PRIVACY POLICY
Privacy Policy
PRIVACY AND PERSONAL DATA PROTECTION POLICY
In order to carry out its activities, My Hotel Apartments, as a data controller, processes personal data of certain categories of individuals. This may include personal data of users of this Site, users who interact with the pages created by My Hotel Apartments on social networks, our clients, our partners/potential contractual partners or their employees, representatives or collaborators whose data is provided to us for processing, My Hotel Apartments employees or candidates who wish to occupy positions within My Hotel Apartments.
According to Regulation no. 679 of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (“GDPR”), personal data is any information relating to an identified or identifiable natural person (“data subject”). An identifiable natural person is a person who can be identified, directly or indirectly, in particular by reference to an identification element.
1. PURPOSES, GROUNDS AND CATEGORIES OF PERSONAL DATA
The data processed by My Hotel Apartments may be used for purposes such as:
1.1 Administration and maintenance of this Site, which also involves the use of cookies, so as to ensure quick and easy interactions between users and the Site (legal basis: art. 6 par. (1) let. a) and f) of the GDPR, respectively your consent and the legitimate interest of My Hotel Apartments, as the case may be).
For more details on the use of cookies by My Hotel Apartments, please consult the Cookies Policy.
1.2 Registration and execution of your reservation request and provision of tourist and public catering services (legal basis: art. 6 para. (1) lit. b), c) of the GDPR, respectively the execution of a contract or taking the necessary steps at the request of the data subject before concluding the contract or fulfilling legal obligations of My Hotel Apartments as the case may be). When you choose to book through the Site, My Hotel Apartments processes the following categories of data: name, surname, gender, e-mail address, telephone number, country of residence, date of arrival, date of departure, information regarding the bank account, data about minor companions (age range), surname, surname and age of the adult companion (optional);
In the context of managing your reservation, My Hotel Apartments may also process the following categories of data: data regarding your companion(s), to determine the occupancy of the reserved room, details regarding your correspondence, requests, notifications, complaints, any other data or information related to your interaction with us.
To complete the Arrival and Departure Announcement Form (in accordance with Decision 237/2001 for the approval of the Norms regarding the access, registration and protection of tourists in tourist reception structures), My Hotel Apartments will process the following categories of data: name and surname, date of birth, place of birth, citizenship, domicile (town, street, number, country), date of arrival, date of departure, purpose of travel, series and number of the identity document, signature, optionally e-mail address.
1.3 Renting out premises, organising private or corporate events (legal basis: art. 6 para. (1) lit. b) of the GDPR, respectively the performance of a contract or taking the necessary steps at the request of the data subject before concluding the contract);
1.4 Carrying out personnel recruitment operations, for purposes such as: assessing your application, skills, qualifications and interests in relation to the available position for which you have applied and for which you have been contacted, organising and conducting interviews and selecting and recruiting you, facilitating access to occupational health services and carrying out general checks (legal basis: art. 6 para. (1) lit. b) and lit. f) of the GDPR, respectively carrying out pre-contractual steps, concluding and performing the employment contract with you or fulfilling our legitimate interests, as the case may be).
In the context of your application, we need to process the data included in the application you send us. This data will usually include your name, surname, contact details (telephone number, email address), professional experience, education and any other information you choose to include in your CV or other documents we may request from you. We will also process personal data during your interview, such as:
your professional preferences, details of your experience and studies that are not included in the submitted CV, your expectations regarding remuneration.
As part of the employment process, we may request additional documents (such as transcripts, diplomas, certificates, authorizations, professional qualifications, etc.), which will also contain personal data.
For the purpose of evaluating your application, in addition to the information already submitted, we may also access your publicly available social media profiles (such as LinkedIn). Since aspects related to your private life do not concern us, we will not consult and will not take into account those profiles or information on profiles that are clearly intended to remain private and do not have a professional component.
1.5 Conducting employment relationships, for the execution of employment contracts, the fulfillment of legal obligations and/or the fulfillment of a legitimate interest (legal basis: art. 6 para. (1) let. b), c) and f) of the GDPR, as the case may be). In certain particular situations, My Hotel Apartments processes the data of employees based on their consent (legal basis: art. 6 para. (1) let. a) of the GDPR). The way in which My Hotel Apartments processes the personal data of its employees is detailed in the information note provided to them.
1.6 Organizing and carrying out advertising campaigns carried out by My Hotel Apartments and marketing and promotional activities (such as sending newsletters, promotional materials, commercial offers, marketing communications), requesting your opinion on the services we have offered you (through customer satisfaction surveys), as well as conducting market, product and analysis studies of our services (legal basis: art. 6 para. (1) let. a), let. f) of the GDPR, respectively your consent and the achievement of the legitimate interests of My Hotel Apartments, as the case may be, including under Law no. 506/2004 on the processing of personal data and the protection of privacy in the electronic communications sector)
By carrying out direct marketing activities, we can keep you informed about our services and campaigns, in accordance with the legal provisions in force. You have the possibility to unsubscribe from the newsletter service at any time and free of charge by checking the "Unsubscribe" option within the newsletter.
1.7 Ensuring the security of goods, people and spaces through video surveillance (legal basis: art. 6 par. (1) letters c) and f) of the GDPR, respectively the fulfillment of a legal obligation and the legitimate interest of Continental Hotels S.A.). For this purpose, My Hotel Apartments processes your personal data, namely your image captured by video surveillance means, your name and surname and the vehicle registration number, as applicable.
1.8 Communication with our collaborators and contractual partners (legal basis: art. 6 par. (1) letters b) and f) of the GDPR, respectively the conclusion and execution of the contract or the legitimate interest of My Hotel Apartments, as applicable). For this purpose, My Hotel Apartments processes your name, surname, position and/or capacity held and the organization you represent, your holographic or electronic signature, the data from your identity document.
If any contractual partner of My Hotel Apartments discloses the personal data of the contact persons designated by it, of the legal or conventional representatives, of the collaborators, of the employees and/or of other natural persons to My Hotel Apartments for or in connection with the conclusion and/or execution of a contract, considering that My Hotel Apartments does not benefit from the practical way of directly ensuring the information of these categories of persons, the contractual partner of My Hotel Apartments is obliged to inform these persons about the processing of personal data by My Hotel Apartments. The contractual partner of My Hotel Apartments will take measures to ensure that this disclosure is made in accordance with any applicable requirements, including those regarding the information and obtaining of the consent of the data subjects, if applicable, so that My Hotel Apartments can process the personal data for the purposes provided for in the contract, without having to fulfill any further formalities.
1.9 Resolving your requests, questions or complaints (legal basis: art. 6 para. (1) let. b) and f) of the GDPR, respectively the execution of a contract or taking the necessary steps at the request of the data subject before concluding the contract and the legitimate interest of My Hotel Apartments, as the case may be). For this purpose, My Hotel Apartments processes the name, surname, contact details and opinions provided by you.
2. HOW DO WE OBTAIN THE DATA?
My Hotel Apartm
your professional preferences, details of your experience and studies that are not included in the submitted CV, your expectations regarding remuneration.
As part of the employment process, we may request additional documents (such as transcripts, diplomas, certificates, authorizations, professional qualifications, etc.), which will also contain personal data.
For the purpose of evaluating your application, in addition to the information already submitted, we may also access your publicly available social media profiles (such as LinkedIn). Since aspects related to your private life do not concern us, we will not consult and will not take into account those profiles or information on profiles that are clearly intended to remain private and do not have a professional component.
1.5 Conducting employment relationships, for the execution of employment contracts, the fulfillment of legal obligations and/or the fulfillment of a legitimate interest (legal basis: art. 6 para. (1) let. b), c) and f) of the GDPR, as the case may be). In certain particular situations, My Hotel Apartments processes the data of employees based on their consent (legal basis: art. 6 para. (1) let. a) of the GDPR). The way in which My Hotel Apartments processes the personal data of its employees is detailed in the information note provided to them.
1.6 Organizing and carrying out advertising campaigns carried out by My Hotel Apartments and marketing and promotional activities (such as sending newsletters, promotional materials, commercial offers, marketing communications), requesting your opinion on the services we have offered you (through customer satisfaction surveys), as well as conducting market, product and analysis studies of our services (legal basis: art. 6 para. (1) let. a), let. f) of the GDPR, respectively your consent and the achievement of the legitimate interests of My Hotel Apartments, as the case may be, including under Law no. 506/2004 on the processing of personal data and the protection of privacy in the electronic communications sector)
By carrying out direct marketing activities, we can keep you informed about our services and campaigns, in accordance with the legal provisions in force. You have the possibility to unsubscribe from the newsletter service at any time and free of charge by checking the "Unsubscribe" option within the newsletter.
1.7 Ensuring the security of goods, people and spaces through video surveillance (legal basis: art. 6 par. (1) letters c) and f) of the GDPR, respectively the fulfillment of a legal obligation and the legitimate interest of Continental Hotels S.A.). For this purpose, My Hotel Apartments processes your personal data, namely your image captured by video surveillance means, your name and surname and the vehicle registration number, as applicable.
1.8 Communication with our collaborators and contractual partners (legal basis: art. 6 par. (1) letters b) and f) of the GDPR, respectively the conclusion and execution of the contract or the legitimate interest of My Hotel Apartments, as applicable). For this purpose, My Hotel Apartments processes your name, surname, position and/or capacity held and the organization you represent, your holographic or electronic signature, the data from your identity document.
If any contractual partner of My Hotel Apartments discloses the personal data of the contact persons designated by it, of the legal or conventional representatives, of the collaborators, of the employees and/or of other natural persons to My Hotel Apartments for or in connection with the conclusion and/or execution of a contract, considering that My Hotel Apartments does not benefit from the practical way of directly ensuring the information of these categories of persons, the contractual partner of My Hotel Apartments is obliged to inform these persons about the processing of personal data by My Hotel Apartments. The contractual partner of My Hotel Apartments will take measures to ensure that this disclosure is made in accordance with any applicable requirements, including those regarding the information and obtaining of the consent of the data subjects, if applicable, so that My Hotel Apartments can process the personal data for the purposes provided for in the contract, without having to fulfill any further formalities.
1.9 Resolving your requests, questions or complaints (legal basis: art. 6 para. (1) let. b) and f) of the GDPR, respectively the execution of a contract or taking the necessary steps at the request of the data subject before concluding the contract and the legitimate interest of My Hotel Apartments, as the case may be). For this purpose, My Hotel Apartments processes the name, surname, contact details and opinions provided by you.
2. HOW DO WE OBTAIN THE DATA?
My Hotel Apartments may obtain your data:
directly from you, for example, when you use My Hotel Apartments services, when you contact us through various channels or request offers or information about My Hotel Apartments services, when you visit our website or social media pages or when you apply for positions available within My Hotel Apartments;
from other sources, for example, from travel agencies, booking sites (e.g. Booking.com), from public authorities (for example, in the event of court requests or in the event of judicial investigations).
3. RECIPIENTS OF YOUR PERSONAL DATA. DATA TRANSFER
Personal data may be disclosed by My Hotel Apartments to the following categories of recipients:
you, when you exercise your rights under the GDPR;
My Hotel Apartments' contractual partners (such as courier companies, suppliers, collaborators, subcontractors, consultants and technical experts, etc.), for the conclusion and execution of contracts;
public authorities and institutions, based on the legal obligations we have in accordance with applicable legislation;
My Hotel Apartments' external auditors, for the fulfillment of audit obligations;
lawyers, tax/business consultants, to represent us in the event of a potential dispute or for consultancy;
bailiffs, for contractual communications or for the enforcement of contracts or potential court decisions;
debt collection companies;
in the event that My Hotel Apartments is subject to a sale or reorganization process, we will provide your data to the acquiring entity and/or its consultants or to the entity resulting from the reorganization process.
In order to achieve some of the above-mentioned purposes, it is possible that certain categories of personal data may be transferred outside Romania. The data may be transferred to states within the European Economic Area ("EEA"), as well as outside the EEA.
For transfers outside the EEA, the Company will base its transfer in accordance with the requirements of the GDPR and on the basis of the standard data protection clauses adopted by the European Commission, in order to ensure the necessary level of security and confidentiality or on other guarantees recognized by law.
4. DURATION OF PROCESSING PERSONAL DATA
My Hotel Apartments processes your personal data for the entire duration necessary to fulfill the processing purposes for which they were collected, as well as subsequently, if necessary, to comply with the legal requirements applicable to our field of activity.
In the case of CVs that you send us, they will be kept for a period of 2 years after the end of the recruitment process, only if you have expressed your consent in this regard.
It is possible that, following the fulfillment of the legal archiving deadlines, My Hotel Apartments may order the anonymization of the data, thus depriving them of their personal character.
5. YOUR RIGHTS
In the context of the processing of personal data, you benefit from the following rights: the right to information, the right to access data, the right to rectify data, the right to delete data, the right to restrict data, the right to data portability, the right to object, the right not to be subject to an individual decision, the right to address the National Supervisory Authority for the Processing of Personal Data (according to the information available on www.dataprotection.ro) or the competent courts.
To exercise these rights, you can send a request to My Hotel Apartments for the attention of the Data Protection Officer, at the e-mail address myhotelapartments@gmail.com or by post/courier to the My Hotel Apartments address mentioned above.
This Policy is updated periodically; each time we make a change, we will display it on our website https://myhotelapartments.ro/.
Last updated: March 2025
My Hotel Apartments