Privacy Policy
Last updated: July 29, 2026
1. Who we are
The data controller is Tutuianu Lucian, owner of Casa cu Stuf Murighiol guesthouse, located at Str. Egretei, Nr. 25, Murighiol, Tulcea County, Romania. You can reach us at rezervari@casacustufmurighiol.com or +40 740-085-585.
2. What data we collect
Through the booking form on our website we collect: full name, phone number, email address, an optional message, as well as stay details (dates, number of guests). We do not collect card details — the deposit is paid by direct bank transfer, with the balance paid on arrival.
3. Purpose of processing
Your data is used exclusively to process and confirm your booking, communicate with you about your stay, and fulfill any legal tourism record-keeping obligations. We do not use your data for marketing purposes and we do not sell or rent it to third parties.
4. Legal basis
Processing is based on the performance of a contract or pre-contractual steps taken at your request (Article 6(1)(b) GDPR), and on the consent you give when submitting the form.
5. Who we share data with
Your data is processed by the technical providers that make the website function: Hostinger (website and email hosting), Make.com (automated sending of the confirmation email), and CallMeBot (instant WhatsApp notification to the owner for new bookings). None of these providers use your data for their own marketing purposes.
6. Retention period
We keep booking data for as long as needed to prepare for and carry out your stay, plus a reasonable period afterward for any legal record-keeping obligations. You may request deletion at any time, unless retention is required by law.
7. Your rights
Under GDPR, you have the right to access, rectify, delete, restrict, or object to the processing of your data, and to data portability, as well as the right to withdraw consent at any time. You also have the right to file a complaint with the Romanian Data Protection Authority (ANSPDCP). To exercise these rights, write to us at rezervari@casacustufmurighiol.com.
8. Security
The website uses an encrypted connection (HTTPS), and access to booking data is restricted through a password-protected admin panel accessible only to the owner.
9. Cookies
The website uses browser local storage (localStorage) to remember your cookie choice, made in the banner shown on your first visit — strictly necessary for the site to function, requiring no consent. We also use Google Analytics, which sets cookies to measure site traffic and usage, but only if you have given explicit consent via the cookie banner shown on your first visit. You can withdraw consent at any time from your browser settings by deleting the site's cookies.