1. General

S.C. Beyond Dracula Travel S.R.L. (with registered office in Timișoara, Str. Martin Gemeinhardt 9, Timiș County) (“Beyond Dracula Travel”, “we”, “our” or “us”), acting as data controller, is committed to protecting and respecting your privacy. This document (“Privacy Policy”) is designed to inform you of our practices regarding the collection, use and disclosure of information that you may provide through your access to the website (“Website”).

This Privacy Policy (together with our Terms and Conditions, any other documents referred to in them, and our Cookie Policy) is the basis on which any personal information that we collect from you or that you provide to us will be processed by us. Please read the following information carefully to understand our views and practices regarding your data. personal data and how we process it.

2. What kind of information do we collect from you and for how long?

We may collect and process the following personal data about you:

2.1 Information you give us

You may give us information, including information that can identify you (“Personal Data”), when you use the website, when you fill in forms on the website, when you participate in any of our competitions, promotions or surveys, when you correspond with us by phone, email or otherwise, as well as when you report a problem with the website.

The information you give us may include:

2.1.1 Mandatory information required when registering for the service we provide on the website or when accessing other services provided by us, including your name, email address and a password. All of these fields are mandatory.

2.1.2 Banking or financial transaction details including transactions made through the Platforms or otherwise; This may include information such as your card payment or bank account details;

2.1.3 Details of your visits to the website and the pages you have accessed;

2.1.4 Your responses to any surveys or questionnaires. Such information may be used for analytical purposes, as well as for user understanding;

2.1.5 Information that we may request from you when you report a problem with our Platforms or services, such as the subject of your support request;

2.2 Information that we collect automatically

2.2.1 If you log in using authentication methods that use the Google network, Beyond Dracula Travel will access certain Personal Data (e.g. name, surname, photo, email, etc.) from your existing account on the Google network, in compliance with the applicable terms and conditions of these platforms.

2.2.2 With respect to each of your visits on the website, we may collect, in accordance with applicable laws and, where necessary, with your consent, information about the devices you use and the networks you are connected to when using our services. This may include the following information: user address, login information, browser type and version, operating system and website, advertising identifier, information about your visit, including the URL clickstream to, through or from the website, products you viewed or searched for, download errors, length of visits to certain pages, interaction on the page and any telephone number used to call our customer support number. We collect this information using various technologies, including cookies (for more information, please see our Cookie Policy).

2.3 Data Retention

2.3.1 With the exception of the categories of personal data mentioned in sections 2.3.2 and 2.3.3 below, your personal data will be retained for the duration of your relationship. with us and then removed from use:

5 years after your last use of our Platform, unless you close your account;

1 year after you close your account.

2.3.2 The following categories of personal data may be retained for different periods of time:

Financial data (e.g. payments, refunds, etc.) are retained for the period of time required by applicable accounting and tax laws;

All user-generated content becomes anonymous but remains valid on the website.

2.3.3 In the event that your account is suspended or blocked, we will retain your data for a period of between 2 and 10 years to prevent you from evading the rules that apply to our platforms.

3. How do we use the information we collect from you?

We will use the information we collect:

3.1 to fulfill our obligations arising from any contract concluded between you and us and forto provide you with the information and products you request from us; This processing is necessary for the performance of our mutual contractual obligations.

3.2 to send you product information by email and/or text message and/or any other means of communication; This processing is necessary for the performance of our mutual obligations and/or with your consent.

3.3 to collect the amounts paid by you or to transfer to you the amounts received that we collect on your behalf; This processing is necessary for the performance of our mutual contractual obligations.

3.4 to allow you to personalize your user profile on the website; This processing is carried out with your consent.

3.5 to ensure compliance with (i) applicable laws, (ii) the Terms and Conditions and (iii) our Cookie Policy. Certain violations that we consider inappropriate may lead to the suspension of your account. This processing is necessary (i) for the performance of our mutual contractual obligations, (ii) for compliance with our legal obligations and/or (iii) for the establishment, exercise or defence of legal rights.

3.6 to send you, in accordance with applicable law and, where necessary, with your consent, marketing materials and information necessary to facilitate the service or purchase process and to make suggestions and recommendations about goods or products related to our services that may be of interest to you. We also use your data to serve you our advertisements on social media platforms. You can find out more about how these functions work and the data we obtain about you by visiting the relevant sections of the third-party social media platforms; This processing is based on your consent and/or our legitimate interest (e.g. providing you with relevant advertisements).

3.7 to notify you of changes to our products; This processing is necessary (i) to perform our contractual obligations to each other, (ii) to comply with our legal obligations and/or (iii) to establish, exercise or defend legal rights.

3.8 to administer the website and for internal operations, including troubleshooting, data analysis, testing, research, analytical and survey purposes; This processing is based on our legitimate interest (e.g. ensuring the security of our Platform and improving its functions).

3.9 to improve the website so that we ensure that content is presented in the most effective way for you and your device; This processing is based on our legitimate interest (e.g. providing content that is relevant to you)

3.10 to enable you to participate in interactive features of our store, when you choose to do so; This processing (i) is necessary for the performance of our contractual obligations to each other and/or (ii) is based on your consent.

3.11 as part of our efforts to keep the Platforms safe and secure; and This processing is based on (i) our legitimate interest (ensuring the security of the Platform), (ii) is carried out for the establishment, exercise or defence of legal rights and/or (iii) for compliance with our legal obligations.

3.12 to measure or understand the effectiveness of the advertising we serve to you and others and to provide relevant advertising to you. This processing is based on (i) our legitimate interest (e.g. measuring and optimising the effectiveness of our advertising campaigns) and/or (ii) your consent.

4. Who are the recipients of the information we collect from you and for what purpose?

4.1 When you purchase from us, some information about you is shared with members of our communities.

4.2 We may receive and send information about you, including your data. personal data, if you use any of the platforms we operate or from other Beyond Dracula Travel entities and subsidiaries, for the purposes outlined in this Privacy Policy.

4.3 We also work closely with third parties who may be beneficiaries of your personal data, such as:

our partners who are social networking platforms and who may provide you with connection services, such as connecting your profile information, from their social networking platforms to the website;

our partners who may advertise their services on the website and to which you may decide to subscribe: these services may be any service in connection with our services such as insurance services, banking services, rental services, etc.;

our partners who may advertise our services on their websites;

our subcontractors for servicestechnical, payment, identity verification and delivery methods or analytics providers.

4.4 We do not disclose any of the information you provide to us, including your personal data, to any of these third parties, with the following exceptions:

4.4.1 When it is necessary to involve a third-party service provider to perform a contract we have with you to facilitate or extend our services (e.g. if we charge fees or collect money from you in connection with any services on the Platforms);

4.4.2 We use analytics and search engine service providers to help us improve and optimize the Platforms;

4.4.3 If this is expressly requested by you (e.g. when using social media authentication methods);

4.4.4 We may distribute parts of our Platforms for display on our partners’ websites via APIs or widgets. In these cases, certain information from your public profile may be displayed on these websites.

4.4.5 Beyond Dracula Travel may also disclose your information if required to do so by law or in the good faith belief that such access, preservation or disclosure is reasonably necessary to (i) respond to claims made against Beyond Dracula Travel, (ii) comply with legal process, (iii) enforce any agreements with our users, such as our Terms and Conditions and Privacy Policy, (iv) in the event of an emergency involving public health, death or physical injury to a person, (v) as part of an investigation, or (vi) to protect the rights, property or personal safety of Beyond Dracula Travel, its members or others;

4.4.6 In the event we sell or buy a business or assets, in which case we may disclose your Data. personal information to the prospective seller or buyer of such business or asset; and

4.4.7 In the event that Beyond Dracula Travel is acquired, in whole or in part, by a third party, in which case the personal information held by it about its members will be one of the transferred assets.

4.5 In accordance with applicable law and, where necessary, with your consent, we may aggregate information about you, including your personal information and cookie information, that we receive from and transmit to our partners. We may use this information, as well as the aggregated information, for the purposes set out above.

4.6 Please note that if you choose to disclose your information, including your personal information, to us through our partners’ connected services, any of our partners’ privacy policies and notices may apply to you in addition to this Privacy Policy. We do not control the collection and/or processing of your information. ultimately carried out by our partners on their own platforms.

In accordance with applicable law and, where necessary, with your consent, we may use the information you provide to us on the website for direct electronic marketing purposes (e.g. (i) receiving our newsletters, invitations to events organised by us or other communications that we consider to be of interest to you or (ii) serving you targeted advertising on social media platforms or third party websites).

For electronic marketing communications: You may withdraw your consent at any time by (i) unticking the relevant box in your member account, (ii) clicking on the unsubscribe link that we provide in each Beyond Dracula Travel communication sent to you or (iii) contacting us using the contact details provided in the section below.

For targeted advertising and content:

(i) on social networks (e.g. Facebook and X): you can object at any time by configuring your settings against advertising through your social network account;

(ii) on third party websites: please see our Cookie Policy to see how you can object.

5. Is your information transferred? how and where?

In principle, we store the personal data we hold about you in the European Union (“EU”). However, as, for example, some of our service providers are located in countries outside the European Union (“third countries”), we also transfer some of your data to third countries. This may include third countries where the European Commission has not decided that such a third country ensures an adequate level of protection (e.g. the United States). In this case, we ensure that the transfer is carried out in accordance with applicable law and that appropriate safeguards have been put in place.

(in particular, standard contractual clauses, as issued by the European Commission) to guarantee an adequate level of protection of the privacy and fundamental rights of individuals.

By submitting a request to the Data Protection Officer (office@beyonddracula.com), we can provide you with details of these appropriate safeguards (e.g., standard contractual clauses issued by the European Commission).

6. What are your rights in relation to your personal data?

6.1 You have the right to receive a copy of the personal data we hold about you (your right of access to data).

6.2 You can request that we erase your personal data or correct inaccurate personal data (your right to erasure and rectification). Please note that we may retain certain information concerning you as required by law or where we have a legal basis to do so (e.g., our legitimate interest in keeping the website safe and secure for other users).

6.3 You have the right to object at any time to (i) the processing of your personal data for direct marketing purposes, or (ii) the processing of your personal data for other purposes or for reasons relating to your specific situation (your right to object to processing). Please note that in the latter case, the right is only applicable if the processing of your personal data is based on our legitimate interest.

6.4 You have the right to restrict the processing of your personal data (your right to restriction of processing). Please note that this only applies if (i) you have contested the accuracy of your personal data and we are verifying the accuracy of the personal data, (ii) you have exercised your right to object and we are still assessing, as required by applicable law, whether our legitimate grounds for processing your personal data in this case override your interests, rights and freedoms; or (iii) your personal data have been processed by us unlawfully, but you oppose the erasure of the personal data or you want us to keep your personal data for the establishment, exercise or defence of legal claims.

6.5 You have the right to receive and/or have us transfer to another data controller some of the personal data concerning you which you have provided to us, which we process for the performance of our contract or because you have given your prior consent, in a structured, commonly used and machine-readable format (your right to data portability).

6.6 To exercise your rights, please contact the Data Protection Officer (office@beyonddracula.com).

6.7 You also have the right to lodge a complaint with the relevant data protection supervisory authority or to seek a remedy through the courts if you believe that your rights have been violated. have been breached.

7. Cookies & Similar Technologies

To learn more, please see our Cookie Policy.

8. Confidentiality of Your Password

Where you are required to choose a password to access certain parts of our Platforms, you are responsible for keeping this password confidential. Please do not disclose your password to anyone.

9. Links to Other Websites and Social Media

From time to time, the Website may contain links to and from the websites of our partner networks, advertisers and their affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy practices and that we do not assume any responsibility or liability for these policies. Please check these policies before submitting your Personal Data to these websites.

10. Changes to Privacy Policy

Any changes we may make to our Privacy Policy in the future will be posted on this page. When applicable, we will notify you or ask for your consent. Please check back frequently for any changes or updates to the Privacy Statement.

11. Contact

If you would like to contact us at any time with your views on our privacy practices or with any requests regarding your Personal Data, please use one of the following means:

by email to our Data Protection Officer at office@beyonddracula.com

*Version dated 15.03.2025