Privacy Policy
GDPR
Information notice on the processing of personal data by
GRAND HOTEL DU BOULEVARD SRL
1. Who is the controller of your personal data?
GRAND HOTEL DU BOULEVARD S.R.L., a Romanian legal entity, headquartered in Bucharest, str. Traian, no. 184-186, sector 2, Niro Office Building, Corp A, 1st floor, with a working point at Corinthia Grand Hotel du Boulevard, Bucharest, Regina Elisabeta Street no. 21, sector 5, registered at the Trade Register under no. J2004019412401, VAT number RO16980202, contact phone number +40 31 405 3031, email address: bucharest@corinthia.com.
2. Why do we need your data?
In accordance with EU Regulation 2016/679 on the protection of individuals concerning the processing of personal data and the free movement of such data (GDPR), as well as the applicable Romanian data protection laws, we collect and use your data for identification and to provide you with our services.
Transparency is a fundamental principle of this legal framework, and we have prepared this document to inform you about how we collect, use, transfer, and protect your personal data when you interact with us in connection with our products and services, including through our website.
Respecting your privacy and protecting your personal data is of utmost importance to us.
3. Categories of personal data processed by Grand Hotel Du Boulevard S.R.L.
Generally, we collect personal data directly from you, allowing you to control the type of information you provide us. For example, we may collect:
- Contact data, such as: full name, home/residence address, phone number (landline and/or mobile), email address, correspondence address.
- Personal data, such as: date of birth, gender, age, identity card series and number, personal identification number (CNP), other details in the identity card, video recordings (obtained from CCTV cameras installed in the hotel premises), signature.
- Payment data, such as: billing details, bank account number, bank card details (card number/IBAN, issue date, expiration date), amounts paid and/or due, payment status.
- Data regarding your relationship with GRAND HOTEL DU BOULEVARD S.R.L., such as: history of interactions with our company, feedback, and opinions communicated directly or through other means (including social media or public platforms).
4. Purposes for processing personal data
We process your personal data for various purposes, with different collection methods, legal bases, usage, disclosure, and retention periods. The use of your data will always align with the stated purpose, and for other uses, we will obtain your consent.
- Provision of services – To create personalized offers and services for you when you request a quote for our products or services. Data processing is necessary for concluding and performing contracts and complying with applicable laws, including tax and accounting regulations.
- Website usage – The website automatically collects and stores certain information in log files, including IP address, general location, browser type, operating system, access time, page links accessed, browsing history, and device information.
- Marketing – To inform you about the best offers on products/services of interest to you. We may send messages (e.g., email, SMS, phone) containing information about similar or complementary services/products you have purchased or shown interest in. Marketing communications are generally based on your prior consent, which you can withdraw at any time via:
- The unsubscribe link in our messages
- Contacting us using the details provided above.
In some cases, marketing activities may be based on our legitimate interest in promoting our business, ensuring that your rights and freedoms are not affected.
- CCTV Surveillance – To prevent crime and protect private property while respecting fundamental rights and freedoms.
- Complaint and dispute management – To resolve claims/disputes related to our services.
- Protecting our legitimate interests, including:
- Protecting our website and users from cyberattacks.
- Preventing and detecting fraud, including reporting to relevant authorities.
- Managing other business risks.
5. Legal basis for processing
The processing of personal data is based on:
Legal obligations (e.g., disclosing personal data to public authorities).
Contract execution (e.g., fulfilling service agreements).
Legitimate interests (e.g., business operations in an efficient manner).
6. Data recipients
We may transmit or grant access to your personal data to:
- Marketing service providers
- IT service providers
- Other companies for joint promotional programs
If legally required or necessary to protect our interests, we may disclose personal data to public authorities. We ensure that third-party access complies with data protection laws and confidentiality agreements.
7. Data retention period
We generally store your personal data for the entire duration of GRAND HOTEL DU BOULEVARD S.R.L.’s operations. You can request data deletion at any time, subject to legal obligations or legitimate interests requiring continued retention.
If data processing is based on your consent, you may withdraw it at any time, without affecting the legality of processing before withdrawal.
8. Your rights
Under GDPR, you have several rights regarding your personal data:
- Right to be informed – About how your data is processed.
- Right of access – To request confirmation and access to your processed data.
- Right to rectification – To request correction of inaccurate or incomplete data.
- Right to erasure ("right to be forgotten") – To request deletion of your personal data when permitted by law.
- Right to restrict processing – In legally defined situations.
- Right to data portability – To receive your data in a structured format for transfer to another controller.
- Right to object – To processing based on public interest or legitimate interest.
- Right not to be subject to automated decision-making – To request a review of decisions made solely by automated processing, affecting you legally or significantly.
How We Protect Your Personal Data
We implement technical and organizational security measures, including encryption and secure servers. However, transmitting information over the internet or public networks carries risks beyond our control.
For security, only share your personal data with GRAND HOTEL DU BOULEVARD S.R.L. through official channels:
Do not provide personal data through any other channels, including individuals or entities claiming to represent us, as we cannot guarantee data security in such cases.
9. Data Protection Officer (DPO)
For additional details regarding data processing, you may contact our Data Protection Officer at:
Email: dpo.bucharest@corinthia.com
Mail: Str. Traian, no. 184-186, sector 2, Niro Office Building, Corp A, 1st floor, Bucharest, with a working point at Corinthia Grand Hotel du Boulevard, Regina Elisabeta St. no. 21, sector 5, Bucharest.
10. Additional information
The National Authority for the Supervision of Personal Data Processing (A.N.S.P.D.C.P.) oversees data protection compliance in Romania. If you believe your rights have been violated, you can contact them via their website: www.dataprotection.ro.