Privacy Policy

1. Data controller

The LacColibita.ro website is operated by ORTEOV COMPANY SRL. Complete company details are available on the Company details / economic operator page.

• Personal data email: gdpr@laccolibita.ro
• Platform email: contact@laccolibita.ro
• Phone: +4 0745 337 157

2. Data we may collect

• data submitted through forms, including name, contact details, requests and voluntarily supplied information;
• business-account and claim data, including business/property name, representative name and role, email, phone, address, category, area, website, public social links, descriptions, services and facilities;
• verification data, including email/phone verification status, hashed OTP material, hashed activation tokens, business-validation status and strictly necessary administrative notes;
• authentication and security data, including username, password hash, account status, sessions, sign-in attempts, security logs, IP address, user agent and timestamps;
• promotion and B2B billing data, including selected plan, subscription period and status, orders, payment status, transaction identifiers and invoicing details;
• minimal publicly available data used for informational profiles in the Colibița area;
• technical data needed for diagnostics, anti-spam and abuse prevention;
• language/theme preferences, cookie choices and browser storage. The guided registration may temporarily save non-sensitive form progress on the device;
• correspondence sent through email, WhatsApp, phone or other channels listed on the website.

3. Purposes and legal bases

• responding to contact, visitor, partner, collaborator and listing requests;
• creating or claiming a business account, verifying email/phone, validating the business and activating access;
• administering public profiles, private drafts, moderation and promotion plans;
• handling B2B orders, subscriptions, payments and fiscal records;
• security, anti-spam, rate limiting, OTP verification, abuse prevention and technical logging;
• loading non-essential cookies, analytics, maps, video or external embeds according to user preferences, where integrated.

Legal bases may include steps requested by the user, contract, legitimate interest, consent and applicable legal obligations.

4. Business accounts, claims and verification

A real business/property in the Colibița area may request one management account. To protect existing profiles and prevent false accounts, activation may require email verification, phone verification, comparison against existing listings and manual validation of the business and the applicant’s right to manage it.

OTP codes and activation tokens are temporary and are stored only as hashes. Until the SMS gateway is connected, phone verification may be performed manually by an administrator and recorded in the audit log. After the gateway is connected, the phone number may be used to deliver transactional SMS verification codes.

Client Dashboard changes remain private drafts until submitted and approved. Purchasing a promotion plan does not bypass content verification or moderation.

5. Informational profiles

LacColibita.ro may publish informational profiles for businesses, locations and local services in the Colibița area using minimal publicly available information. A representative may request correction, update, claim or removal of the profile.

6. Recipients and data transfers

• strictly necessary technical providers may include hosting, email, security, IT maintenance, backup, accounting and, when enabled, payment services;
• for B2B payments, transaction data may be shared with the selected payment processor once that integration is activated;
• the future self-hosted SMS gateway will use phone numbers only for configured transactional/verification messages;
• data may be disclosed to public authorities where required by law;
• LacColibita.ro does not sell personal data to advertisers or third parties.

7. Retention

• general contact and visitor requests are usually retained for 12-24 months unless a longer period is necessary;
• unfinished claims/registrations are retained for verification and then may be expired, deleted or anonymised through maintenance procedures;
• client-account and management history is retained for the life of the account and afterwards where necessary for security, audit, legal obligations or legal claims;
• OTP material and activation tokens are retained only for their short validity period and/or until use, then periodically cleaned;
• orders, payments and fiscal documents are retained according to contractual and legal requirements;
• technical/security logs are retained as needed for security and diagnostics;
• cookie/browser-storage preferences remain until changed/deleted or technically reset.

8. Cookies, local storage, analytics, maps and embeds

Strictly necessary cookies and local storage may be used for website operation and secure areas. Guided-registration progress may be stored temporarily on the device so the user can continue later; it can be cleared from the interface or by deleting browser data. Analytics, marketing, maps, video and external embeds are activated according to user preferences where integrated. Details: Cookie policy.

9. Data-subject rights

Under GDPR, you may have rights of access, rectification, erasure, restriction, objection, portability, withdrawal of consent and the right not to be subject to a decision based solely on automated processing, where applicable.

Requests can be sent to gdpr@laccolibita.ro. We may request reasonable information to verify the requester’s identity. You may also lodge a complaint with the Romanian supervisory authority — www.dataprotection.ro.