Privacy and cookies
Who we are
The data controller is [company name — to be added], which runs the Buzău Adventure / Rafting Club Nehoiu activities, based in Păltineni, the town of Nehoiu, Buzău county, Romania. You can reach us at any time by the phone, WhatsApp or e-mail on the contact page.
What we use
The details you give us: in a booking request, your name, phone and, if you like, e-mail, the day, the activities, the number of adults and children and your message; in a gift-voucher request, your contact details and, if you choose, the recipient’s name and contact details and your dedication. If you call us or write on WhatsApp, we see your number and message, as in any conversation. As with any website, the hosting server also handles technical data automatically (IP address, browser type, the page asked for), needed for the site to work and to protect it from abuse.
Why, and on what basis
We use your details to answer your request and agree the details of your activity or voucher (Art. 6(1)(b) GDPR – steps taken at your request before a booking), to keep the site secure and see roughly how much it is visited (Art. 6(1)(f) – our legitimate interest) and to meet legal obligations, such as accounting records when you pay (Art. 6(1)(c)). We do not advertise with your data, send newsletters or sell it to anyone.
Who else has access
Only our team sees your details, in the website’s password-protected admin. We are helped by providers who handle them only on our behalf: Vercel Inc. (website hosting; transfers outside the European Union rely on the EU–US Data Privacy Framework and standard contractual clauses) and Supabase (the database, on servers in the European Union). If you choose to write to us on WhatsApp, the messages go through WhatsApp (Meta), under their rules. The map loads from OpenStreetMap, which receives your IP address to send the map images, without cookies; the Google Maps, Waze and Apple Maps buttons open those apps, under their own policies. The live camera on the Live page comes from YouTube in its no-cookie mode; when you start the video, YouTube (Google) may process data under its own policy. We ask Open-Meteo for the weather ourselves, from the server, without your data.
How long we keep them
Booking requests are deleted automatically after two years, and gift-voucher requests two years after the voucher stops being valid. The hosting’s technical data is kept only for a few days, as needed for security. Accounting records are kept as long as the law requires.
Cookies
The website uses no cookies. To work, it keeps a few small technical notes in your browser (for example, whether you have already seen the opening film or which activity you were looking at); they do not identify you, never leave your device and disappear when you clear them in your browser. That is why we do not ask for consent with a cookie banner.
Your rights
You can ask at any time to see the data we hold about you, to correct it, delete it, restrict it, receive it in a format you can reuse, or object to its use. Write to us or call us using the contact page; we reply within 30 days at most. If you are not satisfied, you can complain to the Romanian data protection authority (ANSPDCP), 28-30 G-ral Gheorghe Magheru Blvd, Bucharest, www.dataprotection.ro.
Keeping data safe
The website uses encrypted connections only (HTTPS), the forms are protected against automated submissions, and only our team can enter the admin, with a password. For children we only ask how many there are and, if needed, their age.
Updates
If anything changes in how we use data, we update this page. Last updated: 4 November 2026.