Company Identification

MOON RESORT S.R.L. (hereinafter referred to as “MOON”), a Romanian legal entity, with its registered office in Bușteni, Strada Căprioarei no. 27, CF 25494 Bușteni, Prahova County, registered with the Trade Register under no. J29/2362/2020, VAT number (CUI) 42044711, processes your personal data by automated and manual means.

This policy supplements the legal provisions regarding the processing of personal data and the free movement of such data and is fully subject to Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation – GDPR).

This policy may be revised by MOON from time to time, but such revisions will not create less favorable conditions for clients in terms of the processing, protection, and confidentiality of personal data. Clients will be appropriately informed if such changes occur.

Purpose of Processing Your Personal Data

MOON collects, processes, uses, and stores your personal data for the following purposes:

• Provision of tourism services within MOON Resort (data is processed through reservation forms / waiting list forms and the forms completed by clients when making reservations, at check-in and at check-out);
• Fulfilment of legal obligations (reporting to competent authorities and relevant tax authorities, keeping accounting records, etc.);
• Provision of event organization services within MOON Resort (data is processed through event contracts signed by clients);
• Organization of contests;
• Advertising / direct marketing activities;
• Ensuring the security of goods and persons within MOON premises (by video monitoring of MOON premises);
• Sale of goods owned by MOON (data is processed through sales contracts / requests for offers submitted by clients).

Personal Data Processed

MOON collects, processes, uses, and stores the following categories of personal data: name and surname, address, place and date of birth, personal identification number, ID/CI series and number, nationality, e-mail, telephone/fax, gender, image, voice, bank account, etc.

For reservations made on the website www.moon.ro, we collect, process, use, and store the following personal data: name and surname, e-mail address, phone number, address, payment method, bank card number.

For joining the waiting lists via www.moon.ro, we collect, process, use, and store the following personal data: name and surname, e-mail address, phone number.

For concluding sale–purchase contracts for goods owned by MOON, we collect, process, use, and store the following personal data: name and surname, address, place and date of birth, personal identification number, ID/CI series and number, nationality, e-mail, telephone/fax, bank account and signature.

For the purpose of ensuring the security of goods and persons within MOON premises, as well as the security and integrity of MOON’s assets, we collect, process, use, and store the following personal data: image and voice.

For carrying out advertising and direct marketing activities, we collect, process, use, and store the following personal data: name and surname, e-mail address, phone number.

Nature of Providing the Data

Mandatory: With regard to personal data necessary for the provision of the services offered by the company (e.g. name and surname, address, place and date of birth, personal identification number, ID/CI series and number, nationality, gender), as well as data collected and processed for monitoring access and ensuring the security of persons and of the operator’s premises and goods (e.g. image, voice), providing such data is mandatory. Your refusal will lead to the impossibility of providing the services offered by the company.

The client understands and agrees that exercising the right to object is equivalent to MOON being unable to provide the requested service. More specifically, when MOON receives a written request whereby the client objects to the collection/processing/storage of their data, MOON is entitled to cease providing services to that client.

Optional: With regard to personal data processed for advertising/marketing purposes (e.g. e-mail, telephone/fax), providing this data is not mandatory. Your refusal to provide such data does not affect, in any way, your right to benefit from the services offered by MOON.

Recipients of Personal Data

The personal data you provide will be used mainly by MOON, which will process this data according to the purposes mentioned above.

The recorded information is intended for use by the controller and may be disclosed only to the following recipients:

• State authorities, for the fulfilment of legal obligations of the company;
• The controller’s partners, for the conclusion and performance of service/sales contracts;
• Institutions and state/government agencies, where required by law;
• The controller’s employees, for the conclusion and performance of service/sales contracts;
• Courts of law or arbitration courts, public notaries, lawyers, bailiffs, accountants, translation offices, other authorized services, appraisers, where processing is necessary for the fulfilment of our obligations or for the pursuit of our legitimate interests or those of a third party;
• Security and protection companies with which MOON has signed security services contracts for MOON premises.

For the activity of collecting, processing, using, and storing personal data, MOON RESORT S.R.L. has appointed a Data Protection Officer, who can be contacted at: relax@moon.ro relax@moon.ro

Data Retention Period

Your personal data will be processed by MOON for the duration of the validity of the contract signed with MOON, as well as afterwards, for the period necessary for the fulfilment of the obligations assumed by any of the parties.

Personal data will be stored and archived by MOON for a reasonable period of time, in accordance with the applicable legal provisions.

Video recordings (CCTV images) are stored and archived by MOON for a maximum period of 30 days from the date of recording.

Security of Processed Personal Data

MOON takes all reasonable measures to protect the personal data you provide and that we process, using appropriate security methods.

Despite these precautions, MOON cannot guarantee that unauthorized persons will never gain access to your personal data.

Your Rights

In accordance with the legal provisions in force, MOON informs you that you benefit from the following rights:

• The right to obtain from MOON confirmation as to whether or not your personal data are being processed and, if so, access to that data;
• The right to request the rectification and/or completion of processed personal data (right to rectification);
• The right to erasure of data (“right to be forgotten”);
• The right to obtain restriction of processing;
• The right to object to the processing of your personal data for advertising purposes (right to restriction of processing in this context);
• The right to lodge a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP);
• The right to receive the personal data processed by MOON or to request that it be transmitted to another controller (right to data portability);
• The right to address the courts of law.

To exercise these rights, you may send a written, dated, and signed request either by e-mail to: relax@moon.ro, or by post to the address: Oraș Bușteni, Strada Căprioarei nr. 27, CF 25494 Bușteni, Județ Prahova.

MOON undertakes to respond to clients’ requests within a maximum of 15 days from the date of receipt. Clients may contact the National Supervisory Authority for Personal Data Processing if, within the above-mentioned term, MOON has not responded to their request regarding a possible breach of their rights, or if they are not satisfied with MOON’s response.

Transfer of Personal Data Abroad

Your personal data collected, processed, and stored by MOON will not be transferred abroad.

For any other information regarding the processing of your personal data, we remain at your disposal at the contact details mentioned above.

This data security and confidentiality policy supplements the provisions of the company’s Cookies Policy and, likewise, the provisions of Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR).

MOON RESORT S.R.L.