rezervari@conaculmaldar.ro                        Maldaresti, Valcea County        Accommodation: 0758 222 929 | Restaurant: 0753 062 687

Privacy and Personal Data Protection Policy

For the purpose of carrying out its activities, White Impex SRL, as a data controller, processes personal data relating to certain categories of individuals. These may include personal data of users of this Website, users who interact with the pages created by White Impex SRL on social media networks, our customers, our contractual partners/potential contractual partners, or their employees, representatives or collaborators whose data is provided to us for processing, employees of White Impex SRL, or candidates applying for positions within White Impex SRL.

According to Regulation (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC (“GDPR”), personal data means any information relating to an identified or identifiable natural person (“data subject”). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier.

1. Purposes, Legal Grounds and Categories of Personal Data

The data processed by White Impex SRL may be used for the following purposes:

1.1 Website administration and maintenance, which also involves the use of cookies in order to ensure fast and easy interactions between users and the Website (legal basis: Article 6(1)(a) and (f) of the GDPR, namely your consent and the legitimate interests of White Impex SRL, as applicable).

For further details regarding the use of cookies by White Impex SRL, please refer to the dedicated page available in the footer menu of the Website.

1.2 Registration and fulfilment of your booking request and the provision of tourism and food service activities (legal basis: Article 6(1)(b) and (c) of the GDPR, namely the performance of a contract or taking the necessary steps at the request of the data subject prior to entering into a contract, or compliance with the legal obligations of White Impex SRL, as applicable).

When you choose to make a booking through the Website, White Impex SRL processes the following categories of data: first name, last name, gender, email address, telephone number, country of residence, arrival date, departure date, bank account information, information regarding accompanying minors (age range), the first name, last name and age of an accompanying adult (optional), or any data provided through the Contact Form.

In connection with managing your booking, White Impex SRL may also process the following categories of data: information regarding your accompanying guest(s), for the purpose of determining the occupancy of the booked room; details regarding your correspondence, requests, notifications or complaints; and any other data or information related to your interaction with us.

1.3 Rental of premises and organisation of private or corporate events (legal basis: Article 6(1)(b) of the GDPR, namely the performance of a contract or taking the necessary steps at the request of the data subject prior to entering into a contract) – WHERE APPLICABLE.

1.4 Recruitment activities, for purposes such as assessing your application, skills, qualifications and interest in the available position for which you have applied and for which you have been contacted, organising and conducting interviews, selecting and recruiting you, facilitating access to occupational health services and carrying out general checks (legal basis: Article 6(1)(b) and (f) of the GDPR, namely taking pre-contractual steps, entering into and performing an employment contract with you, or pursuing our legitimate interests, as applicable) – WHERE APPLICABLE.

In connection with your application, we need to process the data included in the application you submit to us. This data will generally include your first name, last name, contact details (telephone number and email address), professional experience, education and any other information you choose to include in the CV you submit to us or in other documents that we may request from you.

During your interview, we may also process personal data such as your professional preferences, details regarding your experience and education that are not included in the CV submitted, and your remuneration expectations – WHERE APPLICABLE.

As part of the recruitment process, we may request additional documents (such as academic transcripts, diplomas, approvals, authorisations, professional qualifications, etc.), which will also contain personal data.

For the purpose of assessing your application, in addition to the information already provided, we may access your publicly available social media profiles (such as LinkedIn). As matters relating to your private life are not relevant to us, we will not access or take into consideration profiles or information from profiles that are clearly intended to remain private and have no professional relevance.

1.5 Management of employment relationships, for the performance of employment contracts, compliance with legal obligations and/or the pursuit of a legitimate interest (legal basis: Article 6(1)(b), (c) and (f) of the GDPR, as applicable).

In certain specific situations, White Impex SRL processes employees’ data on the basis of their consent (legal basis: Article 6(1)(a) of the GDPR). The manner in which White Impex SRL processes the personal data of its employees is detailed in the privacy notice provided to them.

1.6 Organisation and implementation of advertising campaigns conducted by White Impex SRL and marketing and promotional activities (such as sending newsletters, promotional materials, commercial offers and marketing communications), requesting your opinion regarding the services we have provided to you (through customer satisfaction surveys), as well as conducting market and product research and analysing our services (legal basis: Article 6(1)(a) and (f) of the GDPR, namely your consent and the pursuit of the legitimate interests of White Impex SRL, as applicable, including pursuant to Law No. 506/2004 regarding the processing of personal data and the protection of privacy in the electronic communications sector).

Through our direct marketing activities, we may keep you informed about our services and campaigns in accordance with applicable legislation. You may unsubscribe from the newsletter service at any time and free of charge by selecting the “Unsubscribe” option in the newsletter.

1.7 Ensuring the security of property, persons and premises through video surveillance (legal basis: Article 6(1)(c) and (f) of the GDPR, namely compliance with a legal obligation and the legitimate interests of White Impex SRL).

For this purpose, White Impex SRL processes your personal data, namely your image captured by video surveillance equipment, your first and last name, and your vehicle registration number, where applicable.

1.8 Communication with our collaborators and contractual partners (legal basis: Article 6(1)(b) and (f) of the GDPR, namely entering into and performing a contract or the legitimate interests of White Impex SRL, as applicable).

For this purpose, White Impex SRL processes your first name, last name, position and/or capacity held, the organisation you represent, handwritten or electronic signature, and information contained in your identity document.

1.9 Handling your requests, questions or complaints (legal basis: Article 6(1)(b) and (f) of the GDPR, namely the performance of a contract or taking the necessary steps at the request of the data subject prior to entering into a contract, and the legitimate interests of White Impex SRL, as applicable).

For this purpose, White Impex SRL processes your first name, last name, contact details and the opinions provided by you.

2. How Do We Obtain Your Data?

White Impex SRL may obtain your data:

  • directly from you, for example when you use the services of White Impex SRL, contact us through various channels, request offers or information about the services of White Impex SRL, visit our Website or social media pages, or apply for available positions within White Impex SRL;
  • from other sources, for example from travel agencies, booking websites (e.g. Booking.com), or public authorities (for example, in the case of requests from courts or judicial investigations).

3. Recipients of Your Personal Data

Personal data may be disclosed by White Impex SRL to the following categories of recipients:

  • you, when exercising your rights under the GDPR;
  • contractual partners of White Impex SRL (such as courier companies, suppliers, collaborators, subcontractors, consultants and technical experts, etc.) for entering into and performing contracts;
  • public authorities and institutions, based on our legal obligations under applicable legislation;
  • external auditors of White Impex SRL, for the fulfilment of audit obligations;
  • lawyers and tax/business consultants, to represent us in the event of potential litigation or to provide consultancy services;
  • bailiffs, for contractual communications or for the enforcement of contracts or court decisions;
  • debt collection companies;
  • if White Impex SRL undergoes a sale or reorganisation process, your data may be provided to the acquiring entity and/or its consultants or to the entity resulting from the reorganisation process.

For the purposes described above, certain categories of personal data may be transferred outside Romania. Data may be transferred both to countries within the European Economic Area (“EEA”) and outside the EEA.

For transfers outside the EEA, the Company will carry out such transfers in accordance with the requirements of the GDPR and on the basis of the standard data protection clauses adopted by the European Commission, in order to ensure the required level of security and confidentiality, or on the basis of other safeguards recognised by law.

4. Data Processing Period

White Impex SRL processes your personal data for as long as necessary to fulfil the purposes for which it was collected and thereafter, where necessary, in order to comply with the legal requirements applicable to our field of activity.

After the expiry of the applicable statutory retention periods, White Impex SRL may anonymise the data, thereby removing its personal nature.

5. Your Rights

In connection with the processing of personal data, you have the following rights: the right to information, the right of access to your data, the right to rectification, the right to erasure, the right to restriction of processing, the right to data portability, the right to object, the right not to be subject to an individual decision, and the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing or with the competent courts.

To exercise these rights, you may submit a request addressed to White Impex SRL, for the attention of the Data Protection Officer.

Last updated: August 2026.