Privacy
What we dowith your data
You request a booking, you leave us a name and a phone number, and we call you back. The rest of this page explains where that sits in between.
Who we are
The guesthouse is run by Pensiunea Sasca SRL, CUI 54562199, at Strada Principală, Sasca Montană, Caraș-Severin county, Romania. We are the data controller for everything described below.
For anything on this page, write to pensiuneaiohana@yahoo.com or call +40726307762. The same two people answer both.
What we collect
Only what the booking form asks for:
- your name
- your email address
- your phone number
- the arrival and departure dates
- the number of guests and the room type you would like
- whatever you write in the message field
What we never ask for
No ID or passport number, no home address, no card details. Nothing is paid on this site — you pay at the guesthouse, on arrival.
The identity documents Romanian law requires us to see at check-in are recorded in the guest register kept at the guesthouse, on paper. They never touch this website.
Why, and on what legal basis
To answer your booking request and to prepare your stay — that is all. This is Article 6(1)(b) GDPR: steps taken at your request before entering into a contract.
We do not send newsletters, we do not profile anyone, and we do not sell or share your details with anyone who would use them for their own purposes.
Who else sees it
Three suppliers, each doing one job on our behalf, each bound by a processing agreement:
- Supabase — the database holding the bookings. Hosted in Frankfurt, inside the EU.
- Resend — delivers the emails between you and us. Hosted in Ireland, inside the EU.
- Vercel — hosts the website itself.
How long we keep it
Two years after your departure date, then the booking is deleted. Two years is what it takes to answer a returning guest who says "we stayed with you the summer before last".
Ask us sooner and we delete it sooner — see below.
Your rights
You can ask us for a copy of what we hold about you, ask us to correct it, or ask us to delete it. Write to pensiuneaiohana@yahoo.com and we will answer within 30 days, usually much sooner.
If you think we have handled your data badly, you can complain to the Romanian supervisory authority, ANSPDCP — B-dul General Gheorghe Magheru 28–30, Bucharest, dataprotection.ro.
Cookies
This site sets none, and that is why you have not been asked to accept any. There is no analytics script, no advertising pixel, no embedded map or video loading from someone else’s server.
The one cookie in the whole system belongs to the private panel the hosts use to see their own bookings. It keeps them logged in, and you never reach it.
Changes
Last updated 25 August 2026. If we change how any of this works, we change this page too.