Privacy policy

Below is the main information about how Somni Apartments processes personal data received through the site and the contact channels shown.

Data controller

The confidentiality of your personal data is important to Somni Apartments. The operator of the somni.ro website is Somni Apartments, accommodation in Chinteni, Cluj county, Romania, represented operationally by Szegedi Sándor.

Data processing is carried out in accordance with Regulation (EU) 2016/679 on the protection of personal data.

Personal data

Personal data means any information relating to an identified or identifiable natural person, directly or indirectly, including by reference to a name, contact details, location data, an online identifier or other elements specific to their identity.

What data we collect

We collect the data you provide when you use the booking form, when you write to us by e-mail or WhatsApp, or when you contact us by phone.

  • name;
  • phone number;
  • the apartment you want;
  • arrival and departure dates;
  • number of adults and number of children aged 0 to 3 years;
  • email address, if you provide it;
  • any message or details you share voluntarily;
  • technical data needed for the operation of the site, such as IP address, date and time of access, or technical errors recorded by the server.

Purpose and legal basis

We use the data to check the availability of the apartments, to create and manage your booking, to send you information or confirmations related to it, and to answer your questions and requests by phone, WhatsApp or e-mail.

For bookings made through the form on the site, the booking data is transmitted to the booking-management system (channel manager), which processes the booking and automatically synchronises it with the connected booking platforms, in order to avoid overbooking.

The primary legal basis is Article 6(1)(b) of Regulation (EU) 2016/679 — performance of a contract, or steps taken at the request of the data subject prior to entering into a contract. For site security, technical administration and the prevention of abuse, processing may also be based on the legitimate interest of the controller. If an invoice is issued, or where legal obligations apply, certain data may be processed to comply with legal obligations.

Booking form

The required fields are needed to check availability, to create the booking and to contact you. Without this information the booking cannot be processed.

Submitting the booking form on the site generates a confirmed booking in the booking-management system and automatically blocks the room for the selected period. Payment is made on arrival, at the accommodation. Messages sent through other channels (phone, WhatsApp, e-mail) are information or booking requests, and are confirmed separately.

By submitting the form you declare that you have read this notice and you agree to the transmission of the booking data to the booking-management system, for the purpose described above.

Cookies and similar technologies

The site may use technical cookies that are necessary for the normal operation of the page, as well as web-analytics services, including Google Analytics, to understand in general terms how the site is used and to improve the visitor experience.

Analytics cookies may collect information such as pages visited, length of visit, traffic source, device type or similar technical data. This information is used in aggregated form and is not intended to identify the visitor directly.

You can configure your browser to block or delete cookies. Blocking certain cookies may affect the operation of parts of the site.

Who can access the data

For the operation of the site, the management of bookings and the handling of requests, the data may be accessed, only to the extent necessary, by the following categories of recipients and processors:

  • the booking-management service provider (channel manager): 5STARDESK S.R.L., CUI 52535481, Trade Registry no. J2025071378009, registered office in Sat Cetățeni, Comuna Cetățeni, Str. Narciselor nr. 14B, Argeș county, Romania. The booking data (name, phone, e-mail if provided, period and apartment, number of adults and children aged 0–3, any attached message) is transmitted to the 5stardesk system to create the booking and synchronise availability.
  • the booking platforms connected through the booking-management system — Booking.com, Travelminit and Airbnb — to which the system automatically transmits availability information (for example, blocking of the booked period), in order to avoid overbooking;
  • the provider of the website hosting and technical administration services;
  • the provider of e-mail or SMTP services for sending notifications and correspondence;
  • the provider of IT maintenance and web administration services;
  • the provider of web-analytics services (Google Analytics);
  • consultants, authorities or public institutions, when required by law or when needed to defend rights.

Each processor is bound by confidentiality obligations and may process the data only for the purposes described.

Retention period

We keep data only as long as necessary for the purpose for which it was collected or to comply with legal obligations.

  • bookings, booking requests and correspondence may be kept for up to 2 years from the last communication, unless a longer period is needed to resolve a specific situation;
  • booking data recorded in the 5stardesk system is kept according to the policy and timelines of that service provider;
  • data related to invoices or financial-accounting documents is kept in accordance with the deadlines provided by the applicable legislation;
  • technical data and server logs are kept for limited periods, as necessary for the security and operation of the site;
  • web-analytics data is kept according to the settings of the service used, as a rule for up to 14 months.

Your rights

Under the conditions set out in Regulation (EU) 2016/679, you have the following rights:

  • the right to be informed;
  • the right of access to your data;
  • the right to rectification;
  • the right to erasure;
  • the right to restrict processing;
  • the right to data portability;
  • the right to object;
  • the right to withdraw your consent, where processing is based on consent;
  • the right not to be subject to a decision based solely on automated processing, where such processing would produce legal or similar significant effects.

Somni Apartments does not carry out profiling with legal effect and does not take automated decisions producing legal effects on you.

Complaints

If you consider that your data-protection rights have not been respected, you have the right to lodge a complaint with the National Supervisory Authority for Personal Data Processing: B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, Bucharest, Romania, e-mail anspdcp@dataprotection.ro.

How to contact us

For any question or request regarding the processing of personal data, you can contact us:

We will respond within the period provided by law, as a rule within at most 30 days.

This policy describes the processing of data for the Somni Apartments website, for bookings sent through the online form, and for requests received through the channels shown on the site.