Who are we?
Rolandia Travel SRL, established in Iasi, no. 4B Petre Andrei Street, Iasi County, registered at the Romanian National Trade Register Office under the number J22/1958/2012, VAT no. 30914247, processes personal data according to Regulation (EU) 2016/679 of the European Parliament and of Council of 27 April 2016 (General data protection regulation) and other legal provisions applicable to the processing of personal data.
Rolandia Travel SRL acts as a controller, being registered at ANSPDCP Romania (the National Supervisory Authority for Personal Data Processing from Romania) under the number 28595. In order to data to be processed safely, all diligences are being taken for implementing reasonable measures in order to protect your personal data.
We can be contacted at the following:
Address: No. 4B Petre Andrei Street, 700494, Iasi County, Romania
Phone: +40 752240 885 / +40 317 800 236
Data or categories of personal information processed by Rolandia Travel SRL
When you visit our website, fill in the contact form, send a request for a service offer through email or contact us for another purpose, including when using another mean of communication, you give us your personal data that we collect such as, but not limited to:
We may collect data using cookies and similar technological mechanisms, such as:
Our policy is to process only the personal data that is needed for the agreed purposes and we ask our clients to provide the personal data only where it is strictly necessary to carry out the specific activity of the travel agency.
The purposes of the processing of personal data
Rolandia Travel SRL processes personal data, received directly from you or from other sources, for the following purposes:
The legal bases and the lawfulness of processing
The legal bases of processing take into account the provisions of the Regulation (EU) 2016/679 and the legislation regarding data processing adopted in Romania, as well as other normative acts applicable at national and European level. The processing is based on at least one of the following:
Managing your social logins
Our website offers you the possibility to login using your third party social media account details (such as Facebook or Google+/gmail logins). Where you choose to do this, we will receive certain profile information about you from your social media provider. The profile information we receive may vary depending on the social media provider concerned, but will often include your name, e-mail address, friends list, profile picture as well as other information you choose to make public.
Please note that it is possible to login on the website using Facebook and Google+/gmail accounts only for the customers that have already acquired our services.
How long do we keep your personal data?
Rolandia Travel SRL will process your personal data for the period of time provided by law or for as long as it is necessary for the purpose for which it was collected.
We store your personal data only for the period of time necessary for the purposes of processing, no longer than 5 years from the moment of the cessation of the contract or the last contact between the data subject and the controller. After the end of the processing period, the personal data will be deleted from our system or anonymized in order to be processed for scientific, historical research or statistical purposes.
We ask you to take into account that, in certain expressly enacted situations, we store the data for the period of time provided by the law.
In any situation, except those provided by the applicable legislation, we erase your personal data when you solicit the data erasure. The applicable exceptions will be communicated to the solicitor in our answer regarding the request to delete the information.
Collecting data from minors
Rolandia Travel SRL does not knowingly solicit data from children under 18 years of age. By using our website, you represent that you are at least 18 years old or that you are the parent or the guardian of such minor and consent to the minor’s use of our website. If we learn that personal data from users less than 18 years of age has been collected, we will deactivate the account and take reasonable measures to promptly delete such data from our records. If you become aware of any data we have collected from children under 18, please contact us at the provided contact information.
Recipients or categories of recipients of personal data
We can disclose your personal data, complying with the applicable law, to business partners or other third parties. We are continuously making reasonable efforts to ensure that these third parties have implemented appropriate safeguards and security measures. We have contractual conventions with these third parties so your data is protected. Where the law provides, we will inform you with regard to the identity of these entities before transmitting the data to them or within a reasonable period of time and we will ensure that any transfer is based on your consent or other legal basis.
Rolandia Travel SRL may transmit, give access and/or disclose personal data mainly to the following categories of recipients:
We will ensure that, within reasonable limits, your data will not be transferred outside the European Economic Area, yet, as long as we will transfer data to countries outside the EEA, we will ensure that in all cases that transfers be based on your explicit consent or any other legal basis.
Your rights and how to exercise them
Our company is responsible for facilitating the exercise of any of your personal rights listed below.
In order to protect your personal data or to prevent the abuse of malicious third parties who would be seeking access to your data, Rolandia Travel SRL may require prior identification steps to ensure that you are the person exercising the rights, through a solicitation, before taking action on the basis of the request.
If the data subject makes an electronic request for exercising their rights, the information will also be provided by us in an electronic form, where possible, unless the data subject requests a different format.
If, as a result of the application of legal provisions, our company cannot, in whole or in part, respond to a request of the data subject, then the applicable exceptions will be communicated to the solicitor through the response submitted by us with regard to the issue.
Right of access
You have the right of access, respectively the right to obtain from the controller confirmation as to whether or not your personal data are being processed. When requested, the controller shall provide a copy for the personal data undergoing processing.
Right to rectification
You have the right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning you. Taking into account the purposes of the processing, you have the right to have the incomplete personal data completed, including by means of providing a supplementary statement.
Right to erasure
With the exceptions provided by the Regulation, you have the right to obtain from the controller the erasure of your personal data without undue delay where one of the following grounds applies:
Right to restriction of processing
You have the right to obtain the restriction of processing in the situations expressly provided by the Regulation (for example, if you dispute the accuracy of the data, the restriction of processing will be granted for the period necessary to verify the contested data).
Right to data portability
You have the right to receive the personal data concerning you that you provided to the controller, in a structured, commonly used and machine-readable and have the right to transit those data to another controller without hindrance from the controller, in the situations expressly provided by the Regulation.
In exercising the right to data portability, the data can be directly transmitted to another controller expressly named by you where technical feasible.
Right to object
You have the right to object at any time to processing your personal data. In this case, the company will no longer process your personal data unless the controller demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.
Where personal data are processed for direct marketing purposes, you have the right to oppose at any time to processing of personal data concerning you, which includes profiling to the extent that it is related to such direct marketing.
Right to withdraw the consent
Where the processing is based on your consent, you have the right to withdraw your consent at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before withdrawal. The withdrawal of consent is not applicable where the legal basis of processing is not your consent.
Right to lodge a complaint
You also have the right to lodge a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP from Romania).
Consequences of the refusal to provide personal data
If personal data are collected directly from you, we inform you that in generally you are not required to provide your personal information to the controller, except when providing data represents a legal or contractual obligation or this stage is necessary for the conclusion of a contract. Thus, insofar as you enter into a legal relationship with the controller or otherwise benefit from our services, providing personal data is necessary for honouring the obligations we are assuming as controller with regard to you or for providing our services.
Do you have any questions or queries to exercise your rights?
If you have questions or concerns about processing your personal data or wish to exercise the aforementioned rights, you can write to us at firstname.lastname@example.org and we will respond as soon as possible.