# Privacy Policy — AgendaBooking.com
Last updated: June 22, 2026
1. Who We Are
Dobrescu Ionuț Alexandru PFA, Tax ID 45848320, with registered address at Str. Doamna Stanca 29, Bl. 5, Ap. 50, Com. Selimbar, Jud. Sibiu, Romania, operate the AgendaBooking platform ("we", "the Controller"). For any questions regarding your personal data, contact us at: support@agendabooking.com
2. What Data We Collect
2.1. From Users (hoteliers/accommodation owners)
- Account data: name, email, password (encrypted)
- Accommodation unit data: name, address, phone, description, photos
- Billing data: company name/individual name, Tax ID, billing address, IBAN
- Payment data: processed exclusively through Stripe; we do not store card numbers
- Technical data: IP address, device type, application usage logs
2.2. From Guests/Tourists (via hotel public pages)
- Name, phone, email
- Booking details: period, number of guests, special requests
- These data are collected on behalf of and for the chosen accommodation unit (the User), who acts as data controller for this information
3. Purposes of Processing
We use data to:
- Provide and manage the AgendaBooking account and services
- Process subscription payments
- Facilitate bookings between tourists and accommodation units
- Send notifications related to account, bookings and billing
- Improve the platform and provide technical support
- Comply with legal obligations (accounting, tax)
4. Legal Basis for Processing
- Contract performance — for providing subscribed services
- Consent — for marketing communications (may be withdrawn at any time)
- Legitimate interest — for security, fraud prevention, product improvement
- Legal obligation — for maintaining fiscal documents (invoices)
5. Who We Share Data With
We do not sell your personal data. We may share it with:
- Stripe (payment processing) — Stripe Payments Europe, Ltd., pursuant to Stripe's own policy
- Google Firebase (Google Cloud) — data hosting, authentication, notifications
- Email providers — for sending notifications and invoices
- Public authorities, when required by law (e.g. ANAF)
These act as data processors and process data exclusively according to our instructions and data processing agreements (DPA).
6. Data Transfers Outside the EU
Some providers (e.g. Google, Stripe) may process data outside the European Economic Area, with adequate safeguards (Standard Contractual Clauses approved by the European Commission).
7. Storage Duration
- Active account data: throughout the subscription period
- Invoice data: minimum 10 years, pursuant to Romanian tax legislation
- Unactivated accounts (without payment): deleted after 48 hours
- Suspended accounts (failed payment): deleted after 6 months of inactivity
- Tourist/guest booking data: retained according to each accommodation unit's own policy, with automatic archiving 45 days after check-out
8. Your Rights (under GDPR)
You have the right to:
- Request access to your personal data
- Request rectification of inaccurate data
- Request erasure of your data ("right to be forgotten")
- Object to processing or request its restriction
- Request data portability
- Withdraw consent at any time, without affecting the lawfulness of prior processing
- Lodge a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP) — www.dataprotection.ro
To exercise these rights, contact us at support@agendabooking.com. You may also delete your account directly from the application (Settings → Security → Delete Account).
9. Data Security
We use appropriate technical and organisational measures: password encryption, Firebase App Check, strict database access rules, unauthorised access monitoring.
10. Cookies
See the separate Cookie Policy for details about cookies used on this site.
11. Changes to This Policy
We may update this policy periodically. Important changes will be communicated by email or in-app notification.
12. Contact
support@agendabooking.com