This policy explains how Villa Brussels Deva collects, uses and protects the personal data of people who visit the demo.firstgsm.ro website or use our accommodation services.

1. Data controller

The data controller is SC FELLOR SRL, operator of Villa Brussels Deva, legally represented by Felicia Siegel, Str. Mihai Eminescu nr. 56, Deva, jud. Hunedoara.

For any question about your personal data, contact us at +40 721 661 572 or [email protected].

2. What data we collect

first and last name, phone number, e-mail address and country of residence;
booking details: dates of stay, number of guests, rooms, estimated arrival time and your messages;
billing details, if you request an invoice;
data sent through the contact form;
technical data about the use of the website (IP address, stored only in anonymised form, browser type);
video images from areas under surveillance.

3. Purposes and legal basis

handling booking requests, confirming, changing or cancelling them and providing the accommodation – performance of a contract (Art. 6(1)(b) GDPR);
issuing tax documents and guest registration – legal obligation (Art. 6(1)(c));
communicating with guests before, during and after the stay, property security, preventing fraud and form abuse – legitimate interest (Art. 6(1)(f));
visitor statistics and offers sent by e-mail – only with your consent (Art. 6(1)(a)), which you may withdraw at any time.

4. Video surveillance

For the safety of people and property, some outdoor and/or common areas are under video surveillance. There are no cameras in guest rooms, bathrooms or other private areas. Recordings are accessible only to authorised persons and are kept for a limited period, then deleted automatically, unless needed to investigate an incident.

5. The website

The booking and contact forms are protected against automated submissions. When enabled, Google reCAPTCHA analyses how the form is used in order to tell humans from bots. The Google map loads only after you click on it. The cookies we use are described in the Cookie policy.

6. Booking platforms

If you book through an external platform (e.g. Booking.com), your data are also processed by that platform under its own privacy policy. To prevent double bookings, availability calendars are synchronised automatically with these platforms; only occupied dates are exchanged, without personal data.

7. Recipients

IT, web hosting and e-mail service providers;
booking platforms, accounting and administrative services, when necessary;
public authorities, where there is a legal obligation.

We never sell your data.

8. Transfers outside the EU

Some services (e.g. Google) may transfer data outside the European Union, based on the safeguards provided by the GDPR (standard contractual clauses or adequacy decisions).

9. Retention

booking data and tax documents – for the periods required by Romanian accounting law;
contact form messages – as long as needed to handle the request, at most 2 years;
video recordings – a limited period, normally at most 30 days.

10. Security

We use technical and organisational measures to protect your data: encrypted connection (HTTPS), access to the administration area only for authorised staff with password and two-factor authentication, an activity log and backups.

11. Your rights

You have the right of access, rectification, erasure, restriction of processing, objection, data portability and the right to withdraw consent. To exercise them, write to [email protected] or call +40 721 661 572; we will reply within one month. You may also lodge a complaint with the Romanian Data Protection Authority (dataprotection.ro).

12. Changes

We may update this policy when necessary. The version published on the website applies at the time of your visit.

Privacy policy