Privacy Policy

The data controller is Hostia ("we"), a short-term rental concierge based in Cluj-Napoca, Romania. For any question about your personal data, contact us at contact@hostia.ro or via WhatsApp at +40 773 977 295.
[To be completed by Hostia: legal form, company registration number, and registered office, to be added here for full compliance.]

Depending on how you interact with us, we may collect:

• —Contact form: name, email, phone, your status (owner, future investor, traveler, other), property type and approximate description where relevant, and your message.
• —Provider application: name, phone, email, and free-text message.
• —Property management (if you entrust us with a property): information about the property, bookings, guests, and communications related to the concierge service.
• —Internal accounts: login credentials for our team and cleaning providers, strictly necessary to operate the service.
• —Technical data: IP address and browsing data strictly necessary for the site to function (no third-party advertising or tracking cookies at this time).

• —Responding to your requests and communicating before any contract.
• —Delivering our concierge service to owners who entrust us with a property (bookings, cleaning, access, guest messaging).
• —Helping you with administrative steps (e.g. property classification).
• —Keeping our internal back-office secure and functional.
• —Complying with our legal obligations, including accounting and tax rules.

• —Your consent, when you voluntarily fill in a form on this site.
• —Performance of a contract or pre-contractual steps, for owners and providers we work with.
• —Our legitimate interest, for the proper operation, security, and improvement of our services.
• —A legal obligation, when Romanian or EU law requires it.

Your data is processed by the Hostia team and, when necessary for the service, by our cleaning providers for information related to their own missions only.

We use technical subprocessors to host the site and our data: application hosting (Vercel Inc.) and database (Neon, Inc.), both bound by their own confidentiality commitments. If we activate automated WhatsApp messaging in the future, a messaging provider (e.g. Twilio) may also process the phone numbers needed for that purpose.

We never sell your personal data to third parties, and never share it for marketing or advertising purposes.

• —Contact requests with no follow-up: up to 3 years from the last exchange.
• —Contractual relationship (owners, providers): for the duration of the contract, then per the statutory accounting and tax retention periods applicable in Romania.
• —Internal accounts: until the end of the collaboration, then deleted within a reasonable time.

Under the GDPR, you have the following rights over your data:

• —Right of access and rectification.
• —Right to erasure ("right to be forgotten").
• —Right to restriction of processing.
• —Right to object to processing.
• —Right to data portability.
• —Right to set directives on your data after your death.

To exercise these rights, contact us at contact@hostia.ro. We respond within one month at most. You also have the right to lodge a complaint with Romania's National Supervisory Authority for Personal Data Processing (ANSPDCP) or the data protection authority of your country of residence.

We implement reasonable technical and organizational measures (restricted access, passwords, secure hosting) to protect your data against unauthorized access, loss, or disclosure.

This site only uses cookies that are strictly necessary for it to work: your language preference, a cookie remembering your consent choice (6 months at most) and, for our team and service providers, the session cookies of the management area. We do not use any advertising cookies or third-party analytics tools without your prior consent. You can change your choice at any time through the “Cookie settings” link at the bottom of every page. If we ever enable audience measurement, it will only run after you have given consent.

We may update this privacy policy, in particular to reflect changes to our services or to applicable law. The "last updated" date at the top of this page lets you track these changes. We will inform you of any material change through an appropriate channel.