Privacy
What we dowith your data
You request a booking, you leave us a name and a phone number, and we call you back. The rest of this page explains where that sits in between.
Who we are
The guesthouse is run by Pensiunea Sasca SRL, CUI 54562199, at Strada Principală, Sasca Montană, Caraș-Severin county, Romania. We are the data controller for everything described below.
For anything on this page, write to pensiuneaiohana@yahoo.com or call +40726307762. The same two people answer both.
What we collect
Only what the booking form asks for:
- your name
- your email address
- your phone number
- the arrival and departure dates
- the number of guests and the room type you would like
- whatever you write in the message field
What we never ask for
No ID or passport number, no home address, no card details. Nothing is paid on this site — you pay at the guesthouse, on arrival.
The identity documents Romanian law requires us to see at check-in are recorded in the guest register kept at the guesthouse, on paper. They never touch this website.
Why, and on what legal basis
To answer your booking request and to prepare your stay — that is all. This is Article 6(1)(b) GDPR: steps taken at your request before entering into a contract.
We do not send newsletters, we do not profile anyone, and we do not sell or share your details with anyone who would use them for their own purposes.
Who else sees it
Three suppliers, each doing one job on our behalf, each bound by a processing agreement:
- Supabase — the database holding the bookings. Hosted in Frankfurt, inside the EU.
- Resend — delivers the emails between you and us. Hosted in Ireland, inside the EU.
- Vercel — hosts the website itself.
How long we keep it
Two years after your departure date, then the booking is deleted. Two years is what it takes to answer a returning guest who says "we stayed with you the summer before last".
Ask us sooner and we delete it sooner — see below.
Your rights
You can ask us for a copy of what we hold about you, ask us to correct it, or ask us to delete it. Write to pensiuneaiohana@yahoo.com and we will answer within 30 days, usually much sooner.
If you think we have handled your data badly, you can complain to the Romanian supervisory authority, ANSPDCP — B-dul General Gheorghe Magheru 28–30, Bucharest, dataprotection.ro.
Cookies
No advertising cookies, and we do not follow you across other sites. The only cookie we ask for is the statistics one, Google Analytics, and only if you press "Sure" in the small box at the bottom of the page. Press "Not now" and nothing from Google loads.
What we use regardless:
- Local storage — remembers your cookie choice, so the box does not come back on every page. It stays in your browser and never reaches us.
- Traffic statistics without cookies — we count visits through Vercel Analytics, without identifying anyone. No profiles are built.
- Google Analytics, only with your consent — if you accept, Google sets cookies (_ga, _ga_*, up to two years) to tell visitors apart and show us where they come from, which pages they read and how long they stay. The IP address is truncated. The data goes to Google Ireland Ltd., under their policy. You can change your mind any time with the button below, and delete the cookies from your browser.
- The one strictly necessary cookie belongs to the private panel the hosts use to see their own bookings. It keeps them logged in, and you never reach it.
Changes
Last updated 23 September 2026. If we change how any of this works, we change this page too.