Privacy Policy

Update date: 08-08-2025
Effective date: 08-08-2025

General terms

This site operates in accordance with all legal provisions of the Romanian state.

All information contained in this site (images, texts, graphics, symbols, web graphics, scripts, programs, as well as any other data) are the property of SC Natura Travel SRL and are protected by Romanian law and international conventions for the protection of copyright. No material may be reproduced, in part or in full, without the prior permission of the company. All rights reserved.

SC Natura Travel SRL does not assume responsibility for the security of the line you use for communication.

SC Natura Travel SRL cannot be held responsible for any damage to your equipment caused by visiting or viewing the site or downloading any information, including text, images, or files from it.

Our consent is required to link this site to other sites.

SC Natura Travel SRL does not assume responsibility for unauthorized sites to which it may be linked, nor for materials posted on this site by persons other than those authorized.

Privacy Terms

SC Natura Travel SRL appreciates the trust you show by browsing our website.

Personal data protection

According to the requirements of Regulation No. 679 of April 27, 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC, our website is obliged to manage the personal data you provide us about yourself securely and only for the specified purposes.

The purpose of data collection is:

– informing Customers about the fulfillment of the contractual and legal purpose, both in order to continue providing the company’s services and in order to communicate and keep Customers informed about all the company’s services, regarding the issuance of guarantees, execution of works, range of products and services, orders, etc. The data with which Customers register on the site will be used exclusively for the above-mentioned purposes.

– facilitating the performance of all activities related to contractual relationships and in order to fulfill all legal obligations.

– communication by using electronic mail (e-mail) / contact form on the site.

Communication with Customers

Purpose of collecting personal data

Communicating and keeping Clients informed of all company services, regarding the issuance of guarantees, execution of works, range of products and services, orders, or any other information requested by Clients who complete the contract form present on the site

Legal basis for processing personal data

The data processing is based on the consent given by the data subject and for the execution of a contract to which the data subject is a party.

Categories of data processed

The personal data that the data subject has made available to the Operator for the purpose of executing the contract: name, surname, email address, telephone number.

Duration of personal data processing

90 days after sending the response to the request submitted by the Client/Data Subject.

Order fulfillment

Purpose of collecting personal data

Fulfilling orders, according to which the Operator communicates with the data subject via email or telephone.

Legal basis for processing personal data

The legitimate interest of SC Natura Travel SRL and its partners, as well as the execution of contracts with data subjects.

Categories of data processed

The personal data that the data subject has made available to the Operator for the purpose of executing the contract: name, surname, home address, email address, telephone number, identity card number and series, passport number, personal identification number, photograph, etc.

Duration of personal data processing

10 years from the execution of the order.

Automatic profiling

SC Natura Travel SRL may carry out automatic profiling, as stated in the document entitled Cookie Policy. For more details, please read the aforementioned document.

What Cookies do we use?

The website http://www.naturatravel.ro/ and its affiliated pages use cookies. By accessing the link below you can find out more details about the types of cookies, their function, the data collected by them, the duration of cookie storage, etc.

Rights of data subjects

    • Right to withdraw consent : in the event that the processing is based on consent, you may withdraw your consent at any time and free of charge by sending an e-mail to [email protected] with the subject “withdrawal of consent”.
    • The right to lodge a complaint with a supervisory authority ;
    • The right to seek justice ;
    • Right of access : you have the right to obtain from the company confirmation as to whether or not personal data concerning you is being processed and, if so, you have the right to access that data.
    • Right to rectification : you have the right to obtain from the company, without undue delay, the rectification of inaccurate personal data concerning you. Taking into account the purposes for which the data were processed, you have the right to obtain the completion of incomplete personal data, including by providing a supplementary statement.
    • Right to erasure of data (“right to be forgotten”): in situations where the data are no longer necessary for the purposes, consent has been withdrawn and there is no other legal basis for the processing, you object to the processing and there are no overriding legitimate grounds for the processing or the personal data have been processed unlawfully, you have the right to obtain the erasure of data concerning you without undue delay.
    • Right to restriction of processing : you have the right to obtain from the company restriction of processing if one of the following cases applies:

(a) you contest the accuracy of the data, for a period that allows us to verify the accuracy of the data;

(b) the processing is unlawful and you oppose the erasure of the personal data, requesting instead the restriction of their use;

(c) we no longer need the personal data for the purpose of processing, but you request it from us for the establishment, exercise or defense of a right in court;

(d) you have objected to the processing in accordance with Article 21(1) of the GDPR, for the period during which it is verified whether the legitimate rights of the company override your rights.

    • Right to data portability : you have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format and you have the right to transmit these data to another controller, without hindrance from us, if:

(a) the processing is based on consent pursuant to point (a) of Article 6(1) or point (a) of Article 9(2) of the GDPR or on a contract pursuant to point (b) of Article 6(1) of the GDPR; and

(b) the processing is carried out by automated means.

    • The right not to be subject to a decision based solely on automated processing, including profiling , which produces legal effects concerning you or similarly significantly affects you. You do not have this right if the decision:

(a) it is necessary for the conclusion or performance of a contract between you and a data controller;

(b) it is authorised by Union or national law to which the controller is subject and which also lays down suitable measures to safeguard the rights, freedoms and legitimate interests of the data subject; or

(c) is based on your explicit consent.

    • Timeframe : The Company will attempt to respond to your request within 30 days. However, the timeframe may be extended for specific reasons related to the specific legal right or complexity of your request.
    • Restriction of access : In certain situations, the Company may not be able to provide you with access to all or some of your personal data due to legal requirements. If the Company denies your request for access, we will inform you of the reason for the denial.
    • Inability to identify you : In some cases, the Company may not be able to search for your personal data due to the identifiers you provide in your request. An example of personal data that the Company cannot consult when you provide your name and email address is data collected through cookies by your browser. In such cases, if we cannot identify you as the data subject, we are unable to comply with your request unless you provide additional information that allows identification.

To exercise your legal rights, please contact us at the email address [email protected]  

Basic notions, terminology regarding the Regulation on the protection of individuals with regard to the processing of personal data and on the free movement of such data

The protection of individuals with regard to the processing of personal data is a fundamental right provided for in the Charter of Fundamental Rights of the European Union and in the Treaty on the Functioning of the European Union (TFEU).

The protection of personal data represents the right of the individual to have those characteristics that lead to his or her identification protected and the correlative obligation of the state to adopt appropriate measures to ensure effective protection.

Personal data means any information relating to an identified or identifiable natural person (“data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, address, personal identification number, identification number, location data, an online identifier or to one or more factors specific to his or her physical, physiological, genetic, mental, economic, cultural or social identity.

Processing of personal data means any operation or set of operations which is performed upon personal data or upon sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

The Data Controller is the natural or legal person, governed by public or private law, who determines the purposes and means of the processing. This means that the controller has decided to process personal data through certain operations, carried out by automated means, as well as by means other than automated means.

Processor means the natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.

Incident , or personal data security breach, means a breach of security that leads, accidentally or unlawfully, to the destruction, loss, alteration, or unauthorized disclosure of, or access to, personal data transmitted, stored, or otherwise processed.

Principles of processing personal data of

SC Natura Travel SRL  

SC Natura Travel SRL processes personal data according to the following principles:

(a) lawfully, fairly and transparently towards the data subject (“legality, fairness and transparency”);

(b) collected for specified, explicit and legitimate purposes and not further processed in a way incompatible with those purposes; further processing for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes shall not be considered incompatible with the initial purposes, in accordance with Article 89(1) (‘purpose limitation’);

(c) adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed (“data minimisation”);

(d) accurate and, where necessary, kept up to date; all necessary steps must be taken to ensure that personal data which are inaccurate, having regard to the purposes for which they are processed, are erased or rectified without delay (“accuracy”);

(e) kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the data are processed; personal data may be stored for longer periods insofar as they will be processed solely for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Article 89(1), subject to the implementation of appropriate technical and organisational measures provided for in this Regulation to safeguard the rights and freedoms of the data subject (‘storage limitations’);

(f) processed in a manner that ensures adequate security of personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, by taking appropriate technical or organisational measures (“integrity and confidentiality”).

Update and/or modification of the content of this Notice

SC Natura Travel SRL  may update and/or modify the content of this document. In the event of update/modification, SC Natura Travel SRL  will always publish the most recent form. To stay informed, please visit our page regularly.

About Cookies

A cookie is a small text file that a website saves on your computer or mobile device when you visit the site. Cookies are widely used to make websites functional or work more efficiently, as well as to provide information to website owners.

The website www.naturatravel.ro uses Google Analytics, a web analysis service provided by Google, Inc. (“Google”) that helps analyze the use of the website. For this purpose, Google Analytics uses “cookies”, which are text files placed on your computer.

The information generated by the cookie about how the website is used – standard internet usage log information ( including your IP address) and information about visitor behavior in an anonymous form – is transmitted to and stored by Google, including on servers in the United States. Before being transmitted to Google, your IP address is anonymized.

In accordance with its Privacy Shield certification, Google declares that it complies with the EU-US Privacy Shield Framework. Google may transfer information collected by Google Analytics to a third party where required to do so by law or where such third party processes the information on Google’s behalf.

In accordance with the Google Analytics terms of use, Google will not associate users’ IP addresses with any other data held by Google.

You can refuse the use of Google Analytics cookies by downloading and installing the Google Analytics Opt-out Browser Add-on.

    • Google Analytics Opt-out Browser Add-on

You can control and/or delete cookies as you wish. You can delete all cookies that are already on your computer and you can configure most browsers to prevent their placement.

    • All about cookies

Most browsers allow you to:

    • see what cookies you have and delete them individually
    • block third-party cookies
    • block cookies from certain sites
    • block the setting of all cookies
    • delete all cookies when you close your browser

If you choose to delete cookies, you should be aware that any preferences you may have will be lost. Also, if you block cookies completely, many websites (including ours) will not function properly. For these reasons, we do not recommend that you completely block cookies when using the www.naturatravel.ro website.