This page describes personal data processing when you use Invizita (invizita.ro), in line with Regulation (EU) 2016/679 (GDPR) and applicable law. Invizita is a discovery guide for Romania (places, stays, venues, experiences, destinations and editorial content). The terms and conditions and the cookie policy are separate documents.
Who we are (controller)
The entity operating Invizita is the controller for processing related to this site (“we”). For data-protection requests (including exercising your rights), use the contact details published on the site.
What data we may process
Depending on how you use the site, we may process account data (email, name if you add one, notification preferences), data related to bookings and listings, reviews and photos you send, places you mark, messages you send us, and data needed to run the site (for example which pages you open). If you request a booking, the host may receive the details they need in order to reply. If you allow location, we use it only to show distances or travel time. We do not save it as a location profile on your account. Favorites and some preferences may stay only in your browser.
Why we process data
We process data to provide the site and your account, to send emails you asked for (sign-in, alerts, bookings), to protect the site, to understand how it is used and improve it, to show maps if you open them, and to comply with the law where required. Legal bases may include the contract (account, booking request), legitimate interests (security, improvements), consent (third-party analytics, location) or legal obligation.
Retention
We keep data only as long as needed for the purposes above or as required by law. Account and booking data stay while they are useful operationally, then a reasonable period if we must (for example disputes). Data that stay only in the browser are under your control.
Who we share data with
We may share data with the host if there is a booking request or a contact related to their listing; with providers who host the site, send email or store files; with Google if you accept analytics or open a Google map; and with authorities if the law requires it. We do not sell your data. If a provider is outside the EEA, we use appropriate safeguards under GDPR.
Your rights
You have rights of access, rectification, erasure, restriction, objection and portability, subject to applicable law. You can withdraw consent (for example analytics from the banner or the Cookies page) without affecting the lawfulness of processing before withdrawal. To close the account or ask for erasure, contact us using the details on the site. We may keep what the law requires. You may lodge a complaint with your local supervisory authority or with the Romanian DPA (ANSPDCP).
Updates
We may update this policy when the site or legal requirements change. Last updated: 29 August 2026.