Privacy Policy

Confidentiality and security are core values of Hotel Ski & Sky and, consequently, we are committed to ensuring the User’s privacy at all times and to not collecting unnecessary information. Below, we provide all the necessary information regarding our Privacy Policy in relation to the personal data we collect, explaining:

• Who is responsible for processing your data
• For what purposes we collect the data we request
• The legal basis for its processing
• How long we retain it
• To whom your data is disclosed
• What your rights are

 

Data Controller

Hotel Ski & Sky is part of Olala!, made up of the companies listed in Annex I, which may act as data controllers or data processors, as applicable.

 

MOUNTAIN PROJECT SRL

Prahova,Sinaia, B-dul Carol I

nr. 8, spatiu comercial

legal@olala.com

 

Purposes, Legal Basis, and Data Retention for Data Submitted Through:

EMAIL COMMUNICATIONS

Purpose: To respond to your requests for information, handle your inquiries, and answer your questions or concerns.

Legal Basis: The user’s consent when requesting information via email.

Retention: Once your request has been answered by email, provided it has not resulted in further data processing.

 

CONTACT FORM

Purpose: To provide a means for you to contact us and respond to your information requests, as well as to send you communications about our products, services, and activities, including by electronic means, if you check the acceptance box.

Legal Basis: The user’s consent when requesting information via the contact form and when checking the box to receive information.

Retention: Until your request has been resolved via the form or answered by email, provided it has not resulted in further processing. If you have agreed to receive commercial communications, until you request to unsubscribe.

 

NEWSLETTER SUBSCRIPTION

Purpose: To send our commercial newsletter and informative and promotional communications about products or services that may be of interest to you, including through electronic means.

Legal Basis: User consent when subscribing to commercial communications and/or newsletters.

Retention: Until the data subject withdraws their consent and requests cancellation of the subscription.

 

WHISTLEBLOWING CHANNEL

Purpose: To process and manage reports submitted through any of the available channels (form, email, postal mail, or in person).

Legal Basis: Compliance with a legal obligation.

Retention: During the processing of the report and, once concluded, for the legally established periods to address potential liabilities. In any case, the whistleblower’s personal data will be deleted from the reporting management system after 3 months.

 

RESERVATION FORM

Purpose: To process and manage your reservation and, where applicable, guarantee payment, and to send you commercial information, including by electronic means.

Legal Basis: Reservation request agreement and the user’s consent when checking the box to receive information.

Retention: For the duration of the reservation request and, once formalized, for the legally required retention periods to address potential liabilities. If you have agreed to receive commercial communications, until you request to unsubscribe.

 

*If you make a reservation on behalf of a third party, you must ensure that the occupant has been informed, prior to providing their personal data, of the contents of this Privacy Policy, particularly regarding the processing of their personal data by the companies identified in the corresponding annex. You also guarantee that you are authorized to provide such data.

 

CHECK-IN FORM

Purpose: To process and manage your stay, as well as the associated services.

Legal Basis: Service provision contract.

Retention: Your data will be retained during your stay and, once completed, for the legally required retention periods to address potential liabilities.

 

PROPERTY OWNER REGISTRATION FORM

Purpose: To process and manage your registration as a property owner, allowing you to access the platform and rent out your home easily and free of charge. To send informative communications about our services, including by electronic means.

Legal Basis: The user’s consent when requesting registration as a registered property owner.

Retention: For the duration of the relationship and, where applicable, for the legally required retention periods to address potential liabilities. If you have agreed to receive commercial communications, until you request to unsubscribe.

 

Obligation to Provide Personal Data and Consequences of Not Doing So

Providing personal data requires a minimum age of 14 years or, where applicable, sufficient legal capacity to enter into a contract.

 

The requested personal data is necessary to manage your requests and/or provide the services you may contract. If you do not provide this data, we will not be able to properly assist you or provide the requested service.

 

Data Recipients

Your data is confidential and will not be disclosed to third parties unless required by law.

Certain data from your identity document will be disclosed to law enforcement authorities as required by law (Organic Law 4/2015 on the Protection of Public Security and implementing regulations): identity document number, document type, date of issue, first name, first surname, second surname, sex, date of birth, country of nationality, date of entry.

And any other disclosures legally required. Where applicable, data may also be shared with third parties necessary for the provision of contracted additional services.

 

Rights Regarding Your Personal Data

Any person may withdraw their consent at any time when it has been granted for the processing of their data. In no case will the withdrawal of consent affect the execution of subscription contracts or relationships established prior to such withdrawal.

You may also exercise the following rights:

• Request access to your personal data or rectification if it is inaccurate
• Request deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected
• Request restriction of processing under certain circumstances
• Object to the processing of your data for reasons related to your particular situation
• Request data portability in cases provided for by law
• Any other rights recognized under applicable regulations

Where and how to exercise your rights: By submitting a written request to the data controller at the postal or email address indicated above, stating the reference “Personal Data,” specifying the right you wish to exercise and the personal data concerned.

If you disagree with the company regarding the processing of your data, you may file a complaint with the Data Protection Authority.

 

Security of Your Personal Data

To safeguard the security of your personal data, we inform you that we have adopted all necessary technical and organizational measures to ensure the security of the data provided and to prevent its alteration, loss, unauthorized processing, or access.

 

Updating Your Data

It is important that you inform us of any changes to your personal data so that we can keep it up to date. Otherwise, we cannot guarantee its accuracy.

We are not responsible for the privacy policy regarding personal data that you may provide to third parties through links available on our website.

This Privacy Policy may be amended to adapt to changes on our website, as well as to legislative or jurisprudential changes relating to personal data. Therefore, it must be reviewed each time you provide personal data through this website.