Privacy Policy

At Zabola Estate (SC Zabola Estate SRL), we care about your privacy. We are committed to handling your personal data respectfully and in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR).

1. Who We Are

Data Controller: SC Zabola Estate SRL
Contact: reservations@zabola.com

2. What Data We Collect

We may collect and process:

Your name, email address, and phone number
Booking and payment details
Preferences related to your stay
Website usage data (such as IP address and session cookies)

3. Why We Collect Your Data

To fulfill your reservation (contractual necessity)
To comply with legal obligations (e.g. for accounting)
To respond to inquiries or offer tailored services (legitimate interest)
To send newsletters or use analytics (only with your consent)

4. How Long We Keep Your Data

Booking records: up to 5 years (for tax and legal compliance)
Newsletter subscriptions: until you unsubscribe
Inquiry data: up to 1 year after our last communication

5. Your Rights

You have the right to:

Access your personal data
Request correction or deletion
Restrict or object to processing
Withdraw consent at any time
Request data portability
Lodge a complaint with the Romanian Data Protection Authority (ANSPDCP)

To exercise your rights, contact: reservations@zabola.com. We aim to respond within one month.

6. Data Sharing & Transfers

We only share your data with trusted partners when necessary:

ROMARG SRL (hosting provider in Romania)
Google LLC (analytics service provider — data may be transferred to the U.S. under Standard Contractual Clauses and IP anonymisation is enabled)

We do not sell or misuse your data.

7. Data Security

Your information is stored securely and protected by passwords, encryption, and antivirus software. Access is limited to trained personnel.