GDPR
Privacy policy
Profi Concept SRL (RO32366949), acting as data controller, processes the personal data you provide to us through this website in accordance with Regulation (EU) 2016/679 (GDPR).
Data protection contact: vanzaribellresidence@gmail.com · +40 724 127 215
Full controller details: Legal information
What data we collect
Through the contact form
- your name, phone number and, optionally, your email address;
- what you would like (offer, viewing or question), the apartment or apartment type you are interested in and, for a viewing, the time that suits you;
- your message (optional);
- the consent you give by ticking the box in the form.
Together with your request we receive the page you wrote from, the language of the site and, if you reached us through a campaign, its source from the link (the utm, gclid, gbraid, wbraid parameters).
Visit statistics, through our own mechanism
Separately, we log site visits — pages visited, source (domain only), campaign parameters from the link (utm, gclid, fbclid), the browser identifier (user-agent), used for the device label and to filter out bots, language, key actions (call, WhatsApp, email, brochure, form, apartment viewed), IP address and approximate location (country, city) — without cookies: the identifiers are random and kept in your browser's local storage, and the persistent visitor identifier is only used if you have accepted cookies. The IP address is used to estimate unique visitors and for security; it is only displayed temporarily in our internal management application and turned into a pseudonymous code. The approximate location is determined by the website's hosting platform when the request is received, without sending the IP address to other third parties.
Google Analytics 4: cookies only with your consent
If you accept measurement cookies in the cookie banner, Google Analytics 4 sets its cookies and measures the pages visited and key actions. We do not send it your name, phone number, email address or message. Without consent (and after “Decline”), the Google tag loads in “Consent Mode v2”: it sets no cookies and uses no visitor identifier, but it sends Google signals about the visit — the page visited, the browser type and, by the nature of the transmission, the IP address.
We do not collect sensitive data (such as health, origin or biometric data) and we do not make automated decisions with legal effect on you.
For what purpose and on what basis
| Purpose | Legal basis |
|---|---|
| To respond to your requests, send you offers and availability and schedule viewings | Your consent and/or pre-contractual measures taken at your request (Art. 6(1)(a) and (b) GDPR) |
| To understand the site's audience, improve it and prepare marketing campaigns using aggregated data, without targeting you individually | Our legitimate interest (Art. 6(1)(f)) |
| To ensure the security and proper functioning of the site | Our legitimate interest (Art. 6(1)(f)) |
| Measurement with Google Analytics 4, with cookies | Your consent (Art. 6(1)(a)), which you can withdraw at any time |
| Cookieless signals sent by the Google tag without consent (Consent Mode v2) | Our legitimate interest (Art. 6(1)(f)) in measuring the site's audience in aggregate |
| To comply with legal obligations, for example accounting and tax obligations | Legal obligation (Art. 6(1)(c)) |
We do not carry out individual profiling for advertising purposes.
How long we keep the data
We keep the data only for as long as necessary:
| Data | How long |
|---|---|
| Contact form data | Up to 3 years from your last contact with us or until you withdraw your consent, whichever comes first |
| If you become a client | For the duration of the contract and thereafter in accordance with legal obligations (accounting documents are kept for 10 years) |
| Visitors' IP address | At most 14 days, after which it is deleted automatically; the pseudonymous code derived from it and the approximate location (city / country) remain, kept with the statistics (at most 180 days) |
| Access statistics, without the IP address | At most 180 days |
Once these periods expire the data is deleted or anonymised. The duration of each cookie and each local storage key is described in the cookie policy.
Who we disclose it to and transfers
We do not sell or rent your data. We may process it through providers acting as processors, under contract and only according to our instructions:
- website hosting;
- hosting of our internal management application, which receives the requests sent through the form and the visit statistics;
- the email service: your request reaches our sales team (vanzaribellresidence@gmail.com) through FormSubmit (formsubmit.co), which also sends you the automatic confirmation if you left your email address;
- Google Analytics 4 (Google): with your consent, measurement with cookies; without consent, only the cookieless signals without a visitor identifier described above (Consent Mode v2).
Some technology providers may have infrastructure outside the European Economic Area (for example in the USA); in such cases the transfer is carried out with appropriate safeguards under the GDPR (the standard contractual clauses approved by the European Commission).
The Google map on the Location page is only loaded if you press “Show the Google map”; Google then receives your browser's IP address in order to display it and may set its own cookies. If you write to us on WhatsApp, the conversation takes place through the WhatsApp service. These services apply their own privacy policies.
We may disclose data to public authorities when required by law. A list of providers can be made available on request.
Your rights
You have the right of access, rectification, erasure, restriction, objection and portability, as well as the right to withdraw your consent at any time, without affecting prior processing. To exercise them, write to us at vanzaribellresidence@gmail.com. We reply within at most one month. You also have the right to lodge a complaint with the Romanian data protection authority (ANSPDCP), B-dul G-ral Gheorghe Magheru no. 28–30, Bucharest, www.dataprotection.ro.
You can withdraw your cookie consent at any time from the cookie policy.
Last updated: 3 November 2026. This policy may be updated whenever necessary; the version in force is the one published on this page.