Information We Collect

Personal Information

We may collect the following personal information:

• Name, email address, and phone number when you contact us or subscribe to our services
• Travel preferences and booking information for eco-tourism activities
• Payment information for tour bookings (processed securely through third-party providers)
• Location data when you use our interactive maps and location-based services
• Communication records including emails, messages, and feedback

Automatically Collected Information

When you visit our website, we automatically collect:

• IP address, browser type, and operating system
• Pages visited, time spent on pages, and navigation patterns
• Device information including screen resolution and device type
• Cookies and similar tracking technologies data
• Referral sources and search terms used to find our website

How We Use Your Information

We use your information for the following purposes:

• Service Provision: To provide eco-tourism information, process bookings, and deliver requested services
• Communication: To respond to inquiries, send updates about Romania's natural attractions, and provide customer support
• Improvement: To analyze website usage, improve our services, and develop new features
• Marketing: To send promotional materials about sustainable tourism opportunities (with your consent)
• Legal Compliance: To comply with applicable laws, regulations, and legal processes
• Security: To protect against fraud, unauthorized access, and other security threats

Data Sharing and Disclosure

We may share your information in the following circumstances:

Service Providers

We work with trusted third-party partners including:

• Local eco-tourism operators and nature guides in Romania
• Payment processors for secure transaction handling
• Analytics providers to understand website usage patterns
• Email service providers for communication purposes
• Cloud hosting services for data storage and website functionality

Legal Requirements

We may disclose information when required by law or to:

• Comply with legal processes, court orders, or regulatory requests
• Protect the rights, property, or safety of our users and the public
• Investigate and prevent fraud or security violations
• Enforce our terms of service and other agreements

Data Security

We implement industry-standard security measures to protect your personal information, including SSL encryption for data transmission, secure server hosting, regular security audits, and restricted access to personal data. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

Your Rights and Choices

Under applicable privacy laws, including GDPR, you have the following rights:

• Access: Request information about the personal data we hold about you
• Correction: Update or correct inaccurate personal information
• Deletion: Request deletion of your personal data in certain circumstances
• Portability: Receive your data in a structured, machine-readable format
• Objection: Object to processing of your data for marketing purposes
• Restriction: Request limitation of processing under specific conditions
• Withdrawal: Withdraw consent for data processing where consent is the legal basis

Cookies and Tracking

Our website uses cookies and similar technologies to enhance your browsing experience, analyze website traffic, and provide personalized content. You can manage cookie preferences through your browser settings, though disabling certain cookies may affect website functionality. We use both session and persistent cookies, including those from third-party analytics services.

International Data Transfers

Your information may be transferred to and processed in countries other than Romania, including countries that may have different data protection laws. We ensure appropriate safeguards are in place for such transfers, including standard contractual clauses and adequacy decisions where applicable.

Data Retention

We retain personal information for as long as necessary to fulfill the purposes outlined in this policy, comply with legal obligations, resolve disputes, and enforce agreements. Specific retention periods vary based on the type of information and applicable legal requirements. Generally, we retain contact information for active users and delete inactive accounts after 3 years of inactivity.

Children's Privacy

Our services are not directed to children under 16 years of age. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided personal information to us, please contact us immediately, and we will take steps to remove such information.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or applicable laws. We will notify users of material changes by posting the updated policy on our website with a new effective date. Your continued use of our services after such changes constitutes acceptance of the updated policy.