Privacy Policy

The controller of the personal data described here is:

Company

CINA IN GRADINA SRL

Sole registration code (CUI)

52786289

Trade Register no.

J2025082546008

EUID

ROONRC.J2025082546008

Date of incorporation

28.10.2025

Registered office

Str. Chimiei nr. 2, Sc. B, Et. 3, Ap. 16, Bacău, jud. Bacău, 600286, Romania

Website

cinaingradina.com

You can reach us about anything in this policy in writing at Str. Chimiei nr. 2, Sc. B, Et. 3, Ap. 16, Bacău, jud. Bacău, 600286, Romania. An email address for enquiries will be published on this website once it is in service.

We have not appointed a Data Protection Officer, as we are not required to under Article 37 of the GDPR.

This website does not ask you for your name, your email address or your telephone number. There is no contact form, no newsletter sign-up, no user account and no reservation form. The reservations button opens an informational message only — it collects nothing and sends nothing.

The only data processed in connection with your visit is technical data, generated automatically by the exchange between your browser and our hosting provider's servers:

• your IP address, which our hosting provider may truncate or anonymise;
• the date and time of the request;
• the address of the page requested and, where your browser sends it, the page you came from;
• your browser type and version, your operating system and your device type;
• the amount of data transferred and whether the request succeeded;
• an approximate region or country, derived by the hosting provider from the IP address at network level.

In addition, if you make a choice in the cookie banner, that choice is stored on your own device, as is your choice of language. Neither contains an identifier nor anything that describes you. See the Cookie Policy for detail.

Technical data of the kind listed above is written to server logs by our hosting provider. Logs exist so that the site can be delivered, so that faults and abuse can be investigated, and so that the infrastructure can be kept secure. They are not used to build a profile of you, they are not combined with any other source, and they are not used for advertising.

This website sets no analytics cookies, no advertising cookies and no third-party tracking of any kind. Two strictly necessary cookies are written on your device: one remembers your answer to the cookie banner, the other remembers whether you are reading the site in Romanian or in English. Full detail is in our Cookie Policy.

The typefaces used on this website are served from our own domain. Your browser makes no request to Google Fonts or to any other external font service while you read this site.

Delivering the website

Technical data is unavoidable in delivering a page to your browser. Legal basis: our legitimate interest in operating a website — Art. 6(1)(f) GDPR.

Security and availability

Detecting, investigating and preventing faults, abuse and attacks. Legal basis: legitimate interest in a secure service — Art. 6(1)(f) GDPR.

Remembering your cookie choice

Storing your decision is strictly necessary in order to respect it, and follows from the obligation to obtain and honour consent — Art. 6(1)(c) GDPR, read with Art. 5(3) of the ePrivacy Directive as transposed by Romanian Law no. 506/2004.

Remembering your language

Showing you the site in the language you chose is a setting you asked for yourself. Legal basis: our legitimate interest in a website that behaves as you expect — Art. 6(1)(f) GDPR.

Optional analytics or marketing, if ever enabled

None are enabled today. Should we introduce any, they will run only after you have given consent — Art. 6(1)(a) GDPR — and this policy and the Cookie Policy will be updated beforehand.

• Server logs: kept by our hosting provider for a short technical period, in the order of weeks, and then deleted or aggregated into figures that cannot be traced back to you.
• Your cookie choice: stored on your device for a maximum of six months, after which you are asked again.
• Your language choice: stored on your device for a maximum of one year.
• You can delete both at any time from your browser, and change your cookie choice through Cookie Settings in the footer.

We do not sell personal data and we do not share it for commercial purposes. Data is handled on our behalf only by the provider that hosts and delivers the website:

Hosting and content delivery

Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, United States — hosting, global content delivery and server logs. Vercel acts as our processor under a data processing agreement incorporating the European Commission's Standard Contractual Clauses.

Domain registrar

The registrar of cinaingradina.com processes domain registration data under its own terms. It does not receive data about your visit.

Beyond this, personal data may be disclosed only where we are legally required to do so, for example to a public authority acting within its powers.

Our hosting provider is established in the United States and operates a global network, so technical data may be processed outside the European Economic Area. Where this happens, the transfer is covered by the European Commission's Standard Contractual Clauses together with the provider's supplementary technical measures. Pages for European visitors are served from European edge locations wherever the network allows.

Under the General Data Protection Regulation you have the following rights in relation to your personal data:

• Access — to be told whether we process data about you and to receive a copy of it (Art. 15).
• Rectification — to have inaccurate data corrected and incomplete data completed (Art. 16).
• Erasure — to have data deleted where one of the grounds in Art. 17 applies.
• Restriction — to have processing limited while a dispute about accuracy or lawfulness is resolved (Art. 18).
• Portability — to receive data you provided in a structured, machine-readable format, where processing is based on consent or on a contract and is carried out automatically (Art. 20).
• Objection — to object at any time to processing based on our legitimate interest, on grounds relating to your particular situation (Art. 21).
• Withdrawal of consent — where processing is based on consent, to withdraw it at any time without affecting the lawfulness of what was done before (Art. 7(3)). For cookies, use Cookie Settings in the footer.
• Not to be subject to automated decision-making — we carry out no automated decision-making and no profiling (Art. 22).

To exercise any of these rights, contact us in writing at Str. Chimiei nr. 2, Sc. B, Et. 3, Ap. 16, Bacău, jud. Bacău, 600286, Romania. An email address for enquiries will be published on this website once it is in service. We answer within one month, and we will tell you if we need longer because a request is complex. Because this website collects no identifying data, we may be unable to link a request to a specific visit — in that case we will explain why, as Art. 11 GDPR allows.

If you believe your data has been handled unlawfully, we would rather hear from you first. You also have the right to lodge a complaint with the Romanian supervisory authority, the National Supervisory Authority for Personal Data Processing (ANSPDCP), B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, 010336 Bucharest, Romania — dataprotection.ro. If you live in another EU member state, you may complain to your local authority instead.

The website is served exclusively over an encrypted HTTPS connection. It is a statically generated site: there is no visitor database, no login and no administration interface exposed on the public internet. Access to the hosting account and to the source code is restricted and protected by multi-factor authentication. No method of transmission over the internet is completely secure, but the amount of data at stake here is deliberately kept to a minimum.

This website is aimed at an adult audience and is not directed at children. We do not knowingly collect data relating to children.

We will update this policy whenever the website changes in a way that affects it — for example when reservations open, or if analytics are introduced. The date at the top always shows the current version. Where a change is significant, we will make it visible on the site rather than relying on you to check.