General information
This Privacy Policy explains how DANYA CEBUS PROPERTIES S.R.L., a Romanian legal entity with its registered office in Voluntari, Bulevardul Pipera no. 1/VI, Hyperion Towers, Tower 1, Room II, Office 3, 9th Floor, Ilfov County, registered with the Trade Register under no. J23/2359/2020, sole registration number 42670936 (hereinafter the "Company"), uses cookies and other similar technologies on the website (hereinafter the "Site").
The Company acts as a personal data controller within the meaning of Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data (hereinafter the "GDPR").
By accessing and using the Site, the User confirms that they have read, understood and agree to this Privacy Policy, as well as to the processing and storage of their personal data by DANYA CEBUS PROPERTIES S.R.L. for the purposes and under the conditions described in this section.
Categories of data subjects
This policy applies to the following categories of persons:
- visitors of the Site https://denyahome.ro;
- persons who contact the Company through the contact form, e-mail or telephone;
- potential clients and business partners.
Data processing principles
The Company complies with the fundamental principles of personal data processing set out in Article 5 of the GDPR:
- lawfulness, fairness and transparency – data is processed lawfully, fairly and transparently in relation to the data subjects;
- purpose limitation – data is collected for specified, explicit and legitimate purposes;
- data minimisation – only the data strictly necessary for the purpose of processing is collected;
- accuracy – the Company makes every effort to keep data accurate and up to date;
- storage limitation – data is retained only for the period necessary to fulfil the declared purposes;
- integrity and confidentiality – data is protected against unauthorised access, loss or destruction;
- accountability – the Company can demonstrate compliance with these principles.
Types of data collected
Depending on the User's interaction with the Site, the Company may collect the following data:
Data provided directly: first name, last name, e-mail address, phone number, data contained in messages sent through the contact form or by e-mail.
Data collected automatically: IP addresses, browser type, operating system, visit duration, pages viewed, browsing behaviour, through cookies and statistical analysis tools (e.g. Google Analytics).
The Company does not request or process sensitive data (ethnic origin, political opinions, religious beliefs, medical data, etc.).
Purposes of data processing
Personal data is processed for the following legitimate purposes:
- responding to requests, offer enquiries or questions sent through the Site;
- communications regarding the Company's services, only if the data subject has given their consent;
- ensuring the operation and security of the Site;
- anonymous statistical analysis of traffic and improvement of Site content.
The Company does not use the collected data for direct marketing, remarketing or automated profiling purposes.
Legal grounds for processing
The Company processes personal data based on one or more legal grounds provided by the GDPR:
- Art. 6(1)(a) – the data subject's consent, for processing data sent through the contact form or by e-mail, as well as for optional cookies (analytics, marketing);
- Art. 6(1)(f) – the Company's legitimate interest in ensuring the safe and efficient operation of the Site, improving services and general traffic analysis (essentially anonymous).
Data retention period
Personal data is kept only for the period necessary to fulfil the purposes for which it was collected or in accordance with applicable legal obligations.
- data from contact forms: maximum 12 months from the last interaction;
- technical data (cookies, logs): in accordance with the cookies policy, usually between 6 and 26 months;
- relevant commercial correspondence may be kept for up to 3 years, for any legal archiving obligations.
After the expiry of the periods mentioned above, the stored data is permanently deleted.
Recipients and data transfers
The Company does not sell, rent or disclose personal data to third parties, except in the following limited situations:
- IT service providers (hosting, maintenance, e-mail), who act as processors and have contractual confidentiality obligations;
- public authorities, based on a legal obligation and an express request;
- statistical analysis service providers (e.g. Google Analytics), in accordance with their privacy policy.
Data may be stored on servers located in the European Economic Area (EEA). In case of transfers outside the EEA, these are only carried out to countries that ensure an adequate level of protection, in accordance with the decisions of the European Commission.
Data security
The Company applies appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration or disclosure:
- encryption of communications via SSL protocol;
- access control and secure passwords;
- regular back-ups and antivirus protection;
- training of personnel on confidentiality.
Rights of data subjects
Under the GDPR, data subjects have the following rights:
- the right of access to their own data;
- the right to rectification of inaccurate or incomplete data;
- the right to erasure ("right to be forgotten");
- the right to restriction of processing;
- the right to data portability;
- the right to object to processing, under the conditions of Article 21 GDPR;
- the right to withdraw consent at any time, without affecting the lawfulness of processing prior to withdrawal;
- the right to lodge a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP).
To exercise these rights, data subjects can send a written request to the e-mail address office@danya-cebus.ro.
The Company undertakes to respond to any request regarding the exercise of the above-mentioned rights within a maximum of 30 (thirty) calendar days from the receipt of the request.
In exceptional situations involving complex or multiple requests, this period may be extended by a further maximum of 60 days, in which case the data subject will be informed of the reasons for the delay and the new estimated response date, in accordance with the provisions of the GDPR.
Responses will be provided, as far as possible, by electronic means, in compliance with the principles of transparency and personal data protection.
Withdrawal of consent
Data subjects can withdraw their consent for data processing at any time, by sending an e-mail to office@danya-cebus.ro.
The withdrawal of consent does not affect the lawfulness of processing carried out prior to such withdrawal.
Changes to the policy
The Company reserves the right to update this Privacy Policy to reflect legislative or organisational changes.
The updated version will be published on the Site and will enter into force from the date of publication.
Contact
For questions regarding the protection of personal data, please contact us at the e-mail address office@danya-cebus.ro.
Last updated: 10.06.2026