1. Who controls your data
The controller of personal data collected through this website is OLYMPIAN PARKS MANAGEMENT S.R.L. Full identification and contact details are set out below.
This page does not name a data protection officer. For any question or request concerning personal data, you may contact us directly using the published contact details.
2. Data we may collect
We collect only information you provide or information required for the operation and security of the website.
- Through contact and offer-request forms: first and last name, email address, phone number, company, message, selected property or modules and the context of the request.
- Through the chatbot: the email address used to unlock it, the page where the conversation started, messages submitted and answers returned from approved website sources.
- Technical data: session identifier, language preference, access date and time, IP address, device and browser information and security logs, to the extent recorded by the server or hosting provider.
- Information you choose to enter in free-text fields. Please do not submit sensitive data or information that is not needed for your request.
3. Purposes and legal bases
Submitting a commercial enquiry requires us to process the data needed to respond. We do not treat a required checkbox as consent to marketing that is separate from your request.
- To answer enquiries, prepare an offer and take steps at your request before a possible contractual relationship — Article 6(1)(b) GDPR and, where appropriate, our legitimate interest in managing B2B commercial relationships — Article 6(1)(f) GDPR.
- To provide the chatbot and retain the context of a conversation requested by the user — performance of the request and our legitimate interest in providing efficient assistance.
- To secure the website, prevent abuse, protect forms and diagnose errors — our legitimate interest in keeping the service secure and functional.
- For optional preferences or processing that is not strictly necessary — consent, where requested. Consent may be withdrawn without affecting processing carried out before withdrawal.
- To comply with legal obligations, keep appropriate evidence and defend rights — legal obligation or legitimate interest, as applicable.
4. Chatbot and artificial-intelligence providers
The chatbot answers exclusively from information published on this website. If the artificial-intelligence feature is enabled, the text of your message and a catalogue of relevant public sources may be sent through the OpenAI API only to select the appropriate source. The model does not write the final answer; it is assembled locally from approved source text. Under the current implementation, your email address is not included in the request sent to that API.
The conversation is also retained in our enquiry-management system. The chatbot does not make automated decisions that produce legal or similarly significant effects. Answers are informational and may require confirmation by our team.
5. Recipients and international transfers
Data is available only to authorised personnel handling enquiries and to providers required to operate the website. These may include hosting, email and technical-maintenance providers and, only when the AI feature is enabled, OpenAI.
Some services may involve processing outside the European Economic Area. In those cases, we use applicable contractual mechanisms and safeguards, such as adequacy decisions or standard contractual clauses, where required.
The website also contains links to third-party services such as maps and social networks. Once you choose to open a service, that provider processes information under its own policy.
6. How long we retain data
At the end of the applicable period, data is deleted or anonymised unless a legal obligation requires it to be retained.
- Commercial enquiries that do not result in a contract are retained for no more than 24 months after the last relevant interaction.
- Chatbot conversations and associated events are retained for no more than 12 months after the last interaction.
- Data forming part of a contractual relationship, accounting records or a claim is retained for the periods required by law or for as long as needed to establish, exercise or defend legal rights.
- Technical logs are retained only for the period necessary for security and diagnostics, according to server configuration and the hosting arrangement.
7. Your rights
Subject to the GDPR, you may request access, rectification, erasure, restriction and data portability. You may object to processing based on legitimate interests and withdraw consent at any time for processing based on consent.
To protect your information, we may request reasonable evidence of identity before responding. You also have the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing.
8. Security and updates
We apply reasonable technical and organisational measures to protect information. No electronic transmission or storage can be guaranteed to be completely risk-free.
We may update this policy to reflect changes to the website, providers or legal requirements. The applicable version is the version published here with its last-updated date.