Last updated: May 2025 · SIMBOPET SRL · office@willowcamping.com
1. Data Controller
SIMBOPET SRL, registered at Sat Câmpu Cetății, Mureș County, Romania, Tax ID (CUI) 52673786, trading as Willow Camp, is the controller of the personal data collected through www.willowcamp.ro and associated services.
Contact: office@willowcamping.com · Phone: 0756 088 050
2. Data We Collect and How
We collect personal data through two main channels:
A. Booking form
| Field | Data type | Required |
|---|---|---|
| First name & Last name | Identification | Yes |
| Contact | Yes | |
| Phone number | Contact | Yes |
| Address | Identification | Yes |
| Arrival / departure dates | Booking | Yes (auto-filled) |
| Number of adults / children | Booking | Yes |
| Optional message | Communication | No |
| Total amount / payment method | Financial | Yes (auto-generated) |
B. Newsletter sign-up form
| Field | Data type | Required |
|---|---|---|
| Contact | Yes |
C. On-site at check-in
Upon arrival we additionally collect: identity document / passport (for guest register compliance), vehicle registration number, and where applicable, documents for minors.
3. Purposes and Legal Basis for Processing
| Purpose | Data used | Legal basis (GDPR) |
|---|---|---|
| Managing and confirming bookings | All booking form data | Art. 6(1)(b) – contract performance |
| Processing online payments via Netopia | Financial data (handled by Netopia) | Art. 6(1)(b) – contract performance |
| Check-in and guest registration | ID document, vehicle plate | Art. 6(1)(c) – legal obligation |
| Sending the newsletter | Art. 6(1)(a) – consent | |
| Booking-related communications | Email, phone | Art. 6(1)(b) – contract performance |
| Fiscal and accounting obligations | Financial data | Art. 6(1)(c) – legal obligation |
4. Recipients of Your Data
- Netopia Payments – online payment processor, which handles payment data under its own GDPR-compliant policy. Card data is never stored by Willow Camp.
- Email / newsletter service provider – solely for communication purposes, if you have subscribed.
- Public authorities – when required by law (e.g. tourist registration).
We do not sell, rent, or transfer your data to third parties for commercial purposes.
5. International Transfers
Your data is not transferred outside the European Economic Area. All service providers we use operate in full compliance with Regulation (EU) 2016/679 (GDPR).
6. Retention Periods
| Data category | Retention period |
|---|---|
| Booking and billing data | 5 years (fiscal obligation under Romanian law) |
| Check-in data (guest register) | As required by tourist registration legislation |
| Newsletter email address | Until unsubscription |
| Messages / correspondence | 2 years from last interaction |
7. Your Rights
- Access – request a copy of the data we hold about you.
- Rectification – request correction of inaccurate or incomplete data.
- Erasure – request deletion when data is no longer needed, subject to legal obligations.
- Restriction – request that we limit processing in certain circumstances.
- Portability – receive the data you provided in a structured, machine-readable format.
- Objection – object to processing, especially for direct marketing purposes.
To exercise any right, contact us at office@willowcamping.com. We will respond within 30 days.
8. Withdrawing Consent
Where processing is based on your consent (e.g. newsletter), you may withdraw it at any time without affecting the lawfulness of prior processing. You can unsubscribe via the link in any email received, or by contacting us directly.
9. Cookies
The website may use strictly necessary technical cookies for its operation. We do not use tracking or advertising cookies without your prior consent.
10. Data Security
We implement appropriate technical and organisational measures to protect data against unauthorised access, loss or destruction, including encrypted connections (HTTPS) and restricted access to personal data.
11. Complaints
You have the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP):
28–30 B-dul G-ral. Gheorghe Magheru, Sector 1, Bucharest · www.dataprotection.ro