Privacy Policy

Privacy Policy

GATE67 – Boutique Accommodation, Otopeni

Last updated: October 10, 2026

1. Introduction

Protecting your personal data is a priority for GATE67.

This Privacy Policy explains how we collect, use, store, and protect the personal data of individuals who visit our website, make reservations, or use our accommodation services.

The data controller is:

DRAGA MARIA HOTELS SRL

Registered office: 5 Prutului Street, Buzău, Romania

Website: www.gate67.ro

Data protection email: privacy@gate67.ro

Personal data is processed in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR), Romanian Law No. 190/2018, and other applicable legal provisions.

2. What Personal Data Do We Collect?

Depending on how you interact with GATE67, we may process the following categories of information:

Identification and contact details

  • First and last name.
  • Telephone number.
  • Email address.
  • Home or residential address, where necessary.
  • Other identification details legally required for guest registration.

Reservation information

  • Arrival and departure dates.
  • Room type booked.
  • Number of guests.
  • Preferences communicated in connection with your stay.
  • History of reservations and contracted services.

Payment information

  • Transaction and billing information.
  • Payment confirmations.
  • Information required to manage payments and potential refunds.

When payments are processed through specialized payment service providers, bank card details may be processed directly by those providers in accordance with their own policies and security measures.

Technical information

  • IP address.
  • Browser and device type.
  • Information about website access and usage.
  • Data collected through cookies and similar technologies, as described in our Cookie Policy.

We collect only the data necessary for the legitimate and lawful purposes of our activities.

3. How Do We Collect Personal Data?

Personal data may be collected:

  • Directly from you when you make a reservation or contact us.
  • Through the online booking system integrated into our website.
  • Through partner booking platforms and agencies.
  • During guest registration and check-in procedures.
  • Automatically, in the case of certain technical information generated while browsing our website.

GATE67 uses an integration with the Stayntouch platform for online reservations.

Depending on the services accessed, personal data may also be processed by technology providers involved in reservation management.

4. Why Do We Process Personal Data?

We process personal data for the following purposes:

Reservation management and service delivery

  • Registering and confirming reservations.
  • Communicating information about your stay.
  • Organizing check-in and check-out procedures.
  • Providing accommodation and any additional services requested.

Compliance with legal obligations

  • Maintaining guest registration records in accordance with applicable legislation.
  • Issuing tax and accounting documents.
  • Complying with accounting and record-retention obligations.
  • Responding to requests from competent authorities, as required by law.

Guest communication

  • Responding to inquiries and requests.
  • Handling complaints.
  • Providing assistance before, during, and after your stay.

Security and service improvement

  • Protecting the website and information systems.
  • Preventing fraud and unauthorized access.
  • Managing incidents and protecting legitimate rights.
  • Evaluating and improving the quality of our services.

Marketing communications

We may send promotional offers and commercial information only where permitted by applicable legislation, including on the basis of consent where required.

You may object to direct marketing communications at any time.

5. Legal Basis for Processing

Depending on the purpose of processing, we rely on one or more of the following legal bases under Article 6 of the GDPR:

Performance of a contract or pre-contractual measures – Article 6(1)(b)

For managing reservations, communicating with guests, and providing requested services.

Compliance with a legal obligation – Article 6(1)(c)

For obligations relating to guest registration, taxation, accounting, and other legal requirements.

Legitimate interests – Article 6(1)(f)

For website security, fraud prevention, complaint management, and the protection of the controller’s legitimate rights, provided that these interests are not overridden by the rights and freedoms of the individuals concerned.

Consent – Article 6(1)(a)

For activities requiring your agreement, such as certain marketing communications or the use of non-essential cookies.

Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before its withdrawal.

6. Who May Receive Your Personal Data?

Personal data may be accessed by or disclosed to the following recipients, to the extent necessary:

  • Authorized personnel of DRAGA MARIA HOTELS SRL.
  • Reservation and property management system providers, including Stayntouch.
  • Payment processing service providers.
  • Web hosting, maintenance, and IT service providers.
  • Accounting and administrative service providers.
  • Booking platforms and agencies involved in delivering the requested services.
  • Partners providing additional services requested by guests, where data sharing is necessary.
  • Competent public authorities, in cases provided for by law.

Service providers processing personal data on our behalf are required to comply with applicable data protection obligations.

We do not sell our guests’ personal data.

7. Transfers of Personal Data Outside the European Economic Area

Certain technology service providers may involve the processing of or access to personal data from outside the European Economic Area (EEA).

Where such transfers occur, we will comply with the applicable GDPR requirements, including the use of lawful transfer mechanisms and appropriate safeguards where necessary.

Further information about relevant international data transfers may be requested at privacy@gate67.ro.

8. How Long Do We Retain Personal Data?

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected or to comply with legal obligations.

Retention periods may vary depending on the category of data:

  • Reservation information is retained for as long as necessary to manage the services provided and any subsequent requests.
  • Tax and accounting documents are retained in accordance with applicable statutory retention periods.
  • Data used for marketing communications is retained until consent is withdrawn or the applicable legal basis ceases to apply.
  • Technical information is retained according to the purpose and necessity of the processing.

Once the applicable retention periods have expired, personal data will be deleted, anonymized, or archived in accordance with legal requirements.

Withdrawal of consent does not automatically result in the deletion of data that we are legally required, or otherwise lawfully entitled, to retain.

9. How Do We Protect Personal Data?

GATE67 and its data controller, DRAGA MARIA HOTELS SRL, aim to protect personal data against unauthorized access, loss, alteration, or unlawful disclosure.

To achieve this, technical and organizational measures appropriate to the risks associated with processing are implemented.

Access to personal data is restricted, where possible, to individuals and service providers who require such information to perform their duties or contracted services.

Although we apply security measures, no transmission of data over the internet can be guaranteed to be entirely risk-free.

10. Your Rights

Under the GDPR, you have the following rights, subject to the conditions established by law:

  • Right of access: You may request information about the personal data we process.
  • Right to rectification: You may request the correction of inaccurate data or the completion of incomplete information.
  • Right to erasure: You may request the deletion of personal data in the circumstances provided by law.
  • Right to restriction of processing: You may request that the use of your data be restricted in certain situations.
  • Right to data portability: You may request to receive or transfer certain personal data where the legal conditions are met.
  • Right to object: You may object to certain processing activities, including those based on legitimate interests and processing for direct marketing purposes.
  • Right to withdraw consent: Where consent is the legal basis for processing.
  • Right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects or similarly significantly affects you, subject to the exceptions provided by law.

To exercise these rights, please contact us at:

privacy@gate67.ro

We will respond to requests within the time limits established by the GDPR, generally within one month of receipt, with the possibility of an extension in cases permitted by law.

Exercising your rights is generally free of charge. Measures permitted by the GDPR may apply to manifestly unfounded or excessive requests.

11. Right to Lodge a Complaint

If you believe that your personal data is being processed in violation of applicable legislation, you have the right to lodge a complaint with:

The Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)

Website: www.dataprotection.ro

This right does not affect your ability to pursue other legal remedies available under applicable law.

12. Cookies and Third-Party Services

The GATE67 website may use cookies and similar technologies to ensure the proper functioning of its pages, remember preferences, and integrate certain services.

For detailed information, please refer to our Cookie Policy.

The website may include services provided by third parties, such as the Stayntouch booking system and the display of guest reviews through Trustindex.

The use of these services may involve personal data processing by the respective providers, in accordance with the roles and responsibilities established under applicable legislation.

13. Changes to This Privacy Policy

We may update this Privacy Policy when changes occur to the services provided, the systems used, or applicable legislation.

The updated version will be available on www.gate67.ro, together with the date of the latest revision.

We recommend reviewing this page periodically to stay informed about how we protect personal data.

14. Contact

For questions, requests, or further information regarding personal data protection:

DRAGA MARIA HOTELS SRL

GATE67 – Boutique Accommodation

5 Prutului Street, Buzău, Romania

Email: privacy@gate67.ro

Website: www.gate67.ro

Scroll to Top