Privacy Policy
Last updated:
We collect as little personal data as possible. We have no user accounts, no contact forms, no newsletter and no advertising or tracking cookies.
1. Data controller
Bears in Romania Guide. Email: bearsinromania (at) gmail (dot) com.
2. Hosting and server logs
This website is hosted on Cloudflare Pages (Cloudflare, Inc.). When you visit a page, Cloudflare automatically processes technical data needed to deliver the site and protect it against attacks: IP address, date and time, requested URL, referrer, browser and operating system.
Purpose: secure and reliable delivery of the website. Legal basis: our legitimate interest under Art. 6(1)(f) GDPR. Cloudflare acts as our processor under a data processing agreement and keeps this data only for as long as necessary for these purposes.
3. Website analytics
We use Cloudflare Web Analytics to understand which pages are popular. It does not use cookies or local storage, does not create user profiles and does not track you across websites; we only see aggregated statistics such as page views, countries and device types.
Legal basis: our legitimate interest in improving the website (Art. 6(1)(f) GDPR).
4. Affiliate links to Viator
Tour links on this site lead through a short redirect (/go/…) to Viator. We do not pass any personal data to Viator. When you arrive on its website, Viator may use cookies to recognise that you came from us so that we can receive a commission if you book. From that moment, the partner’s own privacy and cookie policy applies. See our affiliate disclosure.
5. Contacting us by email
If you email us, we use your email address and message only to reply. Legal basis: Art. 6(1)(f) GDPR, or Art. 6(1)(b) GDPR where your request relates to a contract. We delete the correspondence when it is no longer needed, unless we are legally required to keep it.
6. International data transfers
Cloudflare, Inc. is based in the United States. Transfers are covered by Cloudflare’s certification under the EU–US Data Privacy Framework and by the European Commission’s standard contractual clauses.
7. Your rights
Under the GDPR you have the right to access, rectify and erase your personal data, to restrict or object to its processing and to data portability (Articles 15–21 GDPR). To exercise them, write to bearsinromania (at) gmail (dot) com.
You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU country where you live, work or where the alleged infringement took place.
8. Cookies
This website does not set cookies of its own. Details are in our cookie policy.
9. Changes to this policy
We may update this policy when the website or the law changes. The date at the top shows the latest version.