Last updated: June 2026
1. Introduction
The data controller is SC MAT VACATION SRL, a Romanian legal entity registered at the Trade Register under EUID: ROONRC.J2017001447325, unique registration code (CUI) RO38240680, with registered office at Calea Turnișorului Nr. 98, Sibiu, Sibiu County, Romania (hereinafter referred to as “the Controller”, “we” or “Vila Anca”).
SC MAT VACATION SRL respects the confidentiality of your personal data and undertakes to protect it in accordance with Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data (GDPR), as well as applicable national legislation (Law no. 190/2018).
This Privacy Policy describes how we collect, use, store, and protect personal information when you use our website www.vilaanca.ro or make a booking at Vila Anca.
2. Personal Data Collected
We may collect and process the following categories of personal data:
- Identification data:
- Natural persons: first name, last name, national identification number/passport ID/driving license;
- Legal entities: company name, tax identification number (CUI).
- Contact data: email address, phone number, country of origin, residential address;
- Booking-specific data: check-in and check-out dates, number of guests, special preferences;
- Financial data: payment information required to process the booking (managed through secure third-party platforms);
- Technical data: IP address, browser type, pages visited, session duration — collected automatically through cookies and analytics tools;
- Communications: messages sent via the contact form or email.
3. Purpose and Legal Basis for Processing
We process your data for the following purposes and on the following legal basis:
- Managing bookings and performing the accommodation contract — Art. 6(1)(b) GDPR;
- Communicating with guests regarding the services offered — Art. 6(1)(b) and (f) GDPR;
- Compliance with legal obligations (e.g. guest registration as required by national legislation) Art. 6(1)(c) GDPR;
- Improving our services and website — legitimate interest, Art. 6(1)(f) GDPR;
- Sending marketing communications (newsletter, special offers), with your consent — Art. 6(1)(a) GDPR.
4. Data Retention Period
Your personal data is retained for as long as necessary to fulfil the purposes for which it was collected:
- Booking data: 5 years from the date of the last stay, in accordance with fiscal and accounting legal obligations;
- Marketing data: until withdrawal of consent or upon request for erasure;
- Technical data (logs, cookies): in accordance with our cookie policy, between 30 days and 2 years.
5. Data Recipients
SC MAT VACATION SRL does not sell or transfer your data to third parties for commercial purposes. Data may be shared, strictly to the extent necessary, with:
- Online booking platforms (e.g. Booking.com, Airbnb, Kayak) through which you made your reservation;
- Electronic payment service providers;
- IT service providers (hosting, email, web analytics);
- Public authorities, where we are required to do so by law.
All partners we work with process data exclusively on the basis of documented instructions and in compliance with GDPR.
6. Cookies
The website www.vilaanca.ro uses cookies to enhance your browsing experience. Cookies are small text files stored in your browser. We use:
- Strictly necessary cookies: essential for the website to function;
- Performance cookies: collect anonymous information about website usage (e.g. Google Analytics);
- Functionality cookies: remember your preferences (e.g. selected language).
You can manage or disable cookies through your browser settings. Disabling certain cookies may affect the functionality of the website.
7. International Data Transfers
SC MAT VACATION SRL does not transfer your personal data outside the European Economic Area (EEA). All collected data is processed and stored exclusively within the EEA, ensuring an adequate level of protection as required by GDPR.
8. Your Rights
In accordance with GDPR, you have the following rights:
- Right of access: you may request a copy of the data we hold about you;
- Right to rectification: you may request correction of inaccurate or incomplete data;
- Right to erasure (“right to be forgotten”): you may request the deletion of your data, within legal limits;
- Right to restriction of processing: you may request that we limit how we use your data;
- Right to data portability: you may receive the data you provided in a structured, commonly used format;
- Right to object: you may object to the processing of your data for direct marketing purposes;
- Right to withdraw consent: at any time, without affecting the lawfulness of processing carried out prior to withdrawal;
- Right to lodge a complaint: with the National Supervisory Authority for Personal Data Processing (ANSPDCP), www.dataprotection.ro.
To exercise these rights, please contact us at: [email protected] or by phone: +40 (743) 113 092.
9. Policy Updates
We reserve the right to update this Privacy Policy periodically. The updated version will be published on www.vilaanca.ro, indicating the date of the last revision. We recommend that you consult this page regularly.
10. Contact
For any questions or requests related to the processing of your personal data, please contact us:
- Company name: SC MAT VACATION SRL
- Address: Calea Turnișorului Nr. 98, Sibiu, Sibiu County, Romania
- Phone: +40 (743) 113 092
- Email: [email protected]
- Website: www.vilaanca.ro