Privacy policy

Data controller

The Vacanță România / Holiday in Romania platform is operated by ANSO SOFT TECH S.R.L., tax ID RO55368302, trade register no. J2026048166009, registered office: Calea Mihai Viteazu, Bl. 30, Et. 4, Ap. 18, Nehoiu, jud. Buzău, Romania. Contact: contact@holidayinromania.com, phone +40 754 420 237.

What we collect

Information you voluntarily submit through forms (e.g. business listing requests): name, email, phone, description, photos, location.
For the business account (created when listing a business): your sign-in email and password, plus the billing details you provide (legal name, tax ID, address) — used exclusively for issuing invoices. Payments are processed by Stripe; we never see or store card details.
Your email address, if you subscribe to the newsletter.
Your approximate location — only if you use the "Near Me" feature and allow location access. It is used solely in your browser to show nearby places and is not stored by us.
Minimal technical data needed for the site to work securely (for example your IP address, used by Cloudflare for abuse protection). We don't use traffic analytics tools.

Why we collect it

To process listing requests and publish moderated content.
To improve the platform experience.
To respond to messages and requests.

Where data is stored and who we share it with

We rely on providers that process data on our behalf (sub-processors):

Supabase — database and file storage (images), hosted within the European Union.
Cloudflare — site hosting and form anti-spam protection (Turnstile).
Brevo — sending the newsletter, if you subscribed.
Resend — sending transactional emails (submission confirmations, account and payment notifications).
Stripe — online payment processing for business accounts; we never see or store card details.
Oblio — issuing tax invoices for business account payments (billing details: legal name, tax ID, address, email) and submitting them to the Romanian tax authority's RO e-Factura system, as required by law.
Anthropic — automatic English translation of published listing texts (descriptions), without contact or billing details.

AI assistant integrations (ChatGPT and others)

Vacanța România offers AI assistants a query service (MCP) that returns only public information about tourist attractions. When you use Vacanța România from an AI assistant, it sends us only the search parameters (text, county, category and, if you choose, geographic coordinates). We create no account and store no queries, coordinates or identity; your IP address is used only for rate limiting and is not retained. Data processing inside the AI assistant is governed by that provider's policy (for example OpenAI or Anthropic).

Cookies

We use only essential storage (language, your cookie choice, the business account session). We don't currently use analytics or marketing cookies; if we add them, they will run only with your consent. See Cookie Policy.

Your GDPR rights

Right of access to your data.
Right to rectification.
Right to erasure ("right to be forgotten").
Right to data portability.
Right to withdraw consent.

Exercising your rights

Send a request via the contact page. We respond within 30 days.

Data retention

We keep data as long as a listing is active or as required by law. Rejected listing requests are deleted automatically 90 days after rejection, including uploaded photos; if a rejected request had a (refunded) payment, we delete the contact details and photos, while payment and invoicing records are kept as required by tax law. When a business account is closed, the account and personal data are permanently deleted after a 30-day grace period; inactive accounts (no active listing, unused for 6 months) are deleted automatically after two email notifications. Invoicing records are kept as required by tax law.