Terms and conditions

Privacy statement

The YamaLuxe Apartments – București property undertakes to protect and respect the confidentiality of the personal data you entrust to us. This document contains important information regarding the way in which we use the data collected. It describes how we collect, use, process and transmit the data you provide to us when you access and use our reservation system. Those who access and use our reservation system are hereafter referred to as “users”.

We invite users to read carefully this document, entitled “Privacy statement”. The user expresses their will freely and voluntarily with regard to providing their personal data, or that of third parties, to the YamaLuxe Apartments – București property.

By the phrases “reservation system”, “booking engine”, “system”, “website”, “platform”, “application”, “web application”, “services”, “online services”, we refer to all the online pages and services we operate on the site https://yamaluxe-apartments-bucuresti.pynbooking.direct/, except where stated otherwise. By accessing the platform and providing us with your data, you consent to what is stipulated in our Privacy statement as it is described in this document. The statement may undergo changes from time to time, so we advise you to check accordingly in order to be sure that you are aware of the latest version.

Terms used

By the terms “we”, “our”, “ours”, we refer to the YamaLuxe Apartments – București property.

Data controller: the YamaLuxe Apartments – București property operates the reservation system through a data processor, as explained below. Under the GDPR regulations, the property is the data controller and the one that establishes the purpose of and the means by which the processing of data is carried out.

Data processor

PYNBOOKING operates the reservation system for the YamaLuxe Apartments – București property and undertakes to protect the confidentiality of the data provided by users of the system. PYNBOOKING is the data processor. PYNBOOKING is authorised by the YamaLuxe Apartments – București property to process the data on its behalf.

PYNBOOKING is a hotel management tool used by those who own and/or administer accommodation properties in order to allow users to make and manage online reservations. This document refers to PYNBOOKING's processing of the personal data collected by the accommodation properties that use the PYNBOOKING reservation system.

1.What kind of personal data is requested from users

Accommodation properties that use PYNBOOKING as a booking engine or management software collect and store the information users provide when they make a reservation. They are asked for their name, address, telephone number and email address, financial data for carrying out payment when prepayment is made, and the names of the guests travelling with them. These may also include the IP address. This information is necessary and mandatory (except where something else is specified in the dedicated fields) in order to carry out the request made by the user, and it is stored in the PYNBOOKING system for the purpose of processing the reservation. Should the user refuse to provide it, the request cannot be carried out. Users may be contacted by those who administer the accommodation property in connection with the reservation. Their personal data is also stored after the stay, but will be kept only for as long as is necessary in accordance with legal obligations.

2.Personal data processed directly by third parties

If users provide financial information (bank card details), this will be processed directly by providers that hold PCI Level 1 certification (euplatesc.ro, PayPal, authorize.net).

3.Personal data of third parties (reservations for companions, friends, family members, etc.)

In the event that the user provides the data of a third party, it is presumed that they have that party's consent and that they have passed on to them the information in this Privacy statement, the data controller and the data processor being released from any responsibility in this respect. Nevertheless, we may carry out additional checks, adopting the appropriate measures in accordance with the legislation in force.

4.The purpose of using personal data

Depending on users' requests, the data collected will be processed for the following purposes:

• Administering the reservations made, including carrying out payment (where applicable) and managing the requests and preferences expressed by the user
• Administering users' enrolment in loyalty programmes and the obtaining of member status
• Contacting users for the purposes listed here
• Sending personalised commercial offers by electronic means where the user has given their consent
• Administering additional services
• Carrying out surveys and assessments regarding the quality of the services provided

5.The retention period for personal data

Data is retained for the period of time necessary to fulfil the objectives listed above, except where it is needed for a longer period and this is permitted by legislation, or except where the user requests its deletion, withdrawing their consent. The criteria for determining the duration are:

• The period of time in which the user has a relationship with the data operator within which the latter provides them with services (for example, the period in which the user has an account in the reservation system, or that in which they use its services, or the period preceding the stay)
• The case in which a legal obligation exists (certain laws require the data operator to keep the data relating to transactions for a certain period of time before having permission to delete it)

6.The use of users' social network accounts

In the event of registration or connection through a user account on a social network platform, we may collect and access various information from the user's profile on that social network for internal administrative purposes and/or the purposes indicated above.

7.Security procedures

In accordance with the General Data Protection Regulation (GDPR), PYNBOOKING ensures the reasonable fulfilment of the procedures necessary to prevent unauthorised access to and improper use of personal data. We use appropriate systems and procedures to protect and keep secure the information that has been transmitted to us. We also make use of technical and security procedures and physical restrictions to prevent the accessing and use of the personal data on our servers. Only authorised personnel have access to personal data, and this only in the course of carrying out their duties.

Data is processed in such a way that its security is ensured and the risk of it being modified, lost, processed or accessed illegally is countered, according to the nature of the technology, of the information stored and of the risks to which it is exposed.

8.Users' control over and rights regarding personal data

Users have the right to access the data stored by the accommodation properties at which they have made reservations via the PYNBOOKING system. To this end, they should contact the accommodation property at which they made the reservation through the PYNBOOKING system.

• Users have the right to request the deletion of the data provided at any time they wish.
• Users have the right to modify any incomplete or invalid data.
• Users have the right to request the deletion of data when it is no longer necessary for the purposes for which it was collected and stored.
• Users have the right to confirm the revocation of consent.
• Users have the right to obtain the restriction of data processing when the conditions regarding personal data processing regulations allow it.
• Users have the right to request the portability of their data.

Users will also be informed that they may at any time lodge a complaint regarding the protection of their personal data with the relevant authorities.

9.Reviews, ratings, feedback

Users may be asked to submit an opinion regarding the quality of the accommodation services once the stay has ended, for the purpose of improving those services. The user's email address will be used for this purpose. If they complete a review, it may be published on the accommodation property's website, on its Facebook, Twitter or Google Plus page. No details regarding the user's identity will be published. Storing users' information may be necessary in order to fulfil the obligations the accommodation property has towards them.

10.Legitimate interest in processing the user's data

We may use users' information for legitimate purposes, such as administrative ones, those related to the detection of fraud, or legal ones.

The processed data that we request in order to fulfil the purposes listed above cannot be used without the user's consent. Furthermore, should the user withdraw their consent, this will not affect the lawfulness of the prior processing of their data. In order to revoke consent, the user must contact us through the channels mentioned above. Similarly, in those cases in which processing a user's data is necessary in order to fulfil a legal obligation or to perform a contractual relationship between us and the user, the processing of the data will be legitimate in that it is necessary in order to achieve those objectives.

11.Cookies

The term “cookie” denotes a small quantity of information placed in the web browser on the computer or mobile device that users use. Cookies are used to ease the reservation process and contain information such as the dates searched for and the language in which the reservation is made. There is a difference between temporary cookies and long-duration ones. Temporary ones will exist only until the web browser is closed. Long-duration ones are used for a longer time and are not deleted automatically when the browser is closed. We use long-duration cookies in Google Analytics in order to analyse traffic and visitor behaviour. By using the PYNBOOKING site or by making reservations through PYNBOOKING, you consent to the use of cookies as it has been described above.

12.The use of the services by minors

The services are not addressed to individuals under the age of 18 and we do not ask them to provide personal data.

13.Disclosure of personal data

Personal data will be used and disclosed in the following cases:

• In order to comply with the laws in force, including the laws of the user's country of residence
• In order to respond to a request in the case of legal proceedings
• In order to respond to requests from governmental authorities, including authorities outside the user's country of residence, and in order to fulfil requirements related to national security
• In order to enforce the terms and conditions
• In order to protect the rights, the confidentiality and the security of our data, that of users and that of third parties

We may use and disclose Other Data for any purpose, except in those cases where current legislation does not permit it. In certain cases, we may combine Other Data with personal data (for instance, the user's name with their location). If we proceed in this way, we will consider and treat the data resulting from this combination as personal data for as long as the process of combination is exercised.

14.The user's obligations

The user warrants that they are legally responsible, of sound mind, and that the information provided is true, valid, complete and current. The user is solely responsible for the veracity of the data communicated and undertakes to update the information where appropriate.

The user undertakes to inform the third parties whose personal data they provide, where appropriate, about the information in this document. They also undertake to obtain the approval of those third parties with regard to the provision of personal data for the purposes presented above.

The user is responsible for false or invalid information provided through the website and for any damages, direct or indirect, thereby caused to us or to third parties.

General terms and conditions: Booking policy