Legal
Privacy
Last updated · 19 August 2026
This site is a brochure. It has no accounts, no forms and no basket, and it sets no cookies. Most visits leave us with nothing at all. This page explains the little that does happen.
Who we are
Zahara Apartments & Studios is an aparthotel at Prelungirea D14 1 101B, Mamaia Nord, Năvodari 905700, Romania.
The controller of the personal data described here is Atilay Petruta Victorita PFA — a sole trader registered in Romania, CUI 44673661, Trade Register no. F2021000541230, with a registered office at Strada Promenada nr. 55 BIS, Scara B, Etaj 1, ap. 101 B, Năvodari, Constanța 905700.
For anything on this page, including any of the rights below, write to info@zahara-nord.ro or call +40 731 33 55 88.
The short version
We do not track you. There is no analytics on this site, no advertising pixels, no social buttons that phone home, and no profiling of any kind.
We do not sell, rent or share personal data. Unless you write to us or call us, we hold nothing about you.
What reaches us when you visit
The site is served by Cloudflare Pages. As with any web host, your browser has to tell the server certain things for a page to come back: your IP address, which page you asked for, your browser and operating system, and the time of the request.
Cloudflare records this briefly in its own logs, to deliver the site and to protect it from attack. We do not receive those logs, we do not build profiles from them, and we do not combine them with anything else.
The legal basis is our legitimate interest in running a website that works and stays up (Article 6(1)(f) GDPR).
When you write or call
If you email or phone us, we receive what you send: your name, your email address or phone number, and whatever you choose to tell us about your stay.
We use it to answer you and, if it becomes a booking, to arrange it. The legal basis is that you asked us to take steps before entering into a contract (Article 6(1)(b) GDPR), or our legitimate interest in replying to correspondence.
Our email is hosted by Fastmail. We keep correspondence while we are dealing with it and for as long afterwards as our records reasonably require; what we no longer need, we delete.
The map
The Arrival chapter shows where we are on a map. It does not load until you click it: until then nothing is requested from Google and nothing is placed on your device.
If you do click, Google Maps loads, Google receives your IP address, and Google may set its own cookies under its own terms. That processing is Google's rather than ours — and it cannot happen unless you choose it.
Booking platforms
We take no bookings on this site. Every Book button opens our listing on a booking platform — today, Booking.com — in a new tab.
From that moment you are on their website, under their privacy policy and their cookies. We send them nothing about you; what comes back to us is the reservation itself.
Where the data goes
We use two service providers: Cloudflare for hosting and security, and Fastmail for email. Both may process data outside the European Economic Area.
Where that happens, the transfer relies on the safeguards the GDPR requires — standard contractual clauses or an equivalent mechanism. If you would like the detail for either provider, ask us and we will point you to it.
What we never do
No analytics or measurement of any kind. No advertising, retargeting or conversion pixels. No social-media trackers. No profiling and no automated decision-making. No selling or renting of personal data to anyone.
Your rights
Under the GDPR you may ask for a copy of the personal data we hold about you, ask us to correct it, ask us to delete it, ask us to restrict or stop a particular use, object to processing based on legitimate interest, and ask for your data in a portable form.
Because we hold so little, most requests are answered quickly — and often the honest answer is that we hold nothing about you at all.
If you think we have handled your data badly, you can complain to the Romanian supervisory authority, the Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP), at dataprotection.ro. We would rather you told us first, so that we can put it right.
Changes to this policy
If this policy changes, the date at the top of this page changes with it. Anything material will be obvious on the page rather than buried in it.