INOVO TIM LC S.R.L. (the operator of Inovoplay.ro) respects the privacy of users’ personal data and is committed to processing this data in accordance with Regulation (EU) 2016/679 (GDPR) and applicable national legislation. The operator has not appointed a Data Protection Officer (DPO). For any questions or requests regarding the processing of personal data, users may contact the operator at contact@inovoplay.ro or at the company’s registered address.

Personal data may be collected and processed for the following purposes and in the following contexts:

• Information provided directly by the user in the booking or contact form (full name, email address, phone number, billing details, etc.).

• Technical and browsing data automatically collected during website use (cookies, IP address, browser and device data).

• Data necessary to fulfill legal billing and reporting obligations (e.g., the personal identification number for individuals when invoices are issued).

The purposes of processing personal data include:

• Registering and managing bookings made on the website, for providing the contracted services.

• Issuing fiscal documents (invoices, receipts) and complying with accounting and tax obligations (accounting documents will be retained for 10 years, as per Romanian Accounting Law no. 82/1991).

• Communicating with users, including by email or phone, to confirm bookings and provide requested assistance.

• Improving services and website experience through statistical analysis of usage data (e.g., use of analytical cookies).

• Sending commercial offers or promotional materials, only with the user’s express consent.

The legal grounds for processing personal data are:

• Contract performance: for data necessary to conclude and execute booking agreements (Article 6(1)(b) GDPR).

• Legal obligation: for data required to meet accounting, tax, and reporting obligations (Article 6(1)(c) GDPR).

• User consent: for sending promotional messages and marketing communications (Article 6(1)(a) GDPR), where the user has given consent.

Users’ personal data will not be disclosed to third parties, except where necessary for the delivery of contracted services or legal compliance. Data may be shared with:

• Payment partners and financial processors involved in transaction handling.

• IT and web hosting service providers ensuring the technical operation of the website.

• Tax authorities and other public institutions when required by law.

All entities will process the data in accordance with our instructions and applicable legal regulations.

Users have the following rights regarding their personal data:

• Right of access: users can request confirmation that their data is being processed and obtain a copy.

• Right to rectification: users can request correction of inaccurate or incomplete data.

• Right to erasure (“right to be forgotten”): users may request the deletion of their data under certain legal conditions.

• Right to restriction of processing: users may request limited data processing in specific situations (e.g., when accuracy is disputed).

• Right to data portability: users may receive their personal data in a structured, commonly used, and machine-readable format and transmit it to another controller.

• Right to object: users may object, for reasons related to their particular situation, to processing based on the operator’s legitimate interest.

• Right to withdraw consent: if the processing is based on consent, users may withdraw it at any time, without affecting the lawfulness of prior processing.

• Right to lodge a complaint: users may contact the National Supervisory Authority for Personal Data Processing (ANSPDCP) if they believe their rights have been violated.

To exercise any of these rights, users may send a written request to contact@inovoplay.ro or the operator’s registered address. The operator will respond as soon as possible, and no later than 30 days from the request date.

Personal data is stored for a limited time, according to the purposes for which it was collected or as required by law. Accounting documents will be kept for 10 years, as mandated by Romanian Accounting Law no. 82/1991. Once purposes are fulfilled and legal retention periods expire, personal data will be securely deleted or anonymized.

The operator implements appropriate technical and organizational measures to protect personal data against unauthorized access, destruction, or accidental loss. However, users should understand that no method of electronic transmission or storage is entirely infallible.

For more information about the use of cookies on Inovoplay.ro, please refer to our Cookie Policy below.