BUY TICKET
BUY TICKET

PRIVACY POLICY

Last updated: August 22, 2025


PART I: GENERALITIES

This Privacy policy ("Politics") explains how SC Bran Domain Management Company SRL ("we" or "our") collects, processes and shares information about you ("client","Ie." or "yours".) that you provide or that we obtain at our locations ("locations"), online, when you visit our websites ("Websites"), when you interact in person at one of our other locations or at concerts, events or experiences organized by us ("Events") or through other interactions with you that are described below (collectively, our locations, websites and events being referred to generically as "property"ours").


For further information regarding our company, please refer to Section N of this Privacy Policy. In accordance with the provisions of this Privacy Policy, we act as a personal data controller with respect to the data collected and processed pursuant to it.


This Privacy Policy describes the categories of personal data we process, the purposes for which we process such personal data and the legal basis for such processing, the potential recipients to whom we may disclose your personal data, as well as the rights and remedies you may exercise in relation to your personal data, how you may exercise these rights and how you may contact us to obtain answers to your questions. Please take a moment to familiarize yourself with our personal data processing practices. If you have any questions about our personal data processing practices, please send us an email at the email address set out in section N below.


BY USING OR ACCESSING OUR PROPERTIES, YOU AGREE TO OUR PERSONAL DATA PROCESSING POLICY. IF YOU DO NOT AGREE TO THIS POLICY, YOU MAY NOT BE ABLE TO ACCESS OR OTHERWISE USE OUR PROPERTIES.

For more information on how users with disabilities can access this Policy in an alternative format, please send us an email at the email address listed in section N below.

 

A. WHAT OUR PRIVACY POLICY COVERS We use the term "personal information" or "personal data" to refer to any information relating to an identified or identifiable natural person ("data subject"); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person. Data that has been anonymized or that cannot reasonably be associated with a specific natural person is not considered personal information.


This Policy applies to personal information we obtain in various contexts, including when:

  • access or use our Websites or any other applications or services covered by this Policy, including to purchase tickets online.
  • visit us at one of our locations or attend one of our Events.
  • communicate with us via email, text and other communications between you and our Properties, or through any non-electronic correspondence you send to us.
  • buy from our third-party partners.
  • interact with us on social media.
  • participate in any of our promotional programs, including raffles, contests or surveys.


We may provide different or additional personal data processing notices in connection with certain activities, programs and offers. In addition, we may provide additional "ad hoc" notices or notices upon collection, in accordance with applicable law, that may supplement or clarify our personal data processing practices, or provide you with additional choices regarding your personal information.

 

B. PERSONAL INFORMATION WE COLLECT FROM OR ABOUT YOU

The following are the categories and types of personal data we may collect from or about you, depending on how you interact with us and our Properties:

  • Personal identifiers, such as first and last name, date of birth, email address, postal address, online identifier, username or social media address, IP address (internet-protocol), account name, or other similar identifiers.
  • device and online identifiers and related information, including device identifier, IP address, cookies, mobile advertising identifier, telephone number or similar unique identifiers.
  • Internet or other electronic network activity information, including browsing history, search history, and information about your interactions with our Properties or advertisements, which may be collected including through Meta Pixel.
  • Demographic information, such as age or gender, or marital status information (including information regarding dependent minors).
  • Financial information, such as credit card numbers.
  • Commercial information, including products or services purchased, rented, returned, considered, or other purchasing or consumption history or trends.
  • User Content, including your communications with us and any other content you provide, such as social media profiles, photos, images, videos, survey responses, comments, product reviews, testimonials, and other content.
  • Geolocation information, including through your IP address or mobile device.
  • Audio and visual information, including photos, images, and voice.
  • Professional or employment-related information.

including any deductions or inferences drawn from any of the above information.

 

C. HOW WE COLLECT YOUR PERSONAL INFORMATION

We collect personal information about you from various sources, through various methods.

Personal information provided directly by you.

We will ask you to provide us with personal information if you choose to interact with certain features on our Website or with us in connection with our other Properties. The following are the categories and types of personal data we may collect from or about you, depending on how you interact with our Properties:

  • Creating an Account. When you create an account, you will provide us with certain personally identifiable information, such as your name, date of birth, and email address. We will also ask you to provide a username and password.
  • Make a purchase. If you make a purchase, you will be required to provide certain personal identifiers, such as your name, physical address, and email address, as well as certain information required for customer records, including your payment card number.
  • Participate in social networks. You can choose to reveal your personal identifiers, such as your name and any other personal information you choose to include in the message, through our ratings and reviews pages and social media pages.
  • Interact with us. When you communicate with us or send us feedback, questions, support requests, comments, suggestions, ideas, or interact with us in any way, we will collect certain personal identifiers that you provide to us, such as your name and email address.
  • Subscribing to updates and promotions. You will have the option to sign up for updates and offers via email or SMS that may be of interest to you. If you choose to subscribe to such updates and promotions, we will ask you to provide us with personally identifiable information, such as your name, email address and/or phone number.
  • Participation in a contest, sweepstakes, or survey. We may collect personal information, such as your name and email address, associated with your participation in a contest, sweepstakes, or survey.
  • Visit one of our locations. If you visit one of our locations, we may capture video footage of you via closed-circuit security camera and collect geolocation information from your mobile device.
  • Apply for or accept a job with us. We collect and use the personal information of candidates, employees, and other staff members. Please email us at the email address listed in Section N below for any questions regarding our candidate and staff privacy policies.
  • Contact us. If you contact our customer support team by phone, we may collect any personal information you choose to provide to us over the phone. If you contact us through our Website, we may collect personal information, such as your name and contact details, and we may keep a record of your communication with us and any personal information you choose to provide in the course of your communication with us.
  • You participate in or attend an Event organized by us. We may ask you to provide certain personal information - such as your name, contact details, address, date of birth - in the context of such Events and where we ask you to consent to the collection and use of images/voice/recordings for marketing, advertising and/or other purposes.


Personal information we collect automatically

We automatically collect information about your use of the Internet and other electronic networks, as well as location information, as you navigate our Website. The technologies implemented through our Website collect information about the Internet and other electronic networks as follows:

  • Usage Information. Information about your interaction with our Website, such as the pages you access on our Website, the frequency of access, which pages/features you access and the date/time you access the Website.
  • Location Information. Information about your location, which can be determined by your device's IP address and may include precise geolocation information.
  • Mobile Device Information. Your mobile device may also share precise geolocation information when you are in one of our locations if you consent to such sharing by enabling it in your device's location settings.
  • Device Information. Information about the device you are using, such as the hardware model, operating system, browser, and your Website preferences.
  • When you visit our Website, open or click on emails we send you, or interact with our advertisements, we or third parties we work with may automatically collect certain information using technologies such as cookies and other tracking technologies described below.
  • Cookies and similar technologies. "Cookies" are pieces of information that can be placed on your device by a website to collect data that facilitates and improves your communication and interaction with that website. Such data may include, for example, the address of the websites you visited before and after visiting our website, the type of browser you use, your Internet Protocol (IP) address, the pages of the website you visit and the links you click on, the region in which your device is located, and geographic information based on your Internet Protocol data. We may store certain information on your device or hard drive in the form of a cookie or a similar type of file (such as clear gifs, web beacons, tags and similar technologies that operate on mobile devices) to collect data related to your use of our website. We may also use cookies to personalize your visit to the website and/or for other purposes to make your visit more convenient or to allow us to improve our services. To find out more about Cookies in general, including information on how to manage and delete Cookies, please visit http://www.allaboutcookies.orgTo read more about how we use Cookies, please read our Cookie Policy, available at: https://castelulbran.ro/politica-de-cookies/.  
  • Clickstream. As you use the Internet, a trail of electronic information is left at each website you visit. This information, which is sometimes referred to as "clickstream data," may be collected and stored by a website's server. Clickstream data may tell us the type of computer or device and browsing software you are using, as well as the address of the website from which you accessed the Website. We may collect and use clickstream data as a form of aggregate information to determine anonymously how long visitors spend on each page of our Website, how visitors navigate the Website, and how we can tailor our web pages to better meet the needs of visitors. This information will be used to improve our Website and our services.
  • AnalyzeWe may work with third-party service providers who use the technologies described in this section to perform website analytics to help us track and understand how visitors use our Website or other services.
  • In-store and other offline technologies. In some cases, we record customer service calls for quality assurance. We may also use closed-circuit TV monitoring systems or other video recording technologies at our locations for safety, security, fraud, loss prevention, and operational purposes.
  • Social media platforms and networks. Our Website may include social media features, such as Instagram, Facebook and Twitter widgets. These widgets may use cookies or other tracking technologies to collect electronic information and other information about your internet activity, such as your IP address and the page you visit on our Website. Such social media features and widgets are hosted by third parties, and your interactions with these features are governed by the privacy policies of the companies that provide them. We may also collect information about you from social media platforms and networks if you post content publicly or on our social media account (for example, by using a hashtag) or if you post content on third-party social media hosting sites, such as Facebook, Twitter, Pinterest and Instagram.
  • From other sourcesWe may obtain information about you from other sources, such as data analytics service providers, marketing or advertising service providers, fraud prevention service providers, vendors who provide services on our behalf, or publicly available sources. We also create information based on our analysis of the information we have collected from you.

 

D. HOW WE USE YOUR PERSONAL INFORMATION. PURPOSE OF COLLECTION AND PROCESSING

We limit the personal information we collect to what is reasonable and relevant for various purposes, including:

Providing products and services

Depending on how you use our Website or otherwise interact with our Properties, we may use your personal information to:

  • Providing products and services, such as fulfilling your orders and/or completing transactions you request.
  • Providing access to our locations and stores.
  • Processing your payments.
  • Providing receipts and order updates.
  • Delivery of your purchases.
  • Sending notifications related to your account, purchases or subscriptions.
  • Creating, maintaining and managing your account, profile or subscription, including providing features such as the ability to save your user preferences and transaction history.
  • Providing a forum for discussions, questions, posting photos, sharing experiences.
  • Providing interactive features of our Website, such as product reviews.


Communication with you

We use your personal information to communicate with you, such as to respond to and/or act on your requests, questions, problems or feedback and to provide customer service.


Marketing and advertising

We use personal information for marketing and promotional purposes, including for:

  • Sending marketing, advertising and promotional communications via email, text message or post (such as trend alerts, promotions, new product launches and event invitations).
  • Displaying advertisements for products or services tailored to your interests on social media and other websites.
  • Providing information about products or services that we think may interest you.
  • Administering our lotteries, contests, other promotions and surveys.


Analysis and personalization

We use personal information to conduct research and analysis, including to:

  • Improving our services and product offerings.
  • To understand how you interact with our Properties, advertisements and communications with you to determine which of our products or services are most popular and to improve our Properties and marketing campaigns.
  • Personalizing our marketing and advertising actions addressed to you.
  • Creating the most personalized experience possible when you visit us online or in stores.
  • To better understand the needs of our customers.
  • To provide you with personalized recommendations regarding our products and services.


Security and fraud prevention

We use personal information to detect, investigate, prevent, or take action regarding possible malicious, deceptive, fraudulent, or illegal activities, including fraudulent transactions, attempts to manipulate or violate our policies, procedures, and terms and conditions, security incidents, and harm to the rights, property, or safety of us and our users, customers, employees, or others; and to maintain the security of our locations and properties.


Fulfillment of a legal obligation

We use personal information to comply with our legal or regulatory obligations, to establish or exercise our rights, and to defend against a legal claim.


Basic business functions

We use personal information to support the core functions of our business, such as to:

  • Providing, maintaining and improving the functionality of our Website, including identifying and resolving any issues.
  • User experience monitoring.
  • Engaging in quality assurance of our customer support team and monitoring our customer support communications.

Please note that if you specifically consent to additional uses of your personal information, we may use your personal information in a manner consistent with that consent.

Examples include - but are not limited to - your consent or opt-outs you provide to us for the collection and use of your voice/image in photographs or audio/video recordings during events we organize. Our use of personal information provided to us through such consents will most often be based on our (or a third party's) legitimate interests, as set out below.

 

E. LEGAL BASIS OF PROCESSING

We collect, process, use and, where applicable, disclose personal information about you based on the following legal grounds set out in the General Data Protection Regulation ("GDPR")GDPR[1] "):

  • your consent [Art. 6(1)(a) GDPR]: by using or interacting with any of our Properties, you agree to your personal data being collected and processed by us for the purposes and in accordance with this Privacy Policy. You may modify or withdraw your consent at any time by sending an email to the contact details set out in section N below. Withdrawal of consent will only have effect for the future and does not affect the lawfulness of our use and/or processing of your personal information up to that date. Please note that you will not be able to use all or part of the website and/or you may not be able to access or fully benefit from our Properties if you do not consent to the processing of your personal information. Please note that we may continue to use any part of your personal information for which we may have other lawful grounds for processing in accordance with applicable law.
  • when the processing is necessary for the performance of a contract between us and you or to take steps at your request prior to entering into a contract (Art. 6 (1) letter (b) GDPR): such as providing products and services, fulfilling your orders and/or completing transactions you request, providing access to our Properties, processing your payments, providing receipts and updated orders, or delivering your purchases.
  • legitimate interest [Art. 6 (1) letter (f) GDPR]: To the extent necessary, we may also process your personal data to protect our and/or third party's legitimate interests (such as, but not limited to, maintaining the security of our Properties, resolving disputes and/or troubleshooting, for other security and fraud prevention purposes, marketing and advertising).

· When we process your personal data to meet our legitimate interests, we balance our legitimate interests with your fundamental rights and freedoms and implement appropriate safeguards to ensure that your interests, rights and freedoms do not override our legitimate interests. For more information in this regard, please contact us at the contact details provided in section N below.

  • compliance with a legal obligation to which we are subject [Art. 6(1)(c) GDPR]: for example, to respond to legal or regulatory requests, to establish or exercise our rights and to defend ourselves against legal action.

 

F. HOW WE DISCLOSE YOUR INFORMATION.

In addition to our own use of your personal information and in addition to any specific uses set forth elsewhere in this Policy, we may disclose your personal information and other information to other companies, affiliates, and third parties in the following cases:

  • Suppliers and service providers. We may share the personal information we collect with entities that provide support services to us, such as analytics providers, call center providers, customer support providers, chat providers, email providers, shipping providers, payment processors, web hosting providers, and e-commerce providers who assist us in taking orders, managing orders, and resolving customer issues. We also share the personal information we collect with entities that assist us in marketing our products and services, including interest-based advertising, as well as with other contractual partners who provide us with management, logistics, operational, and other services and/or other forms of support.
  • Affiliated entities. We may share your personal information with one or more of our affiliated entities for their own marketing purposes, where permitted by applicable law.
  • Delivery services. We may share the personal information we collect with our delivery partners and their employees and independent delivery personnel (including drivers) for the purpose of providing the delivery services you may request in connection with a purchase from us. In addition, if you provide delivery services for us (as a driver or otherwise) to our customers, your personal information may be collected by us and our third-party delivery partners.
  • Corporate reorganization procedures. If we enter into or intend to enter into a transaction that changes the structure of our company, such as a reorganization, merger, acquisition, sale, joint venture, assignment, consolidation, transfer, change of control or other disposition of all or a portion of our business, assets or stock, we will share personal information with third parties, including prospective buyers or target companies (and their respective agents and professional advisors) for the purpose of facilitating and completing the transaction. We may also share personal information with third parties in the event that we enter bankruptcy or liquidation, in the course of such proceedings.
  • To prevent or avoid harm. We may disclose personal information if we believe it is necessary to detect, investigate, prevent, or take action against illegal activities, fraud, or situations involving potential threats to the rights, property, or personal safety of any person.
  • Legal purposes. We may disclose personal information and other information that we believe is necessary or appropriate: (a) to comply with applicable law; (b) to comply with legal process; (c) to respond to requests from public and governmental authorities; (d) to enforce our Terms of Use; (see https://castelulbran.ro/termeni-si-conditii/); (e) to protect our operations or those of any of our affiliates; (f) to protect our rights, privacy, safety or property and/or those of our affiliates, you or others; and (g) to allow us to exercise available remedies or limit the damages we may suffer.
  • With your consent. In addition to the reasons identified above, we may ask for your permission to collect, process and share your personal information for a specific purpose. We will notify you and ask for your consent before providing your personal information or before personal information you have already provided is shared for such a purpose.
  • Aggregated or non-personal information. We may share aggregated or non-personal information with unaffiliated third parties, such as business partners, manufacturers, distributors, and retailers. We may share this non-personal information for a variety of purposes, including to improve and enhance your experience using our website or other properties and for our market research activities.
  • Interest-based advertising.  We, or third-party vendors, may use the information we collect or the information of our vendors to provide you with targeted advertising when you visit other websites or digital properties, or our Website. This process may use cookies, clickstream data, and other similar technologies described in this Policy. For example, if you search for information about a particular product, we or our vendor may serve an ad on other websites you visit with information about that product. This form of advertising, sometimes called "targeted advertising," "behavioral advertising," or "cross-context behavioral advertising," allows us and our vendors to learn about your interests in relation to the delivery of that specific ad. We believe that such advertising is useful because you will see ads that are relevant to your interests. However, if you wish to opt out of these interest-based ads, you can follow the opt-out process described below in the section Your options.


G. HOW WE PROTECT YOUR PERSONAL INFORMATION

We have implemented measures designed to protect your personal information against accidental destruction and against unauthorized access, use, modification and disclosure. We strive to protect your personal information by maintaining physical, electronic and procedural safeguards.

If you have an online account, please avoid sharing your password or using any information that others can easily learn about you, such as a family member's name or birthday. We also recommend that you change your password frequently. When you end a session on our Website, be sure to log out and close your browser window so that no one can continue your session where you left off.

However, no method of protecting information is completely secure. Although we use measures designed to protect your personal data, we cannot guarantee that our protective measures will be effective or sufficient. In addition, you should be aware that data transmission over the Internet is not always secure and we cannot guarantee that the information you transmit using the website is or will be secure.

 

 

 

H. HOW LONG DO WE KEEP YOUR PERSONAL INFORMATION?

We will only retain your personal information for as long as is necessary to fulfill the purposes for which it was collected. The length of time we retain your information will vary depending on the category of personal data and the reason for which it was collected. In some cases, we have legal and regulatory obligations to retain your information so that it cannot be deleted within those timeframes.

We may retain your personal information for a longer period if we reasonably believe that such data may be necessary for the establishment, exercise or defence of legal claims, whether in a judicial proceeding or in an administrative or extrajudicial proceeding. Information that is no longer required to be retained by us will be securely destroyed or de-identified.


I. LINKS TO OTHER WEBSITES AND SOCIAL MEDIA SERVICES

We may create links to other websites that we believe may be of interest to you, such as providers of various products and services. We may also provide links that allow you to send or forward a post from our Website to or from a third-party social media site or other electronic means of communication, such as an email or text messaging service.

We do not endorse any other website, provider or service by providing such links, and our Privacy Policy applies only to your use of our Properties. We are not responsible for the privacy policies of websites and services to which our website links, and you should read the privacy policies of each website you visit to determine what information that website may collect about you.

The Website may also link to social networking services. We do not control such services and are not responsible for how they operate. Although we may offer you the ability to use such services in connection with our Website, we do so only as a convenience and, like you, we rely on these third-party services to operate fairly and fairly.

Please be aware that personal information that you voluntarily include and transmit online on a blog, forum, social network, or in any other publicly accessible manner may be viewed and used by others. We are not able to control such uses of your personal information, and by using these services you assume the risk that the personal information you provide may be viewed and used by third parties.


J. YOUR OPTIONS

Subject to applicable law, you may exercise the choices described in this section with respect to your personal information and our communications. You also have certain additional rights available to you under applicable law, as described below in Part II of this Privacy Policy.


Your account, subscriptions and privacy preferences

  • The information in your profile.  If you have an online account with us, you can review and modify your personal information at any time by logging into your account on the website and visiting your account profile page. There, you can make changes to your name, password, mailing address, email address, phone number, or credit card information that you have previously entered.
  • E-mail. If you do not wish to receive promotional or marketing emails from us, you may unsubscribe by using the unsubscribe link included in each such email. In some cases, we may provide an unsubscribe link within an operational email (e.g., surveys). Please note that we will continue to send you necessary Website and account notifications to your email address.
  • Text messages. We may send you SMS text messages if you have consented to receive offers through this medium. You can opt out of text messages at any time. After you opt out, we will send you a confirmation message that you have successfully unsubscribed. Message and data rates may apply.
  • Postal correspondenceIf you do not wish to receive catalogs, coupons and other promotional mailings, please send us an email at the email address listed in section N below.
  • PhoneIf you do not wish to receive promotional telephone calls, please send us an email at the email address listed in section N below. You may also opt out during any telephone call you receive from us.
  • Device location settingsYou can prevent your mobile device from sharing your location data by adjusting the permissions on your mobile device.
  • Push notificationsIf you have enabled push notifications, you can disable them at any time by updating your device settings. If you have enabled push notifications on your web browser, you can disable them at any time by clicking on the message and turning off future notifications.


Cookies, tracking and interest-based advertising

If you wish to stop or restrict the placing of cookies or to remove any cookies that may already be on your computer or device, please review and adjust your web browser preferences. Further information on cookies is available at www.allaboutcookies.org. By deleting our cookies or disabling future cookies, you may not be able to access certain areas or features of our Website or some of its functionality may be affected.


The online advertising industry offers a service through which you can opt out of receiving targeted advertising from certain data partners and other advertising partners who participate in self-regulatory programs. You can opt out of targeted advertising from certain vendors who participate in the Digital Advertising Alliance (DAA) program at www.aboutads.info/consumersOther providers are members of the Network Advertising Initiative and you can opt out of interest-based advertising from these members by visiting http://optout.networkadvertising.org/Please note that by opting out, you will continue to see generic advertising that is not tailored to your specific interests and activities.


For clarity, cookie-based opt-outs must be made on each device and browser from which you wish to opt out. For example, if you have opted out on your device's browser, this opt-out will not be effective on your mobile device. Additionally, if you opt out on one of your devices, this opt-out may not be effective on all of your devices. You must opt ​​out separately on each device.


With respect to targeted advertising delivered through mobile apps, you can install the DAA's AppChoices app (available on Google Play or the Apple App Store) on your device to opt out of targeted advertising from certain providers, and you can also select a system-wide advertising preference feature on your device (such as "Limit Ad Tracking" on Apple devices or "Opt-out of Interest-based ads" on Android devices).


Please note that cookie-based opt-outs are not effective on certain mobile services. Users can opt out of certain ads on mobile apps or reset their advertising identifiers through their device settings. To learn how to limit ad tracking or reset your advertising identifier on your iOS and Android device, click the following links:

iOS - https://support.apple.com/en-us/HT202074

Android - https://support.google.com/ads/answer/2662922?hl=en

"Don't watch"

Some browsers have a "Do Not Track" feature (also known as DNT) that allows you to tell websites that you do not want them to track your online activities. To learn more, please visit https://www.eff.org/issues/do-not-trackWe do not respond to or honor DNT signals or similar mechanisms transmitted by web browsers.


K. CHILDREN'S ONLINE PRIVACY

The Websites are not intended for, and we do not knowingly collect or maintain personal information from, children under the age of 16. If we learn that we have collected or received personal information from a child under the age of 16 without verification of parental consent, we will use reasonable efforts to delete that information from our databases. If you believe that we may have information from or about a child under the age of 16, please let us know by contacting us at the contact information provided in Section N below.


L. TRANSFER OF PERSONAL DATA TO OTHER COUNTRIES

If you provide us with personal information, it may be transferred, stored and/or processed in a foreign country where the legislation on the protection of personal data may be less strict than the legislation in your country.


By submitting your personal information, you consent to the transfer, storage, and processing of your personal information in a country other than your country of residence, including, but not limited to, the United States.


Transfers of personal data to jurisdictions outside the European Economic Area and/or to countries that the European Commission has recognized as providing an adequate level of protection for personal data through an adequacy decision will only be carried out subject to appropriate safeguards, as provided for in applicable law.


Such transfers of personal information may be based on (i) standard data transfer clauses adopted by the European Commission (such as those adopted by European Commission Implementing Decision (EU) 2021/914 on standard contractual clauses for the transfer of personal data to third countries under Regulation (EU) 2016/679); (ii) certain specific data protection regulatory frameworks (such as the EU-US Privacy Shield Framework); (iii) binding corporate rules or (iv) any other appropriate safeguards within the meaning of Article 46 of the European General Data Protection Regulation (GDPR) adopted by Regulation (EU) 2016/679.


You have the right to request further information from us regarding the safeguards we have put in place as set out above. Please contact us as per the contact details set out in section N below if you would like further information.


M. CHANGES TO THIS PRIVACY POLICY

This Privacy Policy may be modified at our discretion, and the updated privacy policy will be posted on our Website. Each version of this Privacy Policy will be identified by the date it was last updated, as set forth at the top of this page. Please check back frequently to review this Policy for any updated terms or changes.


N. CONTACT US

If you have any questions or comments regarding this Privacy Policy, please feel free to send us an email or write to us at the contact details listed below.

 

Bran Domain Management Company SRL

Address: Street: 24 General Traian Mosoiu Street

507025 Bran - Romania

Email: Str: office@bran-castle.com

Phone: +40-268 237-700

 

SC Compania de Administrare a Domeniului Bran SRL is a Romanian limited liability company, with its registered office in Bran village, Bran commune, Strada General Traian Moșoiu no. 24, Casa “Principesa Ileana” – Bran Castle, Brașov county. The tax identification code is 25388561, and the company is registered with the Trade Register Office under no. J8/583/2009.

 

SC Compania de Administrare a Domeniului Bran SRL manages and operates Bran Castle, located in Romania. Known internationally as the legendary “Dracula’s Castle”, Bran Castle is one of Romania’s most iconic monuments, attracting visitors from all over the world. With a history spanning centuries, the Castle offers visitors a unique blend of heritage, culture and myth.

 

PART II: RIGHTS OF DATA SUBJECTS

You have a number of rights under the law in relation to your personal information, as follows:

·      right of access in accordance with Art. 15 GDPR: you have the right to obtain from us confirmation as to whether or not personal information concerning you is being processed by us and, where applicable, access to (including by obtaining a copy of) such personal information, as well as the manner and purposes for which we process your personal information, so that you can verify its accuracy and the lawfulness of the processing; you will Please note that once we transform your personal information into anonymous information, we will no longer be able to provide you with a copy of such data that was originally provided by you as personal information.

·      the right to rectification in accordance with art. 16 GDPR: you have the right to obtain from us the rectification of inaccurate personal information concerning you and the right to obtain the completion of incomplete personal data, including by providing a supplementary statement.

·      the right to erasure in accordance with Art. 17 GDPR: the right to obtain from us the erasure of your personal information where (a) your personal information is no longer necessary for the purposes for which it was collected/processed; (b) you wish to withdraw your consent to our processing of this data (unless we have another legal basis for the processing on which we can rely); (c) where the processing is based on our legitimate interests and there are no overriding legitimate grounds for the processing; (d) where your personal information has been unlawfully processed; Please note that if we have disclosed your personal information to third parties prior to your exercise of the right to erasure, we may not be able to ensure that such third parties comply with this request. If your personal information has been made accessible on a public forum (such as a website, social media platform or similar public channel), we may not be able to request or obtain that the operators of such websites/platforms/channels comply with such a request for deletion (and you may need to contact such operators directly).

·      the right to restriction of processing in accordance with Art. 18 GDPR: you have the right to obtain from us the restriction of the processing of your personal information where (a) the accuracy of such personal information is contested by you (for a period which will allow us to verify the accuracy of your personal information); (b) the processing of your personal information is unlawful, but you oppose the erasure of such data and request the restriction of its use instead; (c) you consider that we no longer need your personal information for the purposes of the processing, but you require such personal information for the establishment, exercise or defence of legal claims; (d) you have objected to the processing of your personal information on grounds of "legitimate interest" in accordance with point (iii) above, pending our verification whether our legitimate interests override your own interests.

·      the right to object in accordance with art. 21 GDPR: you have the right to object, on grounds relating to your particular situation, at any time to the processing of your personal information, which is based on our legitimate interests. We will no longer process your personal information unless we have compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims. You may object to the processing of your personal information for direct marketing purposes at any time without giving a reason.

·      the right to data portability in accordance with art. 20 GDPR: You have the right to receive the personal information concerning you, which you have provided to us, in a structured, commonly used and machine-readable format, and to transmit this data to another data controller (please note that this only applies where the processing of your personal information is based on your consent or a contract and the processing is carried out by automated means)

·      the right to appeal to a competent data protection supervisory authority (Art. 77 GDPR): you have the right to appeal to the competent data protection supervisory authority - in Romania, the competent authority for the supervision of personal data processing is the National Authority for the Supervision of Personal Data Processing (www.dataprotection.ro).   

We encourage you to attempt to resolve any concerns/complaints regarding our processing of your personal data by contacting us directly in the first instance.      


Your exercise of these rights is subject to certain exceptions to protect the public interest (e.g., the prevention or detection of crime), our interests (e.g., maintaining legal privilege) or the rights and freedoms of others, as provided for in the GDPR.

Although we will make good faith efforts to provide you with access to your personal information, we may refuse or limit access to such personal information if: this would interfere with law enforcement or private causes of action (including the prevention, investigation or detection of crimes or the right to a fair trial); the legitimate rights and interests of others would be violated by such disclosure; this would prejudice the confidentiality necessary in monitoring, inspection or regulatory functions related to good governance or in future or ongoing negotiations involving us. Of course, we will endeavor to provide you with an adequate explanation of the necessity and reason for restricting access in the circumstances mentioned above.


If you exercise any of these rights, we will verify your right and respond to you without undue delay, but no later than one month. In complex cases or in the event of receiving numerous requests, this period may be extended by a further two months, of which we will inform you.

To review or update your personal information to ensure that it is accurate, please write to us at the contact details provided in section N above, informing us of any changes that may be necessary to your personal information, and we will update this information on your behalf and in our systems.


If you would like us to delete your personal data from our systems, please write to us at the contact details provided in section N above. You may no longer be able to use our website and/or other Properties as certain personal information is necessary to enable us to provide our website and/or other products or services.


However, please note that if we have already disclosed some of this personal information to third parties, we may no longer be able to access that information or force the deletion or modification of such information by the parties to whom we have disclosed that information. Of course, we will comply with any legal obligation we may have to notify them of your request.

Please note that while you may request that we delete your personal information, we may be required (by law or otherwise, such as to prevent fraud, resolve disputes, or troubleshoot problems) to retain this information and not delete it, or to retain this information for a certain period of time, in which case we will comply with your request for deletion only after we have fulfilled these obligations.

When you request the deletion of your personal information, this personal information will be deleted from the active database, but (limited) personal information may remain in our archives, where permitted by law.


Please note that any processing of your personal information prior to the deletion of your account will remain valid under the legal grounds in force at that time.


You may exercise any of your rights set out above by sending us a request at the contact details provided in section N above. We will endeavour to respond to any such request as soon as possible and, in any event, within the legal timeframe.


If you are dissatisfied with our use of your personal data or our response to any exercise of your rights under applicable law, you have the right to lodge a complaint with the data protection authority: http://www.dataprotection.ro/. 

The Romanian Data Protection Authority provides an online platform for filing complaints, available at: https://dataprotection.ro/?page=Plangeri_pagina_principalaPlease note that you may not be able to make a complaint until you have first contacted us to try to resolve any such dissatisfaction or complaint directly in the first instance.


To ensure timely resolution, we encourage you to contact us in the first instance with any questions, concerns or complaints you may have regarding our processing of your personal information. We will endeavour to respond to you as soon as possible.


To exercise your rights, please contact us at the appropriate address set out in Section N of Part I of this Personal Data Processing Policy. You also have the right to lodge a complaint with the competent data protection supervisory authority if we have not responded to your questions or concerns regarding your personal information.


[1] Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data;