- Communication providers we use to talk to you: Google (Gmail, for email) and WhatsApp (if you write to us there).
- Our accountant and our bank, for invoices, payments and deposit refunds.
- Public authorities, when the law requires it (for example tax authorities, or the police where guest records must be made available).
- Professional advisers, such as lawyers, if needed for a claim.
- Your company, for business stays it pays for.
Providers acting on our behalf process the data under contract and only on our instructions.
8. Transfers outside the European Economic Area
Some providers, including Google (email and the fonts on this website) and WhatsApp, may process data in the United States or other countries outside the EEA. Such transfers rely on an adequacy decision of the European Commission (such as the EU–US Data Privacy Framework, for certified companies) or on the European Commission’s Standard Contractual Clauses, as provided in Chapter V of the GDPR. You can ask us for more information about these safeguards.
9. Your rights
Under the GDPR you have the right to:
- access your personal data and receive a copy;
- have inaccurate data corrected and incomplete data completed;
- have your data erased, where there is no longer a reason or legal obligation to keep it;
- restrict processing in certain cases, for example while accuracy is checked;
- data portability for data you gave us and that we process by automated means on the basis of contract or consent;
- object to processing based on our legitimate interest;
- withdraw consent at any time, without affecting processing that took place before.
10. How to use your rights
Email developmentluxury57@gmail.com and tell us which right you want to use. We may ask for information to confirm your identity. We answer within one month, which may be extended by two further months for complex requests, as allowed by Article 12 of the GDPR. Using your rights is free unless a request is clearly unfounded or excessive.
11. Complaints to ANSPDCP
If you believe we have not handled your data lawfully, you have the right to lodge a complaint with the Romanian supervisory authority, the National Supervisory Authority for Personal Data Processing (ANSPDCP), at www.dataprotection.ro, or with the authority in the EU country where you live or work. We would appreciate the chance to resolve your concern first, so please contact us.
12. Security
We limit access to personal data to the people who need it, keep guest and accounting records securely, and use reputable providers for email and messaging. No method of transmission is completely secure, so please do not send identity documents by email unless we ask for them for your booking.
13. Changes to this policy
We may update this policy when our practices or the law change. The date at the top shows the latest version. Significant changes affecting an existing booking will be communicated to you directly.