Privacy policy
Last updated: 24 September 2026
This policy explains what personal data we collect through blackfern.ro, why we use it, how long we keep it and what rights you have under Regulation (EU) 2016/679 (the “GDPR”). The Romanian version of this policy prevails.
1. Who the data controller is
Adam Filip Persoană Fizică Autorizată
Tax ID (CUI): 51783799 · Trade Register No.: F2025016674003
Registered address: Sat Poiana Mărului nr. 1032, Com. Poiana Mărului, Jud. Brașov, România
Phone: 0757 391 001 · Email: admin@blackfern.ro
For any question or request about your personal data, email or call us using the details above.
2. What data we collect and why
| When | Data | Purpose | Legal basis |
|---|---|---|---|
| Online booking | first and last name, email, phone (optional), stay dates, number of guests, private chef option, notes | concluding and performing the accommodation contract, the confirmation email, communication about your stay | performance of a contract (Art. 6(1)(b) GDPR) |
| Payment | amount paid, Stripe transaction ID. Your card details never reach us: you enter them directly on Stripe’s secure page. | collecting the payment, refunds | performance of a contract (b); legal accounting obligations (c) |
| Contact form | name, email, message | replying to you | steps taken at your request before a contract (b) / our legitimate interest in replying (f) |
| Bookings via Airbnb / Booking.com | stay dates and the name shown by the platform | preventing double bookings | performance of a contract (b) |
| Running the website | IP address, technical server logs, the session cookie | security, abuse prevention | our legitimate interest (f) |
We do not use your data for marketing, we do not sell it, and we do not profile you or make automated decisions.
3. Who we share data with
Only we and the providers strictly needed to run the service, acting on our behalf under contract, can access your data:
- Stripe Payments Europe Ltd. (Ireland) — online payment processing;
- our web hosting and email providers, used to send confirmations;
- Google — only if you choose to load the Google Maps map on the site (see the Cookie policy);
- public authorities, only where the law requires it.
4. Transfers outside the European Union
Stripe and Google may also process data in the United States. These transfers rely on the EU–US Data Privacy Framework or on the standard contractual clauses approved by the European Commission.
5. How long we keep data
- Contact form messages — 24 months from receipt, then deleted automatically.
- Booking inquiries — 24 months from receipt, then deleted automatically.
- Reservations — 3 years after check-out, after which identifying details (name, email, phone, notes) are automatically anonymised.
- Started but abandoned payments — deleted automatically after 30 days.
- Accounting records (such as invoices) — for as long as accounting and tax law requires.
6. Your rights
You have the right to:
- know what data we hold about you and get a copy (access);
- have inaccurate data corrected (rectification);
- have your data deleted when we no longer have a legal reason to keep it (erasure);
- restrict processing;
- receive your data in a structured format to pass it to another controller (portability);
- object to processing based on our legitimate interest.
To exercise your rights, contact us using the details in section 1. We reply within one month.
If you are unhappy with how we handle your data, you can complain to the Romanian data protection authority, ANSPDCP, 28–30 G-ral. Gheorghe Magheru Blvd., Sector 1, Bucharest, www.dataprotection.ro, or to the authority in your country of residence.
7. Security
The site uses an encrypted connection (HTTPS), payments are processed exclusively by Stripe, and access to reservation data is password-protected and limited to the people who manage the cabin.
8. Children
Bookings may only be made by people aged 18 or over. We do not knowingly collect data about children.
9. Changes
We may update this policy when the way we process data or the law changes. The date of the last update is shown at the top of this page.