Privacy Policy
Last updated: 27 July 2026
This Privacy Policy explains how Danube Delta Travel ("we", "us", "our") collects, uses and protects the personal data of visitors to danubedeltatravel.eu, in compliance with Regulation (EU) 2016/679 (GDPR) and applicable Romanian data protection law.
1. Who we are
This website is operated by Casa din Delta Murighiol (Danube Delta Travel), a family-run tourism business based in Murighiol, Tulcea County, Romania.
For any question about your personal data, you can contact us at casadindelta@gmail.com or by phone at 0755-740143 (Cristina) or 0748 595 889 (Gabriel).
2. What data we collect
Contact form: your name, email address, phone number (optional) and the content of your message. You provide this data voluntarily when you send us an enquiry.
Technical data: information your browser sends automatically (IP address, browser type, language, pages visited, timestamps). This is used only to keep the site secure and working.
Cookies: small text files stored on your device. See our Cookie Policy for details.
3. Why we use your data (legal bases)
To reply to enquiries and organise the stay, tour or experience you asked about — legal basis: taking steps at your request prior to entering into a contract (Art. 6(1)(b) GDPR).
To keep the site secure, prevent abuse and comply with legal obligations — legal basis: our legitimate interest and legal obligations (Art. 6(1)(f) and (c) GDPR).
To measure how the site is used through optional analytics cookies — legal basis: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.
4. Who receives your data
Your enquiry emails are delivered through Resend (transactional email provider). Website hosting and infrastructure are provided by Lovable / Cloudflare. Blog content is served from Sanity. Live guest reviews are fetched from Google. Each provider only processes the data strictly needed to deliver its service.
We do not sell your personal data and we do not share it with advertisers.
5. International transfers
Some of our providers are established outside the European Economic Area. When personal data is transferred outside the EEA, it is protected by the European Commission's Standard Contractual Clauses or an equivalent safeguard.
6. How long we keep your data
Contact form enquiries: kept for up to 24 months after the last exchange, then deleted or anonymised.
Server and security logs: kept for a short period necessary to keep the site secure.
Cookies: see the retention period in our Cookie Policy.
7. Your rights
Under the GDPR, you have the right to access, rectify, erase, restrict or object to the processing of your personal data, and the right to data portability. Where processing is based on consent, you can withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.
To exercise any of these rights, contact us at casadindelta@gmail.com. You also have the right to lodge a complaint with the Romanian Data Protection Authority (ANSPDCP, www.dataprotection.ro).
8. Security
We use industry-standard technical and organisational measures to protect your personal data, including HTTPS encryption in transit and strict access control to our email and hosting accounts.
9. Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in the law or in our practices. The date at the top of the page indicates the latest version.