5. Processing of personal data
West City Hotel S.R.L. processes personal data in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR) and applicable national data protection legislation.
Personal data may be collected directly from users when making a reservation, completing forms available on the Website, requesting information, subscribing to marketing communications or using the services provided by the hotel.
Depending on the circumstances, the data collected may include first and last name, contact details, information required for reservations, billing information, as well as any other information voluntarily provided by the user.
Personal data may be processed for the following purposes:
- managing reservations and providing hotel services;
- communicating with users and responding to their requests;
- issuing tax documents and complying with legal obligations;
- organising conferences, events and related services;
- sending commercial offers and marketing communications, solely on the basis of the user’s consent or another applicable legal basis;
- improving our services and analysing the use of the Website;
- ensuring the safety and security of persons, property and hotel premises.
In certain circumstances, in accordance with the legal obligations applicable to the hotel industry, we may collect additional information required for the accommodation process or for the organisation of events.
Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected or for the period required by applicable legal obligations.
West City Hotel implements appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration or disclosure.
Personal data may be disclosed to public authorities, contractual partners or service providers only where such disclosure is necessary for the provision of services, compliance with legal obligations or on the basis of another applicable legal ground.
Data subject rights: in accordance with Regulation (EU) 2016/679 (GDPR), data subjects have the following rights:
- the right to access their personal data;
- the right to rectify inaccurate or incomplete personal data;
- the right to erasure, under the conditions provided by law;
- the right to restriction of processing;
- the right to data portability;
- the right to object to processing;
- the right not to be subject to a decision based solely on automated processing, including profiling;
- the right to withdraw consent at any time, without affecting the lawfulness of processing carried out before its withdrawal;
- the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing.
To exercise any of these rights, users may submit a written request to West City Hotel S.R.L. at its registered office at 442–446 Avram Iancu Street, Florești, Cluj County, Romania, or by email at dpo@westcityhotel.ro.
Detailed information regarding the processing of personal data is available in the Privacy Policy published on the Website.