Privacy Statement at Complex Albota

Home / Privacy Statement (GDPR)

Privacy Statement (GDPR)

Information document. Content last reviewed: September 2026.

GDPR STATEMENT ON THE CONFIDENTIALITY OF PERSONAL DATA

Data confidentiality is of particular importance to our company, and we wish to be careful in processing your personal data (hereinafter “Personal Data”). We therefore apply a firm policy regarding the processing and protection of the Personal Data we receive from you. The data we collect from you is stored on our servers, at our registered office and at our business premises, as required on a case-by-case basis, without leaving the territory of Romania. Your data remains exclusively with us; we do not pass on, sell or assign your data to third parties, except where this is necessary to provide you with our services, in accordance with this Statement. You will find the categories of third parties under each specific processing activity described below. In the subsections below you will find all the relevant information about how we process your data, as applicable.

By accepting this Statement, you agree to the collection and use of Personal Data as described herein.

We may need to update this Statement. Its most recent version is always available on our websites, in our restaurants and accommodation units, and in our shops. We will communicate any significant changes to it.

WHO IS THE DATA CONTROLLER?

SOBIS Solutions SRL (hereinafter “SOBIS”) is the controller of the Personal Data you provide to us and is responsible for it in accordance with the applicable data protection legislation. SOBIS Solutions SRL · Trade Register number: J32/348/1999 · VAT/tax ID (CUI): RO12018818 · Correspondence address: Calea Dumbrăvii 99A, 550399 – Sibiu, Romania · Tel.: 0269-230.039 · Fax: 0269-230.059, 0369-401.476, 0369-453.954 · Registered office: Arpașu de Sus 505, 557016 – Sibiu · E-mail: office@sobis.ro · Legal representative: Martin Müller

WHAT ARE YOUR RIGHTS?

RIGHT OF ACCESS: You can contact SOBIS to have the processed Personal Data provided to you by e-mail.

RIGHT TO DATA PORTABILITY: You can ask us to transfer a copy of the Personal Data you have provided to us to you or to another party.

RIGHT TO RECTIFICATION: You have the right to ask us to rectify the Personal Data if it is incorrect. If you have an account on any of the SOBIS websites (http://www.produse-albota.ro/, the Complex Albota website), you can edit your Personal Data in your account.

RIGHT TO ERASURE: You have the right to have any Personal Data processed by SOBIS erased at any time, except in the following situations:

you have a request that SOBIS has not yet resolved
you have an open order that has not yet been shipped or has only been partially shipped
you have an unpaid debt to SOBIS, regardless of the payment method
if you have made a purchase from us, we will keep the related Personal Data in accordance with accounting legislation.

RIGHT TO OBJECT TO THE PROCESSING OF PERSONAL DATA: You have the right to object to the processing of Personal Data by sending an e-mail to SOBIS.

YOUR RIGHT TO OBJECT TO DIRECT MARKETING: You have the right to object to direct marketing. You can unsubscribe from direct marketing carried out by SOBIS by the following means:

by following the instructions in each marketing e-mail
by changing your account settings on the SOBIS websites.

RIGHT TO RESTRICTION OF PROCESSING: You have the right to request that SOBIS restrict the processing of Personal Data.

RIGHT TO LODGE A COMPLAINT WITH THE SUPERVISORY AUTHORITY: If you believe that SOBIS is processing your Personal Data incorrectly, you can contact us. You also have the right to lodge a complaint with the National Supervisory Authority for Personal Data Processing (http://www.dataprotection.ro/; B-dul G-ral. Gheorghe Magheru 28-30 Sector 1, postal code 010336, Bucharest, Romania).

HOW CAN YOU EXERCISE YOUR RIGHTS? You can contact us at any time, in person, by telephone, e-mail or fax at the addresses and numbers indicated above.

ACCOMMODATION AND FOOD SERVICES

WHY DO WE USE PERSONAL DATA? We will use your Personal Data to provide and personalise the services you request and expect from SOBIS in our restaurants and accommodation units, and to offer you the expected level of hospitality in your room and anywhere on our property. We also use Personal Data to plan events that you request or are interested in attending. We use Personal Data to manage your bookings and/or purchases of our accommodation and food services, and we may send you notifications about the status of your bookings, including for the purpose of completing the guest registration form. We will use your Personal Data to manage your payments. We will also use your data to handle complaints about the services we provide to you. We want to offer you different payment options and will carry out analyses to find out which payment options are available to you. We also use Personal Data from video surveillance at the main entrances to our accommodation units, for security reasons, in order to follow up on incidents and to prevent and report criminal offences committed on SOBIS premises. Personal Data will be used to prevent and investigate misuse of our services, losses and fraud.

WHAT TYPES OF PERSONAL DATA DO WE PROCESS?

contact details, such as name, address, e-mail address and telephone number
data relating to your booking, stay or visit
participation in competitions, raffles or marketing programmes
data related to the purchase and receipt of products or services
personal characteristics, nationality, income, identity card data
payment data, such as your credit card number and other card details
registration numbers of vehicles you may bring onto our properties
packages booked at our restaurants and accommodation units
video recordings from the main entrances to our accommodation units

WHO HAS ACCESS TO PERSONAL DATA? Personal Data transferred to third parties is used only to provide you with the services mentioned above (payment processors, travel agencies, etc.). Many of these recipient companies have an independent right or obligation to process your Personal Data, under the law or on the basis of existing contractual relationships. Incidents and fraud may be shared with insurance companies and with judicial or law enforcement authorities for the purpose of completing investigations. These recipients have an independent right or obligation to process your Personal Data.

WHAT IS THE LEGAL BASIS FOR PROCESSING PERSONAL DATA? The processing of Personal Data is necessary for SOBIS to fulfil the services you have ordered, and is also carried out on the basis of the law or the legitimate interest of SOBIS.

HOW LONG DO WE STORE YOUR DATA? We will keep your data for a period of 5 years. Video recordings will be stored in accordance with the applicable legislation in Romania, but for a maximum of 30 days.

ONLINE SHOPPING

WHY DO WE USE PERSONAL DATA? We will use your Personal Data to manage your online purchases on the SOBIS websites and/or your purchases by e-mail addressed to SOBIS, processing orders and returns through our online services, and we may send you notifications about the delivery status or in the event of problems with the delivery of the products you have ordered. We will use your Personal Data to manage your payments. We will also use your data to handle complaints and product warranties. We use Personal Data to identify you and confirm that you are of legal age for online shopping, and to confirm your address to external partners.

WHAT TYPES OF PERSONAL DATA DO WE PROCESS? We will process the following categories of Personal Data:

contact details, such as name, address, e-mail address and telephone number
payment data and payment history
order information

If you have a SOBIS account, we will also process Personal Data provided in connection with the account, such as:

the account
order history

WHO HAS ACCESS TO PERSONAL DATA? Personal Data transferred to third parties is used only to provide you with the services mentioned above, for address confirmation by external companies (such as courier companies, etc.), for sending the order confirmation by communication agencies, for operations carried out by warehousing and distribution service providers in connection with the delivery of your order, and for the processing of payments by payment processing service providers. Many of these recipient companies have an independent right or obligation to process your Personal Data, under the law or on the basis of existing contractual relationships. Incidents and fraud may be shared with insurance companies and with judicial or law enforcement authorities for the purpose of completing investigations. These recipients have an independent right or obligation to process your Personal Data.

WHAT IS THE LEGAL BASIS FOR PROCESSING PERSONAL DATA? The processing of Personal Data is necessary for SOBIS to fulfil the service of managing and delivering your order.

HOW LONG DO WE STORE YOUR DATA?

We will keep your data until the services mentioned above have been definitively completed.

DIRECT PURCHASES IN SOBIS SHOPS

WHY DO WE USE PERSONAL DATA? We will use your Personal Data to manage your purchases of products and services in SOBIS shops, processing orders and returns through our sales agents, and we may send you notifications about the delivery status or in the event of problems with the delivery of the products you have ordered. We will use your Personal Data to manage your payments. We will also use your data to handle complaints and product warranties. We use Personal Data to confirm your address to external partners if the delivery of the purchased products is subsequently arranged by us. We want to offer you different payment options and will carry out analyses to find out which payment options are available to you.

WHAT TYPES OF PERSONAL DATA DO WE PROCESS? We will process the following categories of Personal Data:

contact details, such as name, address, e-mail address and telephone number
payment data and payment history
order information
billing data required by Romanian accounting legislation

WHO HAS ACCESS TO PERSONAL DATA? Personal Data transferred to third parties is used only to provide you with the services mentioned above, for address confirmation by external companies (such as courier companies, etc.), for sending the order confirmation by communication agencies, for operations carried out by warehousing and distribution service providers in connection with the delivery of the products you have purchased, and for the processing of payments by payment processing service providers. Many of these recipient companies have an independent right or obligation to process your Personal Data, under the law or on the basis of existing contractual relationships. Incidents and fraud may be shared with insurance companies and with judicial or law enforcement authorities for the purpose of completing investigations. These recipients have an independent right or obligation to process your Personal Data.

WHAT IS THE LEGAL BASIS FOR PROCESSING PERSONAL DATA? The processing of Personal Data is necessary for SOBIS to fulfil the service of managing and delivering the products you have purchased.

HOW LONG DO WE STORE YOUR DATA? We will keep your data until the services mentioned above have been definitively completed.

DIRECT MARKETING

WHY DO WE USE PERSONAL DATA? We use Personal Data to send you marketing offers, information surveys and invitations by e-mail, text messages, telephone calls and postal communications. To optimise your experience with SOBIS and our products, we will provide you with relevant information, product recommendations and notifications about products left in your shopping cart, and we will send you personalised offers. All of these services are based on previous orders, the products you have clicked on and the information you have submitted.

WHAT TYPES OF PERSONAL DATA DO WE COLLECT? We will process the following categories of Personal Data:

contact details, such as e-mail address, telephone number and postcode
products and offers you have clicked on

If you have an account on the SOBIS websites, we will also process Personal Data provided in connection with the account, such as:

name
address
age
order history
how you have navigated the site and what you have clicked on.

WHO HAS ACCESS TO PERSONAL DATA? Personal Data transferred to third parties is used only to provide you with the services mentioned above, and the data transferred to media or travel agencies and technical providers is intended for the distribution of physical and digital direct marketing. We do not pass on, sell or assign your data to third parties for marketing purposes.

WHAT IS THE LEGAL BASIS FOR PROCESSING PERSONAL DATA? The processing of Personal Data is based on your consent when you agree to direct marketing, with the exception of postal marketing services, including catalogues, which will be sent to you on the basis of our legitimate interest, where applicable.

RIGHT TO WITHDRAW YOUR CONSENT: You have the right to withdraw your consent to the processing of Personal Data at any time. When you do so, SOBIS will not be able to send you further direct marketing offers or information based on your consent. You can unsubscribe from direct marketing by the following means:

by following the instructions in each marketing message
by changing your account settings on the SOBIS websites.

HOW LONG DO WE STORE YOUR DATA? We will keep your data for direct marketing until you withdraw your consent. After this period, the Personal Data will be deleted.

SOBIS ACCOUNT

WHY DO WE USE PERSONAL DATA? We will use Personal Data to create and manage your personal account in order to offer you a personalised and relevant experience in your SOBIS account. We will provide you with your order history and the details of your orders, and allow you to manage your account settings (including marketing preferences). We will also provide you with ways to correct and update your information, such as contact details and payment information. We will allow you to save items in your shopping cart. In order to offer you relevant recommendations for SOBIS products, we will process your browsing on our digital platforms (including the website), your purchase history and product reviews, as well as the data you have submitted through your account.

WHAT TYPES OF PERSONAL DATA DO WE COLLECT? We will always process the e-mail address and password you send us when you register for a SOBIS account. We will also process the following categories of Personal Data if you choose to provide them to us:

contact details, such as name, address, telephone number
account settings
encrypted payment card information

We will process the following categories of Personal Data if you make a purchase:

order history
delivery information
payment history

We will also process the following categories of Personal Data related to your cookies:

click history
navigation and browsing history.

WHO HAS ACCESS TO PERSONAL DATA? Data transferred to third parties is used only to provide you with the services mentioned above; in order to optimise the websites, we may use web agencies and analytics tools for product evaluation.

WHAT IS THE LEGAL BASIS FOR PROCESSING PERSONAL DATA? The processing of Personal Data for your account is based on the consent you gave when creating the SOBIS account. The processing of Personal Data to provide you with relevant product information is based on our legitimate interest.

HOW LONG DO WE STORE YOUR PERSONAL DATA? We will keep your data for as long as you have an active SOBIS account. You have the right to close your account at any time. If you choose to do so, your account will cease to exist and you will be considered inactive. We will retain Personal Data if this is required by the legislation in force and if there is an open dispute. After your account is closed, your data will be deleted.

RIGHT TO OBJECT TO THE PROCESSING OF PERSONAL DATA: You have the right to object to the processing of Personal Data based on the legitimate interest of SOBIS by contacting office@sobis.ro. Your account will then be deleted and we will not be able to provide you with our services.

CUSTOMER SERVICE

WHY DO WE USE PERSONAL DATA? We will use your Personal Data to handle enquiries, complaints and product warranties, and to provide technical support by e-mail, chat, telephone and via social networks. We may also contact you if there is a problem with your orders.

WHAT TYPES OF PERSONAL DATA DO WE COLLECT? We will process any data you provide to us, including the following categories of data:

contact details, such as name, address, e-mail address and telephone number
date of birth
payment information and payment history
order information
all relevant correspondence

WHO HAS ACCESS TO PERSONAL DATA? Data transferred to third parties is used only to provide you with the services mentioned above.

WHAT IS THE LEGAL BASIS FOR PROCESSING PERSONAL DATA? The processing of Personal Data is based on the legitimate interest of SOBIS.

HOW LONG DO WE KEEP YOUR DATA? We will keep your data and the related correspondence for 12 months for case management. For in-store complaints, Personal Data will be stored for 2 years.

RIGHT TO OBJECT TO THE PROCESSING OF PERSONAL DATA: You have the right to object to the processing of Personal Data based on the legitimate interest of SOBIS. SOBIS will not continue to process Personal Data unless we can demonstrate a legitimate ground for the processing that overrides your interests and rights, or on the basis of legal proceedings.

COMPLIANCE WITH LEGAL OBLIGATIONS

WHY DO WE USE PERSONAL DATA? We use Personal Data to comply with legal obligations, court rulings and decisions of the authorities. This includes the use of Personal Data to collect and verify accounting data in accordance with the regulations on accounting records.

WHAT TYPES OF PERSONAL DATA DO WE COLLECT? We will process the following categories of Personal Data:

order data
name
postal address
other specific information required by law or by the authorities

WHO HAS ACCESS TO PERSONAL DATA? Your data will be processed internally by SOBIS.

WHAT IS THE LEGAL BASIS FOR PROCESSING PERSONAL DATA? The processing of Personal Data is necessary for SOBIS to fulfil its legal obligations.

HOW LONG DO WE STORE YOUR DATA? We will store your data in accordance with the applicable accounting regulations.

A cookie is a small text file that is saved on your computer or mobile device and retrieved from it during subsequent visits. Cookies that are not strictly necessary are only used with your consent, given in the cookie banner; you can change your choice at any time from the “Cookie preferences” button in the website footer.

HOW DO WE USE COOKIES? We use permanent cookies to store your start page and your details if you select “Remember me” when you log in to our websites. We will use cookies to save your favourite products. We use session cookies, for example, when you use the product filter function, to check whether you are logged in or whether you have added an item to your shopping cart. We use first-party and third-party cookies to collect statistics and user data in aggregated and individual form in analytics tools, in order to optimise our websites and to offer you relevant marketing material. Some third-party cookies are set by services that appear on our pages and are outside our control. These are set by social media providers such as Twitter, Facebook and Vimeo, and relate to users’ ability to share content from this site, as indicated by the respective icon. We may also use third-party cookies that track activity across multiple sites in order to offer you marketing on other sites/channels.

WHAT TYPES OF PERSONAL DATA DO WE COLLECT? We will link your cookie ID only to Personal Data submitted and collected in connection with your SOBIS account, and only if you are logged in to your account.

WHO HAS ACCESS TO PERSONAL DATA? Data transferred to third parties is used only to provide you with the services mentioned above; an analytics tool is used to collect statistics in order to optimise our websites and to present relevant material to you.

WHAT IS THE LEGAL BASIS FOR PROCESSING PERSONAL DATA? We will link cookies to Personal Data only if you are logged in to your SOBIS account. If you are logged in to your account, the legal basis is our legitimate interest.

DEVELOPMENT

WHY DO WE USE PERSONAL DATA? We use Personal Data to evaluate, develop and improve our services, products and systems for all SOBIS customers. For this purpose, we will not analyse Personal Data at an individual level; all processing will be carried out on pseudonymised data. This includes analyses to make our services easier to use, such as changing the user interface to simplify the flow of information, and to improve IT systems in order to increase security for SOBIS visitors and customers. The analysis is also used for the continuous development and improvement of the logistics flow of goods by forecasting purchases, stock and deliveries, as well as of our resources by planning deliveries. In addition, we use the data to improve our product range.

WHAT TYPES OF PERSONAL DATA DO WE COLLECT? We will process the following categories of Personal Data if you have chosen to provide them to us:

the area from which you access our pages
country
click history
navigation and browsing history

WHO HAS ACCESS TO PERSONAL DATA? Data transferred to third parties is used only to provide you with the services mentioned above. We may use web analytics companies to analyse customers’ online behaviour at a general level.

WHAT IS THE LEGAL BASIS FOR PROCESSING PERSONAL DATA? The processing of Personal Data to develop and improve our services and products is based on our legitimate interest.

HOW LONG DO WE STORE YOUR DATA? We will keep your data for as long as you have an active SOBIS account. After the account is closed, your data will be deleted.