Privacy Policy

Introduction

Welcome to EcoRomania's Privacy Policy. This document outlines how we collect, use, store, and protect your personal information when you visit our website or use our services. We are committed to ensuring the privacy and security of your data in compliance with applicable data protection laws, including the General Data Protection Regulation (GDPR).

EcoRomania ("we", "our", or "us") respects your privacy and is dedicated to transparent information practices. This policy applies to information collected through our website, mobile applications, and during our eco-tourism activities and conservation projects.

Information We Collect

Personal Information

We may collect the following types of personal information:

• Contact information (name, email address, phone number, postal address)
• Account credentials if you create an account on our platform
• Billing and payment information when you make a purchase
• Demographic information (age, gender, nationality) when relevant to our services
• Health information when necessary for safety during outdoor activities
• Emergency contact details
• Your preferences and interests related to our services

Usage Information

We automatically collect certain information about your interaction with our website:

• IP address and device information
• Browser type and settings
• Date and time of visits
• Pages viewed and features used
• Referral sources
• Session duration
• Geographic location (country or city level)

How We Use Your Information

We use your personal information for the following purposes:

• To provide and manage our eco-tourism services and conservation projects
• To process bookings, reservations, and payments
• To communicate with you about your inquiries, bookings, or participation in our activities
• To send you important information about changes to our terms, conditions, and policies
• To personalize your experience and provide content that may interest you
• To send newsletters and marketing communications (where you have consented)
• To improve our website, services, and customer experience through analytics
• To ensure safety during outdoor and wilderness activities
• To comply with legal obligations and resolve disputes

Legal Basis for Processing

We process your personal data on the following legal grounds:

• Contractual necessity: Processing needed to fulfill our contractual obligations to you
• Consent: Where you have given clear consent for us to process your personal data for a specific purpose
• Legitimate interests: Where processing is necessary for our legitimate interests, provided these interests don't override your fundamental rights
• Legal obligation: Where we need to process your data to comply with a legal requirement
• Vital interests: In rare emergency situations to protect someone's life

Cookies and Similar Technologies

Our website uses cookies and similar technologies to enhance your browsing experience, analyze usage patterns, and deliver personalized content. Cookies are small text files stored on your device that help us recognize your browser and remember certain information.

We use the following types of cookies:

• Essential cookies: Required for basic website functionality
• Preference cookies: Remember your settings and preferences
• Analytics cookies: Help us understand how visitors interact with our website
• Marketing cookies: Track visitors across websites to enable targeted advertising

You can control cookies through your browser settings. However, disabling certain cookies may limit your ability to use some features of our website.

Data Sharing and Disclosure

We may share your personal information with the following categories of recipients:

• Service providers: Third-party companies that help us operate our website, process payments, or deliver services
• Partners: Local guides, accommodation providers, and conservation organizations that work with us to deliver experiences
• Regulatory authorities: Government agencies when required by law
• Professional advisors: Such as lawyers, bankers, auditors, and insurers

We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not sell your personal information to third parties.

Data Security

We have implemented appropriate technical and organizational measures to protect your personal information against unauthorized access, accidental loss, alteration, or disclosure. These measures include:

• Encryption of sensitive data
• Regular security assessments
• Access controls and authentication requirements
• Staff training on data protection
• Secure network infrastructure

While we strive to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security but continue to improve our safeguards as technology evolves.

Data Retention

We retain your personal information for as long as necessary to fulfill the purposes for which we collected it, including for the purposes of satisfying any legal, accounting, or reporting requirements.

To determine the appropriate retention period, we consider:

• The amount, nature, and sensitivity of the personal data
• The potential risk of harm from unauthorized use or disclosure
• The purposes for which we process your personal data
• Whether we can achieve those purposes through other means
• The applicable legal requirements

Your Privacy Rights

Depending on your location and applicable laws, you may have the following rights regarding your personal data:

• Right to access: Request a copy of the personal information we hold about you
• Right to rectification: Request correction of incomplete or inaccurate information
• Right to erasure: Request deletion of your personal data in certain circumstances
• Right to restrict processing: Request temporary or permanent limitations on our processing of your data
• Right to data portability: Request transfer of your data to you or a third party in a machine-readable format
• Right to object: Object to processing based on legitimate interests or direct marketing
• Right to withdraw consent: Withdraw previously given consent for data processing
• Right to complain: Lodge a complaint with a supervisory authority

To exercise any of these rights, please contact us using the details in the "Contact Us" section below. We may need to request specific information from you to confirm your identity.

International Data Transfers

We operate primarily in Romania and the European Union. However, some of our service providers may be located outside the European Economic Area (EEA). When we transfer personal data outside the EEA, we ensure a similar degree of protection is afforded to it by implementing safeguards such as:

• Transferring to countries that have been deemed to provide an adequate level of protection
• Using specific contracts approved by the European Commission
• Implementing standard contractual clauses
• Using approved certification mechanisms or codes of conduct

Children's Privacy

Our website and services are not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided us with personal information, please contact us so that we can take appropriate steps.

For educational programs and family activities where children participate, we collect information with parental consent and in accordance with applicable laws regarding children's data protection.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. When we make changes, we will update the "Last Updated" date at the top of this Privacy Policy and notify you through the website or by email for significant changes.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

We will respond to your inquiry as soon as possible and within legal timeframes.