Privacy Policy
How we handle your personal data when you browse this site, make a booking, or leave a review. Written to meet art. 13 of the GDPR.
Last updated:
1. Who controls your data
The controller of your personal data is the company below. For any question about this policy or your data, write to hello@qult.co.
- Company
- QULT.CO S.R.L.
- Trade Register
- J2021002301409
- Fiscal code (CUI)
- RO43707510
- Registered office
- Calea Victoriei nr. 32-34, Sc. C, Et. 2, Ap. 105, Sector 1, București, România
- Represented by
- Sergiu Zimbilschi, Administrator
- hello@qult.co
- Phone
- +40 745 277 177
We have not appointed a Data Protection Officer, as we are not required to under art. 37 of the GDPR.
2. What we collect
- Booking details — your name, email address, phone number, the property, the dates and the number of guests.
- Payment data — handled by our payment provider. We receive confirmation that a payment succeeded and a reference for it. We never see or store your card number.
- Correspondence — messages you send us and our replies.
- Review content — the rating and text you submit, and the first name and initial we publish alongside it.
- Technical data — if you accept analytics cookies, standard measurement data about your visit. See the Cookie Policy.
At or before check-in we also record identity-document details, because accommodation providers are required by Romanian law to register their guests.
3. Why we use it, and on what legal basis
| Purpose | Legal basis (GDPR art. 6) |
|---|---|
| Taking and fulfilling your booking, and contacting you about your stay | Performance of a contract — art. 6(1)(b) |
| Issuing invoices and keeping accounting records | Legal obligation — art. 6(1)(c) |
| Registering guests as required of accommodation providers | Legal obligation — art. 6(1)(c) |
| Inviting you to review your stay after check-out | Legitimate interest in improving our properties — art. 6(1)(f) |
| Preventing fraud and abuse of the booking system | Legitimate interest in protecting the service — art. 6(1)(f) |
| Measuring how the site is used | Your consent, given through the cookie banner — art. 6(1)(a) |
4. Who else sees it
We use a small number of service providers, each processing data only on our instructions. We do not sell personal data, and we do not share it for anyone else's marketing.
| Provider | What they do | What they receive |
|---|---|---|
| Guesty | Property-management system that holds the reservation | Booking and guest contact details |
| Stripe | Card payments | Payment and billing data, directly from you |
| Resend | Sending our emails | Your email address and the message content |
| Maps on property pages, and analytics if you consent | Technical data about your visit |
We also disclose data to our accountants, and to public authorities where the law requires it.
5. Transfers outside the EU
Our email and analytics providers may process data outside the European Economic Area. Where they do, transfers rely on the European Commission's Standard Contractual Clauses or on an adequacy decision, as provided by chapter V of the GDPR.
6. How long we keep it
| Data | Retention |
|---|---|
| Booking and invoicing records | 10 years, as required by art. 25 of Legea 82/1991 on accounting |
| Guest registration records | For the period required of accommodation providers |
| Correspondence | 3 years from our last exchange |
| Published reviews | For as long as the property is listed, unless you ask us to remove yours |
| Analytics data | 14 months |
7. Your rights
Under the GDPR you may ask us to:
- give you a copy of the data we hold about you (art. 15);
- correct it if it is wrong (art. 16);
- delete it, where we have no continuing reason to keep it (art. 17);
- restrict how we use it while a question about it is resolved (art. 18);
- provide it in a portable format, or send it to another provider (art. 20);
- stop processing based on legitimate interest, on grounds relating to your situation (art. 21).
Where processing rests on your consent — analytics, and marketing email if you ever opt in — you can withdraw that consent at any time. Withdrawing it does not affect processing carried out beforehand.
Write to hello@qult.co to exercise any of these. We reply within one month.
8. Complaints
If you believe we have handled your data improperly, please tell us first so we can put it right. You also have the right to complain to the Romanian supervisory authority, ANSPDCP (www.dataprotection.ro), or to the authority in your country of residence.
9. Is providing data required?
The booking details we ask for are needed to enter into and perform the contract — without them we cannot confirm a stay. Identity details at check-in are a legal requirement. Analytics data is entirely optional and depends on your cookie choice.
10. Automated decisions
We do not make decisions about you by automated means alone, and we do not profile you.
11. Changes
If we change this policy we update the date at the top of the page. Material changes affecting existing bookings will be notified by email.