EDEN SRL (hereinafter referred to as “Eden Hill” or the “Operator”) attaches great importance to your personal data and constantly undertakes all necessary efforts to ensure that any data processing activities comply with the applicable legal requirements in this field. To this end, we have prepared this commitment, through which we undertake to respect the confidentiality of your personal data and explain what categories of personal data Eden Hill processes, how such data are used, and the purposes for which they are subject to processing operations.
This Policy applies only to the personal data that we process through our website www.edenhill.ro (hereinafter referred to as the “Website” or the “Platform”), in the context of your interaction with it by completing the forms available on the Platform, placing an order in accordance with the Policy presented on the Website, subscribing to the newsletter, making a reservation, or simply browsing the Website. We assure you that we have taken all necessary measures to ensure the confidentiality of your data, which are processed exclusively by the Operator’s personnel, previously trained and authorized to process personal data, and bound by strict confidentiality obligations.
To get to know us better, please find below our identification details.
The Operator that processes your personal data when you browse or interact with the online platform www.edenhill.ro is EDEN SRL, having its registered office in Olt County, Caracal, Intrarea Muzeului Street, registered with the Trade Register under no. J28/15/1993, with VAT no. RO3375331.
For any questions or concerns regarding the protection of personal data, you may contact us at the following email address: [email protected].
“Personal data” means, in accordance with applicable national and international legislation, any information relating to an identified or identifiable natural person. An identifiable person is one who can be identified, directly or indirectly, in particular by reference to an identification number or to one or more factors specific to their physical, physiological, psychological, economic, cultural, or social identity.
For the purposes of this Policy, the personal data subject to processing may include: first name, last name, telephone number, email address, delivery address, etc., as further detailed below.
“Processing of personal data” means any operation or set of operations performed on personal data, whether or not by automated means, such as collection, recording, organization, storage, adaptation or alteration, retrieval, consultation, use, disclosure to third parties by transmission, dissemination or otherwise making available, alignment or combination, blocking, erasure, or destruction.
Note: For the purposes of this Policy, data processing refers to processing activities carried out when you browse the website www.edenhill.ro or interact with it by completing forms available on the Platform, placing an order via the Website, or subscribing to the Operator’s newsletter.
“Operator” means the person who, alone or jointly with others, determines the purposes and means of processing personal data.
For clarity, within the meaning of this Privacy Policy, the personal data operator is Eden SRL.
“Data subject” means the person whose personal data are processed.
For the purposes of this Policy, the data subject is the Internet user who browses the website www.edenhill.ro.
“Consent” of the data subject means any freely given, specific, informed, and unambiguous indication of the data subject’s wishes by which they accept, by a statement or by a clear affirmative action, that personal data relating to them are processed.
Note: Data processing carried out via the Platform based on consent is exclusively intended for newsletter subscription and acceptance of non-essential cookies, as highlighted in the cookie pop-up.
“Third party” means a natural or legal person, public authority, agency, or body other than the data subject, the operator, the processor, and persons who, under the direct authority of the operator or the processor, are authorized to process personal data.
“Processor” means a person who processes personal data on behalf of the operator.
Your browsing of and interaction with the Website involve the processing of two categories of personal data:
- personal data voluntarily disclosed to the Operator (e.g., via order or contact forms or newsletter subscription), collected individually;
- data provided involuntarily through simple browsing of our Website.
If invoicing is requested for a legal entity, please note that the data required and entered on the Website on behalf of a legal entity do not constitute personal data under Regulation (EU) 2016/679 (GDPR) (e.g., company email address such as name@office, company landline number, etc.).
If personal data of a company’s legal representative are provided (first name, last name, phone number, email address), such person shall be considered a data subject under GDPR, and all applicable protection measures will apply.
Users are duly informed about the processing of personal data when providing their data via the Website forms, thus Eden Hill fulfilling its legal obligation to inform users.
Eden Hill collects, based on the voluntary provision by the data subject, the following categories of personal data:
- first and last name;
- phone number;
- email address;
- any other information you choose to provide in the designated form field regarding order details or preferences.
Note: If the order is paid online by bank card, your payment data are not processed by the Operator, as payment processing is subject to the privacy policies of our payment processing partners. Some data (e.g., card number) may be stored for future purchases via specific cookies, only if you consent to their storage at browser level. Eden Hill does not have access to card payment details.
Other personal data provided during calls, such as:
- first and last name;
- email address;
- bank account (for refunds), where applicable;
- call traffic data (start/end date, duration, network, called/calling number, etc.).
- first and last name;
- phone number;
- email address.
- first and last name;
- phone number;
- email address.
The data of the person performing check-in, accompanied by a copy/photo of the identity document uploaded exclusively through the check-in interface. Eden Hill will never request ID copies via email, WhatsApp, or similar channels.
Eden Hill also processes marketing and communication data only based on prior consent, as well as technical and browsing data via cookies and similar technologies. The cookie policy is available on our Website.
If unnecessary personal data are provided, Eden Hill reserves the right to delete them immediately.
The Operator may also involuntarily collect technical data such as IP address, browser version, time zone, operating system, device platform, etc. These data are not used for identification purposes.
Payment service providers process personal data as independent controllers, under their own privacy policies.
Eden Hill may retain personal data even after a deletion request, where permitted under Article 13 GDPR, including for contract performance, legal obligations, public interest, legitimate interests, or legal defense.
Eden Hill processes personal data for the following purposes and legal grounds:
- contract performance (Art. 6(1)(b) GDPR);
- consent (Art. 6(1)(a) GDPR) for marketing and non-essential cookies;
- legitimate interest (Art. 6(1)(f) GDPR);
- legal obligations related to guest registration and identity verification under Romanian law (HG 237/2001).
ID document copies are used strictly to fulfill legal obligations and prevent unauthorized access or misuse.
Personal data are retained for a reasonable period in accordance with legal archiving obligations, generally no longer than 3 years after completion of contractual obligations, unless otherwise required by law.
Call recordings are typically stored for 30 days, unless required longer for legal or contractual purposes.
Newsletter data are processed until consent is withdrawn.
Eden Hill does not carry out direct marketing activities targeting minors. Services are not provided to individuals under 18 unless through a legal representative.
Data are processed within the European Union. However, data processed via social media plugins may be transferred outside the EU/EEA. Eden Hill has implemented appropriate safeguards.
The Website may contain links to third-party websites. Eden Hill’s Privacy Policy does not apply to such websites.
Data subjects have the right to:
- access;
- rectification;
- erasure (“right to be forgotten”);
- restriction of processing;
- data portability;
- objection;
- objection to automated decision-making;
- lodge a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP).
ANSPDCP contact details:
Address: 28–30 Gheorghe Magheru Blvd., Sector 1, Bucharest, Romania
Phone: +40 318 059 211 / +40 318 059 212
Email: [email protected]
Website: www.dataprotection.ro
Eden Hill reserves the right to amend this Privacy Policy. Any changes will be published on the Website. This Policy is supplemented by the Cookie Policy and the Newsletter Subscription Policy available on www.edenhill.ro.