Privacy Policy
This policy explains what personal data Concept Hotels – Dotări Hoteliere SRL collects through this website, for what purpose, on what legal basis, and what rights you have over it.
1. Who we are
Concept Hotels – Dotări Hoteliere SRL, tax ID (CUI) RO47050684, registered in Bucharest, Romania, is the controller of the personal data collected through this website.
Contact for anything data-related: office@concepthotels.ro · Phone: +40 741 888 789
The company’s full registration details (VAT number, trade register number, registered office) are available on request and in the company identification section.
2. What we collect
We only collect what you give us, through one of the following forms:
Request-an-offer form: name, email address, company, project name, location, number of rooms, the solution family you are interested in, and your message.
Brand card downloads: your email address.
Minimal technical data generated automatically by our hosting server (IP address, date and time of access, browser type), kept in server logs for security purposes.
3. Why, and on what legal basis
To answer your enquiry and prepare a commercial proposal — legal basis: our legitimate interest in responding to business enquiries we receive (Art. 6(1)(f) GDPR) and, where a contract follows, performance of that contract (Art. 6(1)(b)).
To send you the brand card you asked for — legal basis: your consent, given by ticking the box in the form (Art. 6(1)(a)).
To send you news about products and collections — only if you separately ticked that option; legal basis: your consent (Art. 6(1)(a)). That tick is optional and never a condition of downloading a document or receiving a reply.
To keep the site secure — legal basis: legitimate interest (Art. 6(1)(f)).
4. Cookies and local storage
This site does not use advertising pixels and does not show ads.
We use your browser’s local storage for strictly necessary functions: your chosen language, the state of a few interface elements, and your choice about traffic analysis. This information stays in your browser and does not identify you.
With your consent, we use Google Analytics 4 for traffic statistics: which pages are visited, where visitors come from, what searches bring them here. Without your consent, Google Analytics sets no cookies and does not record the visit. You can change your choice at any time by clearing the site’s data from your browser.
This site loads fonts from Google Fonts. When they load, your browser sends your IP address to Google.
5. Who can see your data
Your data is seen by the Concept Hotels sales team. In addition, we use suppliers who process it strictly on our instructions:
Our web hosting and email provider, for the technical delivery of messages.
When quoting a project requires a manufacturer price (ADA Cosmetics, Aliseo, Indel B), we pass on only the project information needed — we never pass your contact details on for marketing purposes.
6. How long we keep it
Enquiries: 24 months from our last contact, then deleted. If you become a customer, data relating to the contract is kept as long as accounting law requires.
Addresses collected for brand card downloads: a maximum of 24 months.
Marketing consent: until you withdraw it.
Server logs: a maximum of 12 months.
7. Your rights
Under the GDPR you have the right to access your data, to have it corrected, to have it erased (the “right to be forgotten”), to restrict how we process it, to object to processing based on legitimate interest, to receive your data in a portable form, and to withdraw any consent you gave at any time.
To exercise any of these, write to office@concepthotels.ro. We reply within 30 days at the latest.
If you are unhappy with how we handle your data, you can complain to the Romanian data protection authority (ANSPDCP), B-dul G-ral. Gheorghe Magheru 28-30, Bucharest, anspdcp.ro.
8. Security and transfers
The site is served over HTTPS only. Access to messages received through the forms is limited to the people who need them in order to reply to you.
We do not transfer personal data outside the European Economic Area. Should that change, we will update this policy and put the safeguards required by the GDPR in place.
9. Changes to this policy
If we change how we handle data, we will update this page and the date at the top of it. We encourage you to check back from time to time.