• Operator identification

MOON RESORT SRL (hereinafter referred to as MOON),  a Romanian legal entity, with its registered office in Bușteni City, Căprioarei Street no. 27, CF 25494 Bușteni, Prahova County, registered in the trade register under no. J29 / 2362/2020, having CUI 42044711 ,  processes your personal data  by automated and manual means.

This policy is completed with the legal provisions regarding the processing of personal data and the free circulation of this data, being fully subject to the Regulation on the protection of natural persons with regard to the processing of personal data and on the free circulation of this data and repeal of Directive 95/46/EC (General Data Protection Regulation) 2016/679 (GDPR).

This policy may be revised by MOON, at certain time intervals, but it will not create less favorable conditions for customers, from the point of view of processing, protection and confidentiality of personal data. Customers will be notified accordingly, if such changes occur.

• The purpose of processing  your personal data:

MOON collects, processes, uses and archives your personal data, in order to:

• the provision of tourist services within the MOON Resort premises (data processing is carried out by filling in the reservation/waiting list registration forms and the forms completed by the client when making the necessary reservations, when making the accommodation and upon check-out);
• fulfilling some legal obligations (reporting to the competent authorities and to the relevant fiscal authorities, keeping accounting records, etc.)
• the provision of event organization services, within the MOON Resort premises, (data processing is carried out through event contracts signed by clients);
• the organization of contests;
• advertising/direct marketing activity;
• ensuring the security of goods and people, within the premises belonging to MOON (through video monitoring of the premises belonging to MOON);
• the activity of selling goods owned by MOON (data processing is carried out through sales contracts/bid requests made by customers)

• Personal data processed

MOON collects, processes, uses and archives the following categories of personal data: name and surname, address, place and date of birth, personal numerical code, series and number of BI /CI, citizenship, e-mail, telephone/fax, gender , image, voice, bank account, etc.

For reservations made on the website  www.moon.ro , we collect, process, use and archive the following personal data: name and surname, email address, telephone number, address, payment method, bank card number.

For registration on the waiting lists through the website  www.moon.ro , we collect, process, use and archive the following personal data: name and surname, email address and telephone number.

In order to conclude sales-purchase contracts for the goods owned by MOON, we collect, process, use and archive the following personal data: name and surname, address, place and date of birth, personal numerical code, series and number of BI / CI, citizenship , e-mail, phone/fax, bank account and signature.

In order to ensure the security of goods and people, within the premises belonging to MOON, as well as to ensure the security and integrity of goods belonging to MOON, we collect, process, use and archive the following personal data: image and voice.

Last but not least, for the performance of advertising and direct marketing activity, we collect, process, use and archive the following personal data: name and surname, email address and telephone number.

• Nature of data provision

Mandatory :  Regarding  the personal data, necessary for the realization of the services offered by the company  (e.g. name and surname, address, place and date of birth, personal numerical code, series and number of BI / CI, citizenship, gender),  as well as those taken and processed in order to monitor the access of people and their security, as well as the operator’s premises and assets  (eg: the image, the voice.),  their provision is mandatory,  your refusal determining the impossibility of providing the services offered by the company.

The customer understands and agrees that the manifestation of his right of opposition is equivalent to the impossibility of providing the service by MOON. More precisely, when MOON receives a written request by which the Client objects to the data concerning him being the object of processing/collection/archiving, MOON is entitled to stop providing the service to the respective client.

Optional :  With regard to  personal data processed for advertising/marketing purposes  (e.g. e-mail, telephone/fax),  providing them is not mandatory ,  your refusal to provide such data not affecting in any way , your right to benefit from the services provided by MOON.

• Recipient of personal data

The personal data provided by you will be used mainly by MOON, which will use this data according to the above purpose.

The recorded information is intended for use by the operator and can only be communicated to the following recipients:

• the state authorities, in order to fulfill a legal obligation of the Company;
• the operator’s partners, in order to conclude and execute the concluded service/sales contracts;
• institutions, state and governmental agencies, if the legislation stipulates this;
• the operator’s employees, in order to conclude and execute the concluded service/sales contracts;
• judicial or arbitration courts, public notaries, lawyers, bailiffs, accountants, translation offices, other authorized services, evaluators, if the processing is necessary for the purpose of fulfilling our obligations or for the purpose of achieving the legitimate interests pursued by us or by a third party;
• the security and protection companies with which MOON has signed contracts for the provision of security and protection services within the premises belonging to MOON.

For the activity of collection, processing, use and archiving, MOON RESORT SRL has appointed a personal data protection officer, who can be contacted at the following contact details: relax@moon.ro

• Data retention period

Your personal data will be processed by MOON during the validity period of the contract signed by you with MOON, as well as subsequently, during the time necessary to fulfill the obligations assumed by any of the parties.

Personal data will be stored and archived by MOON for the reasonable period of time for archiving them, according to the legal provisions in force.

Regarding the downloaded video images, they are kept and archived by MOON for a maximum period of 30 days from the date of download.

• Security of processed personal data

MOON takes all reasonable measures to protect the personal data provided by you and processed by us, using appropriate security methods.

Despite these precautions, MOON cannot guarantee that unauthorized persons will not gain access to your personal data.

• Rights

According to the legal provisions in force, MOON will point out that you benefit from the following rights:

• The right to obtain, from MOON, a confirmation that it processes your personal data and  the right of access  to them;
• The right to request the rectification and/or completion of processed personal data ( the right to rectification );
• The right to delete data ( the right to be forgotten );
• The right to obtain  restriction of processing ;
• The right to object to the processing of your personal data for advertising purposes ( the right to restrict processing );
• The right to file a complaint  with the National Supervisory Authority for the Processing of Personal Data (ANSPDCP);
• The right to receive personal data processed by MOON, or to request their transmission to another operator ( the right to data portability ).
• The right to go to court .

In order to exercise these rights, you can apply with a written, dated and signed request, either sent by electronic mail, to the email address:  relax@moon.ro  , or by post, to the address: Oraș Bușteni, Strada Căprioarei no. 27, CF 25494 Busteni, Prahova County.

MOON undertakes to respond to customer requests, within a maximum of 15 days from the date of receipt of the request. Customers can contact the National Authority for the Supervision of the Processing of Personal Data, either in the event that, within the term indicated above, MOON has not responded to their request, regarding the violation of the rights listed above, or they are not satisfied with the response received by at MOON.

• The transfer of personal data abroad

Your personal data, collected, processed and archived by MOON, will not be transferred abroad.

For any other information regarding the processing of your personal data, we remain at your disposal, at the contact details mentioned above.

This security and confidentiality policy for the processing of your personal data is supplemented with the provisions of the company’s cookie policy and, also, with the provisions of the Regulation on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) 2016/679 (GDPR).

MOON RESORT SRL