Privacy Policy Data
Information on the confidentiality of personal data (video surveillance).
According to Regulation (EU) 679/2016 on the protection of individuals with regard to the processing of personal data, N & C TURISM SRL is a data controller.
Contact details of N & C TURISM SRL, registered office: Bdul. Saturn nr. 47, Brasov, email: dpi@hotelcubix.ro, tel.: +40 368 006 010.
How We Collect / Process Information About You
- access areas and public spaces;
- restricted areas (staff only);
- around buildings to protect outdoor spaces;
- places for the safekeeping, storage and handling of document storage media.
Legal Basis for the Processing of Personal Data
- Decision no. 301 of April 11, 2012 for the approval of the Methodological Norms of the Law no. 333/2003 on the guarding of objectives, goods, valuables and protection of persons;
- Regulation (EU) 679/2016 on the protection of individuals with regard to the processing of personal data;
- Law no. 190/2018 on measures implementing Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of individuals with regard to the processing of personal data;
- Decision No 174/2018 of the National Supervisory Authority for Personal Data Processing – ANSPDCP on the list of operations for which it is mandatory to conduct the personal data protection impact assessment.
Categories of Recipients of Personal Data
To the extent permitted by data protection legislation, in order to fulfill our contractual and legal obligations, we may transmit or allow access to the recorded images to national authorities (at the request of criminal investigation bodies or at the request of courts of law).
Intellectual and Industrial Property Rights (IPR)
The collected information is stored in electronic form, and the following technical and organizational measures are implemented for their protection:
- limiting the storage time of images according to legal requirements;
- restricted physical access to the premises where the storage media (DVRs) on which the recorded images are stored;
- Limiting access to real-time images of the employees/agents assigned to carry out security activities;
- access control to records. Only the system administrator (appointed by N & C TURISM SRL) has the right to grant, modify or cancel the right of access of users;
- training on data confidentiality requirements and confidentiality agreements for persons (employees of N & C TURISM SRL or authorized persons) who view the images that are running in real time or have access to the recorded images;
- contractual assurance or agreements that the authorized persons used implement technical and organizational data protection measures.
Storage Location and Duration of Storage
The personal data collected is stored in premises and on equipment located within N & C TURISM SRL The duration of storage is in accordance with legal requirements (30 days), after this interval the images are automatically deleted in the order in which they were recorded. In the event of a security incident or the recording of a well-founded request from a data subject, the duration of image storage may exceed the normal limits depending on the time required to further investigate the security incident or to resolve the request received (at the request of criminal investigation bodies or at the request of the courts).
Personal Data Processing Rights
Under Regulation (EU) 679/2016 you have the following rights:
- right to information. You have the right to receive information about how and why we process your personal data;
- the right to obtain from N & C TURISM SRL a confirmation as to whether or not personal data concerning you are processed and, if so, access to the respective data;
- the right to rectify personal data concerning you;
- the right to erasure of personal data concerning you or restriction of processing, subject to certain exceptions;
- the right to object to processing, subject to certain exceptions.
If you wish to make a request under Regulation (EU) 679/2016, in order for us to be able to respond to you in an efficient way you will need to provide us with your identity (full name, identification data) and indications of the information you are requesting.
In the case of a request for access to recorded images that concern you, the request can be solved by granting access to the requested recording or by sending a copy of it. The request for access must mention the date, time and location for which access to the surveillance camera recording is requested.
The recording provided when requesting access depends on the technical conditions of the recording, the conditions under which the images were taken and the rights of other persons who may appear in the recording (images in which other persons appear will be edited so that it is not possible to recognize/identify them). It is possible to restrict access in order to protect the rights and freedoms of other persons (e.g. if other persons appear in the images and it is not possible to obtain their consent, or their images cannot be edited).
If you have any complaints about the way in which we process your personal data you have the right to contact the personal data protection officer of N & C TURISM SRL, e-mail dpi@hotelcubix.ro, address. Saturn nr. 47, Brasov, telephone: +40 368 006 010 or to lodge a complaint with the National Supervisory Authority for the Processing of Personal Data, www.dataprotection.ro
Changes to the Data Privacy Notice
In view of the possibility of identifying new processing of personal data, the fact that personal data protection laws and the recommendations of the supervisory authority change and improve periodically, it is possible that this data privacy notice may also change. We reserve the right to change this privacy notice at any time, for any reason and without notice. Any changes to the privacy notice will be available for consultation with the Compliance Department and posted at the point of business: Hotel Cubix, Bdul. Saturn nr. 47, Brasov.
Questions, Concerns, Complaints
If you have any questions about your personal data, if you wish to exercise your rights or if you have any queries or complaints about the way we manage your personal data, please contact the Data Protection Officer at the following e-mail address: dpi@hotelcubix.ro.
Responsibility
What is a cookie?
An “Internet Cookie” (also known as a “browser cookie” or “HTTP cookie” or simply “cookie”) is a small file, made up of letters and numbers, that will be stored on a user’s computer, mobile terminal or other equipment from which the Internet is accessed.
The cookie is installed by a request issued by a web-server to a browser (e.g. Internet Explorer, Firefox, Chrome) and is completely “passive” (it does not contain any software programs, viruses or spyware and cannot access the information on the user’s hard drive).
A cookie consists of 2 parts: the name and the content or value of the cookie. Furthermore, the lifetime of a cookie is determined; technically, only the webserver that sent the cookie can access it again when a user returns to the website associated with that webserver.
Cookies themselves do not require personal information to be used and, in most cases, do not personally identify internet users.
• There are 2 broad categories of cookies:
– Session cookies – these are stored temporarily in the cookie folder of the web browser so that the browser remembers them until the user exits the website or closes the browser window (e.g. when logging in/out of a webmail or social networking account).
– Persistent Cookies – these are stored on the hard-drive of a computer or device (and generally depend on the cookie’s default lifetime). Persistent cookies also include those placed by a website other than the one the user is visiting at the time – known as ‘third party cookies’ – which can be used anonymously to remember a user’s interests so that advertising can be delivered that is as relevant as possible to the user.
What are the advantages of cookies?
A cookie contains information that links a web-browser (the user) to a specific web-server (the website). If a browser accesses that web-server again, it can read the information already stored and react accordingly.
Cookies provide users with a pleasant browsing experience and support the efforts of many websites to provide convenient services to users: e.g. online privacy preferences, site language options or relevant advertising.
What is the lifetime of a cookie?
Cookies are managed by webservers. The lifetime of a cookie can vary significantly depending on the purpose for which it is placed. Some cookies are used exclusively for a single session (session cookies) and are not retained once the user has left the website and some cookies are retained and reused each time the user returns to that website (‘permanent cookies’). However, cookies can be deleted by a user at any time through browser settings.
What are third-party cookies?
Certain sections of content on some websites may be provided through third parties/providers (e.g. a news box, a video or an advertisement). These third parties may also place cookies through the website and they are called “third party cookies” because they are not placed by the owner of that website. Third party providers must also comply with applicable law and the privacy policies of the website owner.
What information is stored and accessed through cookies?
Cookies store information in a small text file that allows a website to recognize a browser. The webserver will recognize the browser until the cookie expires or is deleted. The cookie stores important information that enhances the Internet browsing experience (e.g. setting the language in which you want to access a site; keeping a user logged into a webmail account; online banking security; keeping products in your shopping cart, etc).
Why are cookies important for the Internet?
Cookies are central to the efficient functioning of the Internet, helping to generate a user-friendly browsing experience tailored to each user’s preferences and interests. Refusing or disabling cookies may make some websites unusable.
Rejecting or disabling cookies does not mean that you will no longer receive online advertising – only that it will no longer be able to take into account your preferences and interests, as evidenced by your browsing behavior.
• Examples of important uses of cookies (which do not require authentication of a user via an account):
– Content and services tailored to user preferences – news categories, weather, sport, maps, public and government services, entertainment sites and travel services.
– Offers tailored to users’ interests – password retention, language preferences (e.g. display search results in Romanian).
– Retain child protection filters for Internet content (family mode options, safe search functions).
– Limiting ad frequency – limiting the number of times an advertisement is shown to a particular user on a website.
– Provide more relevant advertising to the user.
– Measurement, optimization and analytics features – such as confirming a certain level of traffic to a website, what type of content is being viewed and how a user gets to a website (e.g. through search engines, directly, from other websites, etc.) Websites run these analytics on their usage to improve their websites for the benefit of their users.
– Security and privacy issues
Cookies are NOT viruses! They use plain text formats. They are not made up of pieces of code so they cannot be executed nor can they auto-run. Consequently, they cannot be duplicated or replicated on other networks to run or replicate themselves again. Since they cannot perform these functions, they cannot be considered viruses.
Cookies can still be used for negative purposes. Because they store information about user preferences and browsing history, both on a particular site and on many other sites, cookies can be used as a form of Spyware. Many anti-spyware products are aware of this fact and constantly mark cookies for deletion as part of their anti-virus/anti-spyware removal/scanning procedures.
In general, browsers have built-in privacy settings that provide different levels of cookie acceptance, validity period and automatic deletion after the user has visited a particular site.
Other security issues related to cookies
Since identity protection is very valuable and is the right of every Internet user, it is advisable to know what possible problems cookies can create. Because cookies constantly transmit information back and forth between the browser and the website, if an attacker or unauthorized person intervenes in the data transmission, the information contained in the cookie may be intercepted. Although very rare, this can happen if the browser connects to the server using an unencrypted network (e.g. an unsecured WiFi network).
Other cookie-based attacks involve incorrect cookie settings on servers. If a website does not require the browser to use only encrypted channels, attackers can use this vulnerability to trick browsers into sending information through insecure channels. Attackers then use the information to gain unauthorized access to certain websites. It is very important to be careful in choosing the most appropriate method to protect your personal information.
Tips for safe and responsible browsing based on cookies.
Due to their flexibility and the fact that most of the most visited and largest sites use cookies, they are almost unavoidable. Disabling cookies will not allow the user to access the most popular and widely used sites including Youtube, Gmail, Yahoo and others.
• Here are a few tips that can ensure that you can browse worry-free but with cookies:
– Customize your browser’s cookie settings to reflect a level of cookie security that you are comfortable with.
– If you don’t mind cookies and you are the only person using your computer, you can set long expiration times for storing your browsing history and personal access data.
– If you share access to your computer, you may consider setting your browser to delete individual browsing data each time you close your browser. This is an alternative to accessing sites that place cookies and deleting any visiting information when you close your browsing session.
– Install and constantly update your anti-spyware applications.
Many spyware detection and prevention applications include website attack detection.
This prevents the browser from accessing websites that could exploit browser vulnerabilities or download dangerous software. Make sure your browser is always up-to-date. Many cookie-based attacks exploit weaknesses in older versions of browsers.
Cookies are everywhere and cannot be avoided if you want to enjoy access to the best and biggest sites on the Internet – local or international. With a clear understanding of how they work and the benefits they bring, you can take the necessary security measures so that you can confidently surf the Internet.
How can I stop cookies?
Disabling and refusing to receive cookies may make certain websites impracticable or difficult to visit and use. Also, refusing to accept cookies does not mean that you will no longer receive/see online advertising.
It is possible to set your browser to stop accepting these cookies or you can set your browser to accept cookies from a specific site. But, for example, if you are not registered using cookies, you will not be able to leave comments.
All modern browsers offer the possibility to change cookie settings. These settings are usually found in the “options” or “preferences” menu of your browser.
– In order to understand these settings, the following links may be useful, otherwise you can use the “help” option of your browser for more details.
– Cookie settings in Internet Explorer
– Cookie settings in Firefox
– Cookie settings in Chrome
– Cookie settings in Safari