Privacy Policy

If you use WTCB services, stay at the Pullman Hotel, rent space from us, make a reservation, or use any of our services related to the hospitality sector, it is very likely that we will process certain types of personal data about you. We do not collect any information relating to beliefs, sexual life or sexual orientation, political opinions, trade union membership, health data, genetic or biometric data, or criminal records.

​

We collect and/or process your personal data through various methods, as follows:

 

DIRECT INTERACTIONS

​

1. Contacting us to make a reservation

​

When you contact us directly by phone, email, or fax to make a reservation, you may only reserve our services if you provide us with your first and last name and the payment method you wish to use.

Legal basis: the establishment and performance of a contractual relationship.

 

2. Visiting our premises

​

If you visit our premises, we will process your image captured through the video surveillance system. Video surveillance is carried out in accordance with Romanian legislation, based on a security plan approved by the competent authorities.

Legal basis: our legitimate interest in ensuring the security and protection of our assets.

 

3. Using our services

​

When you use our services, we may process your first and last name, telephone number, email address, date and place of birth, nationality, home address, arrival and departure dates, purpose of travel, identity document details, and signature. These data must be provided in order to deliver our services and to comply with our legal obligations under Government Decision no. 237/2001.

Legal basis: performance of a contract and compliance with a legal obligation.

To provide prompt and high-quality hospitality services, we may also keep records of your preferences, such as preferred room type, floor preferences, food preferences, or loyalty status.

Legal basis: your prior consent. Please note that you may withdraw your consent at any time.

 

4. Payment of invoices

​

Whenever you make a payment to us, we may process your first and last name, address, bank account, or card number.

Legal basis: the contractual relationship.

 

5. Accounting and reporting

​

We process your data (as included in fiscal invoices) for maintaining accounting records, conducting annual financial audits, and submitting tax and accounting declarations to the competent authorities.

Legal basis: contractual relationship and legal obligation.

 

6. Protection of rights in court

​

When defending our rights in court for debt recovery or protecting our interests against unjustified claims or complaints, we will process your personal data (provided by you) necessary for legal actions, claims, and related documents.

Legal basis: our legitimate interest in recovering outstanding amounts.

 

7. Procedures before authorities

​

When required by law, we will provide competent authorities and institutions with the personal data we hold, upon lawful request.

Legal basis: legal obligation.

 

8. Sending offers

​

From time to time, we may process your email address to send you personalized offers or updates about our services.

Legal basis: your prior consent, which you may withdraw at any time.

 

DATA FROM THIRD-PARTY SOURCES

​

1. From partner companies

​

When you benefit from our services based on a contract concluded between WTCB and the company you collaborate with, we may receive your first and last name from that company.

Legal basis: contractual relationship.

 

2. From external applications

​

When using booking platforms and/or external applications, we may receive from their operators your first and last name, identity document details, length of stay, and bank card details.

Legal basis: contractual relationship.

 

DATA RETENTION PERIOD

​

WTCB processes your personal data for the period necessary to fulfill the purposes for which they were collected and in accordance with our data retention policies. In certain cases, legal provisions may require or allow us to retain data for longer periods.

​

As a general rule, we retain personal data for as long as necessary to provide our services and fulfill our obligations. Specifically:

• if data are processed for the performance of a contract, they will be retained for the duration of the contract, but no longer than 5 years from its termination;

• if you use our accommodation services, we are legally required to retain your data for 5 years from the date of your stay;

• where processing is based on consent, data will be processed until you withdraw your consent, unless the law requires longer retention;

• video surveillance footage is retained for a maximum of 30 days.

 

DISCLOSURE OF YOUR PERSONAL DATA

​

To deliver our services, we may share your data with trusted partners and service providers. We carefully select our partners and only share data necessary for specific activities.

​

When outsourcing activities, we ensure that partners implement strict data security measures and conclude data processing agreements with them. Some data may be transferred to third parties such as IT service providers (e.g., external data storage providers located within the EU).

We may also disclose personal data to public authorities or courts when required by law or for the defense of our rights.

Additionally, data may be shared with providers of accounting, legal, HR, audit, and banking services.

 

INTERNATIONAL TRANSFERS

​

We do not transfer your personal data outside the European Economic Area (EEA).

 

DATA SECURITY

​

We have implemented appropriate technical and organizational security measures to protect your personal data against accidental loss, unauthorized access, alteration, or disclosure. Access is limited to employees, agents, contractors, and third parties with a legitimate business need, all of whom are subject to confidentiality obligations.

 

YOUR RIGHTS

​

In accordance with data protection laws, you have the following rights:

​

1. Right of access

​

You may request confirmation of processing, a copy of your data, and detailed information regarding their use.

​

2. Right to rectification

​

You may request correction of inaccurate personal data.

​

3. Right to erasure (“right to be forgotten”)

​

You may request deletion of your data under certain conditions, unless processing is required by law or for legal claims.

​

4. Right to restriction of processing

​

You may request restriction of processing in specific circumstances.

​

5. Right to data portability

​

You may request your data in a structured, commonly used, machine-readable format or request transfer to another controller.

​

6. Right to object

​

You may object to processing based on our legitimate interests.

​

7. Right to lodge a complaint

​

You may lodge a complaint with the National Supervisory Authority for Personal Data Processing.

​

8. Right to withdraw consent

​

You may withdraw your consent at any time where processing is based on consent.

We do not charge a fee for exercising your rights, unless requests are manifestly unfounded or excessive.

We may request additional information to verify your identity and will respond within one month, unless the request is complex, in which case we will inform you accordingly.

 

CONTACT DETAILS

​

We have appointed a Data Protection Officer. For any matters related to this notice or the exercise of your rights, you may contact us:

​

• by email: office@wtcb.ro

• by post: Bucharest, Sector 1, Piața Montreal no. 10, Romania

​​

If you have concerns regarding the use of your personal data, please contact us first and we will make every effort to resolve the matter promptly.​