Privacy Policy
Last updated: March 2026
1. Who we are
Clubul de Golf prof. Paul Tomita
Closca nr 301, Pianu de Jos, Alba, Romania
Email: office@paultomitagolfclub.ro
Phone: +40 744 392 446
We are the data controller for personal data collected through this website, in accordance with EU Regulation 2016/679 (GDPR).
2. What data we collect
| Form | Data collected | Purpose |
|---|---|---|
| Contact form | Name, email, message | Responding to your enquiry |
| Payment form | Name, email, phone | Processing your payment or booking |
We do not collect sensitive data. Payment card data is handled exclusively by PayU Romania (PCI DSS certified) β we never see your card details.
3. Legal basis for processing
- Consent β when you tick the checkbox before submitting a form (GDPR Art. 6.1.a)
- Contract performance β when processing is necessary to fulfil a membership or booking (Art. 6.1.b)
- Legitimate interest β for responding to direct email enquiries (Art. 6.1.f)
4. Data retention
| Data type | Retention period |
|---|---|
| Contact enquiries | 12 months from last contact |
| Membership records | Duration of membership + 3 years |
| Financial records | 10 years (Romanian accounting law) |
5. Third-party processors
| Processor | Purpose | Location |
|---|---|---|
| PayU Romania | Payment processing | Romania (EU) |
| Netlify | Website hosting & form submissions | EU CDN |
| GitHub | Source code only β no personal data stored | USA β no personal data |
6. Your rights under GDPR
- Access β request a copy of the data we hold about you
- Rectification β request correction of inaccurate data
- Erasure β request deletion ("right to be forgotten")
- Restriction β request that we limit processing
- Portability β receive your data in a machine-readable format
- Object β object to processing based on legitimate interest
- Withdraw consent β at any time, without affecting prior processing
To exercise any right, contact us at office@paultomitagolfclub.ro. We will respond within 30 days.
7. Cookies
This website uses only an essential session cookie to remember your cookie consent choice. We do not use tracking, advertising, or analytics cookies.
8. Complaints
You have the right to lodge a complaint with the Romanian data protection authority:
ANSPDCP β Autoritatea NaΘionalΔ de Supraveghere a PrelucrΔrii Datelor cu Caracter Personal
www.dataprotection.ro
9. Changes to this policy
We may update this policy from time to time. The date at the top of this page reflects the most recent revision.