Privacy Policy

Last updated: 6 October 2026

This policy briefly explains what personal data Colour Studios processes when you visit the website, contact us, or make a reservation, as well as your rights under Regulation (EU) 2016/679 (“GDPR”).

1. Data controller

Colour Studios is operated by TOFAN ELECTROTECHNIK GMBH SRL, with tax identification number CUI 40566700 and registered office at Str. Tabacului 30, Iași Municipality, Iasi, 700440.

For questions or requests regarding personal data, you can contact us at office@colourstudios.ro.

2. What data we process and for what purposes

Depending on how you interact with us, we collect the following types of information:

  • Personal information: name, contact details, stay period, booked studio, number of guests, and submitted requests. We use this information to manage the reservation and provide the services.
  • Requests and communications: data you send us by email, telephone, or contact form. We use it to respond to your request and manage communication.
  • Financial information: data required to issue documents, payment details, and fulfil legal obligations.
  • Usage information: information such as your IP address, browser, and device, if collected through the active functions of the website. Details: Cookie Policy.
  • Payments: Online payments are processed exclusively through NETOPIA Payments. Card details are transmitted to NETOPIA Payments and are not stored by Colour Studios.

The data required for a reservation is used to manage your request and stay. If you do not provide this data, we may be unable to process the reservation. Data used for promotional communications is voluntary.

3. Who we may share data with

Data may be accessed by authorised personnel and shared with providers necessary for operating the website and managing the services, such as:

  • PYNBOOKING NET S.R.L. — booking system; processes booking data as a data processor under a data processing agreement.
  • NETOPIA Payments, for processing online payments.
  • Microsoft (Microsoft 365) — hosts the hotel’s email inbox through which we receive messages and correspondence related to reservations.
  • Public authorities, where disclosure of data is required by law.

4. How long we keep data

We keep data only for as long as necessary for the purpose for which it was collected and for the periods required by law:

  • Booking data and communications: searches without a reservation are not retained; for reservations, operational data is kept for 12 months after check-out, while tax and accounting documents related to the stay are kept for the legally required archiving period, currently 5 years under Accounting Law no. 82/1991, based on Article 6(1)(c) of the GDPR.
  • Billing and accounting documents: for the period required by financial and accounting legislation.
  • Marketing data, where applicable: until consent is withdrawn.
  • Cookies: according to the periods stated in the Cookie Policy.

5. Your rights

Under the GDPR, you may request access to your data, its correction or deletion, restriction of processing, data portability, and you may object to certain processing activities. Where consent is used as the legal basis, you may withdraw it at any time without affecting the processing carried out before withdrawal.

Please send your request to booking@colourstudios.ro.

You also have the right to lodge a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP).

6. Security and updates

We use appropriate technical and organisational measures to protect personal data. We may update this policy when our services or processing activities change. The current version and the date of the latest update will be published on this page.