Last updated · 1 August 2026
Privacy policy
This policy explains what personal data rotrips collects through this website, why we collect it, how long we keep it and what rights you have under Regulation (EU) 2016/679 (GDPR).
Who is the data controller
The controller is SC PRIME TRAVEL TRADING SRL, with its registered office at Bd. Camil Ressu nr. 55, bl. N12, et. 6, ap. 27, camera 2, Sector 3, Bucharest, Romania, trade register number J40/1888/2013, tax identification number 31232639, which operates this website under the rotrips brand.
For any question about this policy or about your data, write to office@rotrips.com.
What data we collect and why
Contact form: name, email address and, if you provide them, phone number, company, travel dates and number of travellers, together with the content of your message. Purpose: answering your enquiry and preparing a quotation. Legal basis: your consent, and the steps taken at your request prior to entering into a contract (Art. 6(1)(a) and 6(1)(b) GDPR).
Proof of consent: the text you accepted, the version of this policy in force, the date and time, and the IP address from which the form was submitted. Purpose: demonstrating compliance. Legal basis: legal obligation (Art. 6(1)(c) GDPR).
Analytics: if, and only if, you accept analytics cookies, we record pages viewed, interactions such as clicking a phone number or submitting a form, and technical performance measurements. Legal basis: your consent (Art. 6(1)(a) GDPR).
We do not collect any data that is not needed for the purpose stated above.
Who processes data on our behalf
Hosting and content delivery: Vercel Inc., serving this site from data centres in the European Union.
Transactional email: Resend, used to deliver form submissions to our inbox and the confirmation message to you.
Analytics: PostHog, on its EU Cloud infrastructure in Frankfurt, Germany. Analytics data is not transferred to the United States.
We have a data processing agreement in place with each of these processors.
How long we keep it
Enquiries that do not lead to a booking are deleted after 24 months.
Records relating to bookings are kept for the period required by Romanian accounting and tourism legislation.
Proof of consent is kept for as long as the consent is relied upon, plus three years.
Analytics data is retained in pseudonymised form for 12 months.
Your rights
You have the right of access, rectification, erasure, restriction of processing, data portability and objection, and the right to withdraw consent at any time without affecting the lawfulness of processing carried out before the withdrawal.
To exercise any of these rights, write to office@rotrips.com. We reply within one month.
You also have the right to lodge a complaint with the Romanian supervisory authority, ANSPDCP (www.dataprotection.ro).
Security
The site is served exclusively over HTTPS. Form submissions are rate-limited and protected against automated abuse. Access to enquiry data is restricted to the members of staff who need it to answer you.