Privacy policy (GDPR)

The site operator

The site taberestraja.ro is administered by SC FOMAR SPORT SRL, with its registered office in Straja Resort, Lupeni Municipality, 4 Spiru Haret St., Hunedoara county, registered with the Trade Register under no. J20/409/2015, CUI RO34504711.

• Email: contact@taberestraja.ro
• Phone: 0727 851 654 (enrollment), 0791 470 778 (ski school)
• Activity location: Straja resort, Lupeni, Hunedoara county

Privacy policy (GDPR)

Version 1.0 · Effective date: 4 June 2026

Properly protecting personal data is an important objective for the Operator. We process the data of children and of parents/legal representatives strictly for organizing the camps and activities we run, as well as, where you give us your consent, for sending useful or promotional information.

This policy takes into account the provisions of Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR), of Law no. 190/2018 on measures implementing the GDPR, and of Directive 2002/58/EC on the processing of personal data and the protection of privacy in the electronic communications sector.

1. Who the data operator is

The Operator determines the purposes and means of the data processing described below. For any matter related to data protection, you can contact us at contact@taberestraja.ro.

2. What data we process

We collect data through the online enrollment forms (Gravity Forms), by email (the participant tables sent by the organizing teachers) and through the contact form on the site.

The participant's data (the child/minor)

• First and last name;
• Age / date of birth;
• Cod Numeric Personal (CNP), atunci când este solicitat pentru contractul de servicii, documente de transport sau, la taberele externe, pentru acte (ex. pașaport);
• Health data (a special category of data, Art. 9 GDPR): conditions, allergies, dietary requirements, ongoing treatments and medication handed over at the camp, information relevant to the health camps;
• Photographs and videos taken during the camp (see section 6).

The data of the parent / legal representative / contact person

• First and last name;
• Phone number;
• Email address;
• Detalii de plată (numele înscris și data taberei menționate la plata avansului). Nu stocăm datele cardului, plățile se fac prin transfer bancar în conturile firmei.

Data collected automatically on the site

• Date tehnice și de navigare (adresă IP, tip de dispozitiv/browser, pagini vizitate) prin cookie-uri și instrumente de analiză/marketing, vezi secțiunea 7.

3. For what purpose and on what legal basis we process the data

4. To whom we disclose the data (recipients and processors)

We do not sell or rent your data. We may disclose it to the following categories of recipients, strictly for the purposes above:

• Personalul propriu al taberei (director de tabără, instructori, animatori, personal medical de colaborare), pentru organizarea și siguranța sejurului;
• Medicul de familie colaborator și, în caz de urgență, Salvamont și unitățile sanitare, pentru protejarea sănătății participantului;
• Service providers (processors) who process data on our behalf: the company's email service, the newsletter and offers platform, the tools for measuring online marketing campaigns, the web hosting provider and the site platform (WordPress / Gravity Forms);
• Autorități publice, atunci când suntem obligați legal (ex. organe fiscale, instanțe);
• Cadrele didactice organizatoare ale grupurilor școlare, care ne transmit tabelele de participanți și rămân, la rândul lor, responsabile față de părinții din grup.

5. How long we keep the data

We keep the data only for as long as is necessary for the purpose for which it was collected and in accordance with legal obligations:

• Date de înscriere și contract, pe durata sejurului și ulterior, conform termenelor legale de arhivare contabilă/fiscală;
• Documente contabile și de plată, conform legislației fiscale aplicabile;
• Date privind sănătatea, pe durata strictă a sejurului; ulterior se șterg/anonimizează, dacă nu există o obligație legală de păstrare;
• Adresa de e-mail pentru newsletter, până la retragerea consimțământului (dezabonare);
• Cookie-uri și date de analiză, conform duratei fiecărui cookie (vezi secțiunea 7).

6. Photographs and videos

The instructors will photograph and film the participants in the camps. Those who do not wish to be filmed may refuse, but we would like to be told in advance. Tabere Straja reserves the right to use these materials for promotional purposes.

Processing of your image for promotional purposes is based on consent and can be refused at any time, before or during the camp, through a written request to contact@taberestraja.ro. A refusal does not affect the child's participation in the camp in any way. For minors, image consent is given by the parent/legal representative.

7. Cookies and similar technologies

The taberestraja.ro site uses cookies to function properly, to analyze traffic and for online marketing: strictly necessary cookies (for the functioning of the site and the forms), analytics cookies (to understand how the site is used) and marketing cookies. For cookies that are not strictly necessary, we ask for your consent on your first visit and you can withdraw it at any time from your browser settings or from the cookie banner. You can find further details in the section Cookie policy.

8. Your rights (the data subject)

In accordance with the GDPR, you have the following rights:

• The right of access, să știi ce date prelucrăm despre tine/copil;
• The right to rectification, să corectezi datele inexacte sau incomplete;
• The right to erasure („dreptul de a fi uitat"), în condițiile legii;
• The right to restrict processing;
• The right to data portability, să primești datele într-un format structurat;
• The right to object, inclusiv față de marketingul direct;
• The right to withdraw consent at any time, without affecting the lawfulness of prior processing (e.g. unsubscribing from the newsletter);
• The right not to be subject to an automated decision, including profiling.

To exercise these rights, you can write to us at contact@taberestraja.ro or by post at the company's registered office. We will reply within the period provided by law (usually 30 days).

If you believe your rights have been infringed, you can turn to the National Supervisory Authority for Personal Data Processing (ANSPDCP): Bd. G-ral Gheorghe Magheru nr. 28-30, sector 1, București, www.dataprotection.ro, sau instanțelor de judecată.

9. Data security

We apply reasonable technical and organizational measures to protect the data against unauthorized access, loss or disclosure: limited access for the staff involved, a secure connection (HTTPS), and controlled handover of sensitive documents and medication to the camp director.

10. Changes to this policy

We may update this policy from time to time. The version in force is the one published on this page, with the date at the start of the section.