Politica de Confidentialitate

1. Introducere

Star Touring (denumit in continuare "Compania", "noi") respecta confidentialitatea datelor dumneavoastra personale si se angajeaza sa le protejeze in conformitate cu Regulamentul (UE) 2016/679 privind protectia persoanelor fizice in ceea ce priveste prelucrarea datelor cu caracter personal (GDPR).

Aceasta Politica de Confidentialitate descrie modul in care colectam, utilizam, stocam si protejam datele dumneavoastra personale cand utilizati serviciile noastre de transport sau vizitati site-ul www.startouring.ro.

2. Datele pe care le colectam

Colectam urmatoarele categorii de date personale:

• Nume si prenume - necesar pentru identificarea pasagerilor si validarea rezervarii.
• Numar de telefon - pentru contactarea dumneavoastra in legatura cu rezervarea (confirmare, modificari, anulari).
• Adresa de email - doar daca ne contactati prin email, pentru a va raspunde la solicitari.
• Detalii despre calatorie - ruta, data, numarul de pasageri, observatii speciale.

Nu colectam date sensibile precum: CNP, date bancare, date biometrice sau informatii privind sanatatea.

3. Cum colectam datele

Datele personale sunt colectate prin:

• Apeluri telefonice - cand efectuati o rezervare prin telefon.
• WhatsApp - cand utilizati formularul de pe site care trimite un mesaj WhatsApp sau ne contactati direct.
• Email - cand ne scrieti la office@startouring.ro.

Important: Site-ul nostru nu utilizeaza cookie-uri de urmarire, nu integreaza servicii de analytics terte si nu colecteaza date automat prin formulare (formularul de pe site genereaza doar un mesaj WhatsApp pe dispozitivul dumneavoastra).

4. Scopul prelucrarii datelor

Utilizam datele dumneavoastra personale exclusiv pentru:

• Gestionarea rezervarilor - procesarea, confirmarea si gestionarea calatoriilor dumneavoastra.
• Comunicare - contactarea dumneavoastra pentru confirmari, modificari sau informatii legate de calatorie.
• Obligatii legale - pastrarea evidentelor conform legislatiei in domeniul transportului de persoane.

5. Temeiul juridic al prelucrarii

Prelucrarea datelor dumneavoastra se bazeaza pe:

• Executarea contractului (Art. 6(1)(b) GDPR) - prelucrarea este necesara pentru a va oferi serviciul de transport solicitat.
• Obligatii legale (Art. 6(1)(c) GDPR) - pentru respectarea cerintelor legale in domeniul transportului.
• Interese legitime (Art. 6(1)(f) GDPR) - pentru imbunatatirea serviciilor noastre si rezolvarea reclamatiilor.

6. Durata stocarii datelor

• Datele de rezervare sunt pastrate pe durata calatoriei si inca 30 de zile dupa efectuarea acesteia, pentru eventuale reclamatii.
• Datele necesare pentru obligatii fiscale/legale sunt pastrate conform termenelor prevazute de lege.
• Mesajele WhatsApp si email-urile sunt gestionate pe dispozitivele noastre si sterse periodic.

7. Partajarea datelor

Nu vindem, nu inchiriem si nu partajam datele dumneavoastra personale cu terti in scopuri comerciale.

Datele pot fi partajate doar in urmatoarele situatii:

• Cu autoritatile competente, la cererea acestora, conform legii.
• Cu compania de asigurari, in cazul unui eveniment rutier, pentru procesarea daunelor.

8. Drepturile dumneavoastra

Conform GDPR, aveti urmatoarele drepturi:

• Dreptul de acces - puteti solicita informatii despre datele pe care le detinem despre dumneavoastra.
• Dreptul la rectificare - puteti solicita corectarea datelor incorecte sau incomplete.
• Dreptul la stergere ("dreptul de a fi uitat") - puteti solicita stergerea datelor, cu exceptia celor necesare pentru obligatii legale.
• Dreptul la restrictionarea prelucrarii - puteti solicita limitarea modului in care va prelucram datele.
• Dreptul la portabilitate - puteti solicita transferul datelor catre alt operator.
• Dreptul de opozitie - puteti va opune prelucrarii datelor in anumite situatii.

Pentru exercitarea acestor drepturi, contactati-ne la:

• Telefon / WhatsApp: +40 743 333 094
• Email: office@startouring.ro

Vom raspunde solicitarii dumneavoastra in termen de 30 de zile.

9. Securitatea datelor

Luam masuri tehnice si organizatorice adecvate pentru a proteja datele dumneavoastra personale impotriva accesului neautorizat, pierderii, distrugerii sau modificarii. Acestea includ:

• Acces restrictionat la datele personale (doar personalul autorizat).
• Utilizarea conexiunilor securizate (HTTPS) pe site.
• Stergerea periodica a datelor care nu mai sunt necesare.

10. Plangeri

Daca considerati ca prelucrarea datelor dumneavoastra personale incalca GDPR, aveti dreptul de a depune o plangere la Autoritatea Nationala de Supraveghere a Prelucrarii Datelor cu Caracter Personal (ANSPDCP):

• Website: www.dataprotection.ro
• Adresa: B-dul G-ral. Gheorghe Magheru nr. 28-30, sector 1, Bucuresti

11. Modificari ale politicii

Ne rezervam dreptul de a actualiza aceasta Politica de Confidentialitate. Orice modificare va fi publicata pe aceasta pagina, cu data actualizarii revizuita.

12. Contact

Pentru orice intrebari legate de aceasta politica sau de modul in care va prelucram datele:

• Telefon / WhatsApp: +40 743 333 094
• Email: office@startouring.ro

1. Introduction

Star Touring (hereinafter referred to as "the Company", "we") respects the privacy of your personal data and is committed to protecting it in accordance with Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data (GDPR).

This Privacy Policy describes how we collect, use, store, and protect your personal data when you use our transport services or visit www.startouring.ro.

2. Data We Collect

We collect the following categories of personal data:

• Full name - required for passenger identification and reservation validation.
• Phone number - for contacting you regarding your reservation (confirmation, changes, cancellations).
• Email address - only if you contact us by email, in order to respond to your inquiries.
• Trip details - route, date, number of passengers, special notes.

We do not collect sensitive data such as: national identification numbers, banking details, biometric data, or health information.

3. How We Collect Data

Personal data is collected through:

• Phone calls - when you make a reservation by phone.
• WhatsApp - when you use the website form that sends a WhatsApp message or contact us directly.
• Email - when you write to office@startouring.ro.

Important: Our website does not use tracking cookies, does not integrate third-party analytics services, and does not automatically collect data through forms (the website form only generates a WhatsApp message on your device).

4. Purpose of Data Processing

We use your personal data exclusively for:

• Reservation management - processing, confirming, and managing your trips.
• Communication - contacting you for confirmations, changes, or travel-related information.
• Legal obligations - maintaining records in accordance with passenger transport legislation.

5. Legal Basis for Processing

The processing of your data is based on:

• Performance of a contract (Art. 6(1)(b) GDPR) - processing is necessary to provide the transport service you requested.
• Legal obligations (Art. 6(1)(c) GDPR) - to comply with legal requirements in the transport sector.
• Legitimate interests (Art. 6(1)(f) GDPR) - to improve our services and resolve complaints.

6. Data Retention Period

• Reservation data is kept for the duration of the trip and for an additional 30 days afterward, for potential complaints.
• Data required for tax/legal obligations is retained according to legally mandated timeframes.
• WhatsApp messages and emails are managed on our devices and periodically deleted.

7. Data Sharing

We do not sell, rent, or share your personal data with third parties for commercial purposes.

Data may only be shared in the following situations:

• With competent authorities, at their request, in accordance with the law.
• With the insurance company, in case of a road incident, for claims processing.

8. Your Rights

Under GDPR, you have the following rights:

• Right of access - you may request information about the data we hold about you.
• Right to rectification - you may request correction of inaccurate or incomplete data.
• Right to erasure ("right to be forgotten") - you may request deletion of your data, except where required for legal obligations.
• Right to restriction of processing - you may request limitation of how we process your data.
• Right to data portability - you may request transfer of your data to another controller.
• Right to object - you may object to the processing of your data in certain situations.

To exercise these rights, contact us at:

• Phone / WhatsApp: +40 743 333 094
• Email: office@startouring.ro

We will respond to your request within 30 days.

9. Data Security

We take appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, destruction, or alteration. These include:

• Restricted access to personal data (authorized personnel only).
• Use of secure connections (HTTPS) on the website.
• Periodic deletion of data that is no longer necessary.

10. Complaints

If you believe that the processing of your personal data violates GDPR, you have the right to file a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP):

• Website: www.dataprotection.ro
• Address: B-dul G-ral. Gheorghe Magheru nr. 28-30, sector 1, Bucharest, Romania

11. Policy Changes

We reserve the right to update this Privacy Policy. Any changes will be published on this page, with a revised update date.

12. Contact

For any questions regarding this policy or how we process your data:

• Phone / WhatsApp: +40 743 333 094
• Email: office@startouring.ro