Privacy Policy

Welcome to the Craiova City Break website (craiova-travel.go.ro). Your privacy and personal data protection are a priority for us. This policy explains what data we collect, how we use it, how long we keep it, and what your rights are according to the General Data Protection Regulation (GDPR — EU Regulation 2016/679).

By using this site, you confirm that you have read and understood this policy. If you do not agree, please do not use the site.

Personal Data Controller

Craiova City Break is a personal tourist website, operated by a physical person. We are not affiliated with the Craiova City Hall or other public institutions.

What Data We Collect

We collect only the data necessary for the operation of the site and communication with users. We never request sensitive data (SSN, bank details, medical data).

A. Data provided voluntarily by the user:

• Contact form — Name, email address, and message content. This data is used exclusively to respond to your request.
• Direct email — If you contact us directly via email, we collect the email address and information in the message.
• Social media — If you contact us via Facebook or Instagram, data is managed according to Meta Platforms, Inc. policies.

B. Data collected automatically:

• Browsing data — IP address (anonymized), browser type, pages visited, session duration. Collected through Google Analytics 4 (if enabled).
• Technical cookies — Cookies strictly necessary for the site's operation (GDPR consent, language preferences).
• Performance data — Information about technical errors and page performance, used exclusively for site improvement.

Purpose of Data Processing

We process your data exclusively for the following purposes:

• Responding to requests — Data provided via the contact form or email is used exclusively to respond to received messages.
• Improving the guide — Anonymous traffic data helps us understand which sections are more useful to visitors and improve content.
• Technical operation — Necessary cookies ensure the correct functioning of the site (saving GDPR preferences, navigating between pages).
• Social media sharing — Share buttons work via direct redirection and do not collect additional data beyond those managed by the respective platforms.

Legal Basis for Processing

We process your data based on the following legal grounds provided by GDPR:

• Consent (Art. 6 para. 1 lit. a GDPR) — For analysis and statistics cookies. Consent can be withdrawn at any time via the "Cookie Settings" button or by deleting cookies from the browser.
• Legitimate interest (Art. 6 para. 1 lit. f GDPR) — For technical cookies strictly necessary for the site's operation and for securing it against unauthorized access.
• Execution of a contract or pre-contractual measures (Art. 6 para. 1 lit. b GDPR) — For data provided via the contact form, for the purpose of managing requests.

Data Storage Duration

• Email messages and contact forms — Maximum 2 years from the last communication, after which they are permanently deleted.
• Google Analytics data — Maximum 14 months, according to the recommended GDPR settings for GA4.
• Technical cookies (GDPR consent) — 12 months from the date consent was granted.
• Technical server logs — Maximum 30 days, after which they are automatically deleted.

Upon expiration of the storage period, data is irrevocably deleted or anonymized.

Your Rights under GDPR

According to Regulation (EU) 2016/679, you benefit from all fundamental rights regarding personal data:

Cookie Policy

Cookies are small files stored on your device when you visit a site. We use cookies strictly within the limits necessary for the functioning and improvement of the guide.

How to control cookies:

• Our GDPR Banner — On the first visit, you can choose "Accept" or "Decline". Analysis cookies are enabled ONLY upon acceptance.
• Browser settings — You can delete or block cookies in the settings of any modern browser (Chrome, Firefox, Safari, Edge).
• Google Analytics Opt-out — You can disable GA4 tracking by installing the Google Analytics Opt-out Add-on.

Services and Third Parties

Our site uses third-party services, each with its own privacy policies:

• Google Analytics 4 — Anonymous traffic statistics. Google Policy. Data processed in the EU/USA with appropriate safeguards (Standard Contractual Clauses).
• Google Fonts — Playfair Display and Source Sans 3 fonts are loaded from Google servers. Google Policy. The IP address may be transmitted to Google upon the first load.
• Meta Platforms (Facebook, Instagram) — Facebook share and Instagram DM buttons. Meta Policy. Data managed by Meta upon clicking the button.
• Pinterest — Pinterest share button. Pinterest Policy.
• Hosting provider — The site is hosted on a secure server. Technical server logs may contain IP addresses, managed according to the hosting provider's policy.

We do not transfer your data to third countries (outside the EU/EEA) without the safeguards provided by GDPR. Where applicable, transfers are based on Standard Contractual Clauses approved by the European Commission.

Data Security

We implement appropriate technical and organizational measures to protect your data:

• HTTPS Connection — All data transmitted between the browser and the server is encrypted via the TLS/SSL (HTTPS) protocol.
• Limited access — Data from emails and contact forms is accessible exclusively to the responsible person (Alina Purcaru).
• Security updates — The site's infrastructure is regularly updated to prevent known vulnerabilities.
• Anonymization — Analysis data is collected in anonymized form — IP addresses are truncated before storage.

Minor Protection

The Craiova City Break website is intended for an adult audience and adolescents accompanied by parents/guardians. We do not intentionally collect personal data from persons under 16 years of age (minimum age for digital consent in Romania, according to GDPR).

If you are a parent or legal guardian and have reason to believe that a minor has provided us with personal data through our site, please contact us at alina.purcaru.nicoleta@gmail.com to delete this data immediately.

Changes to the Policy

We reserve the right to periodically update this privacy policy to reflect legislative, technical, or operational changes. The updated version will be published on this page with a new effective date.

We recommend periodic checking of this page. Continued use of the site after the publication of changes constitutes acceptance of the new version of the policy.

Substantial changes will be announced through the site's notification banner or, if you have previously contacted us, via email.

Data Protection Contact

For any question, request, or complaint related to the processing of your personal data, you can contact us via:

If you are not satisfied with the response received, you have the right to lodge a complaint with ANSPDCP (National Supervisory Authority for Personal Data Processing): dataprotection.ro.