1. Introduction

Blues House respects the privacy of our guests' personal data and is committed to protecting personal information in accordance with the General Data Protection Regulation (GDPR) and Romanian legislation in force.

2. Data Controller

The personal data controller is:

• Name: Blues House
• Address: Str. Gheorghe Tutuianu nr. 12 B, Venus
• Classification Certificate no. 43108/2025 issued by the Ministry of Tourism
• Email: office@blueshouse.ro
• Phone: +40735223533

3. Personal Data Collected

We collect the following categories of personal data:

3.1 Identification Data

• First and last name
• ID document number and series
• Date of birth
• Nationality

3.2 Contact Data

• Email address
• Phone number
• Home/residence address

3.3 Reservation Data

• Stay dates (check-in, check-out)
• Room type and number
• Number of guests
• Special preferences

4. Processing Purposes

We process personal data for the following purposes:

• Managing reservations and accommodation services
• Compliance with legal obligations (guest register)
• Communication with guests
• Improvement of services offered
• Synchronization with external booking platforms (iCal)

5. Legal Basis

We process personal data based on the following legal grounds:

• Contract performance: for reserved accommodation services
• Legal obligation: for guest register according to law
• Legitimate interest: for service improvement
• Legitimate interest: for service improvement
• Consent: for promotional communications (where applicable)

6. Data Retention

We retain personal data for the following periods:

• Reservation data: 3 years from end of stay
• Guest register: according to current legislation (minimum 3 years)
• Financial data: according to tax legislation (10 years)
• Communications: until consent is withdrawn

7. Data Sharing

Personal data may be shared with:

• Competent authorities: upon legal request (police, tax authorities, etc.)
• Booking platforms: for availability synchronization
• Service providers: for payment processing and IT services

We do not sell or rent personal data to third parties for commercial purposes.

8. Your Rights

In accordance with GDPR, you have the following rights:

• Right of access: to request information about processed data
• Right to rectification: to correct inaccurate data
• Right to erasure: to request data deletion (under certain conditions)
• Right to restriction: to limit data processing
• Right to portability: to request data transfer
• Right to object: to oppose processing
• Right to lodge a complaint: with the National Supervisory Authority

9. Data Security

We implement appropriate technical and organizational measures to protect personal data against:

• Unauthorized access
• Alteration, loss or destruction
• Unlawful processing
• Accidental disclosure

10. Policy Changes

This privacy policy may be updated periodically. Changes will be published on our website with indication of the last update date.

11. Contact for Personal Data

To exercise your rights or for questions related to personal data processing, you can contact us at:

• Email: office@blueshouse.ro
• Phone: +40735223533
• Address: Str. Gheorghe Tutuianu nr. 12 B, Venus