Privacy policy

The data controller is MARABOU EVENTS SRL, with its registered office at 4 Aluniș Street, Săcele, Brașov County, Romania, registered with the Trade Register under no. J2024001053089, tax identification number 49839502, referred to below as “Marabou”. You can contact us at rezervari@marabouresort.ro or +40 774 602 925.

This policy applies to marabouresort.ro, its enquiry forms and digital interactions concerning the hotel, restaurant, pool and private or corporate events.

Depending on how you interact with us, we may process:

• identity and contact details: name, email address, phone number and preferred contact method;
• enquiry details: requested service, event type and date, attendee count, budget, accommodation needs, organisation, setup and your message;
• enquiry context: language, landing page, referral source, UTM parameters and campaign identifiers;
• proof of notice: the checked acknowledgement and applicable policy version;
• technical and security data such as IP address, device type, browser and technical logs, where generated by the website infrastructure;
• cookie preferences and usage data, only as described below.

Please do not include sensitive information in a message unless it is necessary for your enquiry.

We use data to answer enquiries, check availability and prepare a proposal, as steps requested before entering into a contract. If a booking or event is confirmed, we process data to perform the contract and meet legal obligations, including accounting and tax requirements.

We may use limited technical data to secure the website, prevent abuse, maintain service continuity and defend our rights, based on legitimate interests. Optional analytics or advertising technologies are used on the basis of consent and may be refused without affecting essential website functions. We do not make decisions producing legal effects based solely on automated processing.

Data is available to authorised Marabou personnel and, when necessary, providers supporting hosting, databases, IT maintenance, email, notifications and enquiry workflow automation. They receive only the data required for their role and are bound by contractual confidentiality and data-protection obligations.

If you accept optional measurement, Google Tag Manager and services configured through it may receive technical and usage data. When you choose to continue to Pynbooking, WhatsApp, Google Maps, the virtual tour or social networks, that service processes your data under its own policy. We may disclose data to authorities or advisers where required by law or necessary to establish or defend a legal claim.

Some global providers, including Google or Meta, may process data outside the European Economic Area. Where Marabou determines such a transfer, we rely on mechanisms recognised by applicable law, such as adequacy decisions or standard contractual clauses. For external services you access directly, the relevant provider determines the transfer arrangements.

We apply reasonable technical and organisational measures to restrict access, secure transmission and preserve data integrity. No system can, however, guarantee absolute security.

Enquiries that do not lead to a contract are kept for no longer than 3 years after the last interaction, to preserve conversation continuity and defend potential legal claims. Data relating to contracts, payments and tax documents is retained for the periods required by law. Technical logs are kept only as long as needed for security and diagnostics, then deleted or anonymised.

The website uses the necessary marabou_consent cookie to remember your choice for 180 days. Optional analytics and advertising technologies receive a “granted” signal only if you choose “Accept all”; otherwise optional storage remains denied. You can change your choice at any time through “Cookie preferences” in the footer.

Subject to the GDPR, you may request:

• access to your data and a copy;
• correction of inaccurate or incomplete data;
• erasure where there is no longer a lawful ground for retention;
• restriction of processing;
• portability of data you provided, where applicable;
• objection to processing based on legitimate interests;
• withdrawal of consent, without affecting processing carried out before withdrawal.

Send your request to rezervari@marabouresort.ro. We may request additional information to verify your identity and normally respond within one month. You may also lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing through dataprotection.ro.

The website is not intended to collect data directly from children. If an enquiry concerns an event for minors, contact details must be provided by a parent, legal guardian or another responsible adult.

We may update this policy when the website, our providers or legal requirements change. The version and update date are shown at the start of the page. For privacy questions or to exercise your rights, email rezervari@marabouresort.ro or contact MARABOU EVENTS SRL at the registered office above.