Privacy policy

This policy explains what personal data we use when you book a parking space at Park & Fly, why, how long we keep it and what rights you have, under Regulation (EU) 2016/679 (“GDPR”) and Romanian Law no. 190/2018.

1. Data controllers

The data controller is RELIANCE MANAGEMENT SRL, tax ID (CUI) RO25128197, trade register no. J2011001012237, registered office: Str. Drumul Potcoavei, Nr. 51d, Voluntari, Jud. Ilfov, which owns the website.

For bookings paid online, the payment and invoice are handled by RELIANCE OPERATIONS SRL, tax ID (CUI) 46759093, registered office: Drm. Potcoavei, Nr.51d, Camera 1, Voluntari, jud. Ilfov, which processes the data needed for payment and invoicing.

For any question or request about your data: office@parknfly.ro or in writing at the registered office above.

2. What data we use and why

• The booking and parking service — name, phone, email, registration number, make and model (optional), dates, transfer and number of people. Legal basis: performance of the contract (art. 6(1)(b) GDPR).
• Payment and invoicing — amounts paid, payment method, the EuPlătesc transaction ID, invoicing details (including company details, taken by tax ID from the public ANAF database). Legal basis: the contract and legal accounting and tax obligations (art. 6(1)(b) and (c)).
• Communications about your booking — confirmation, changes, cancellation, the account sign-in link. Legal basis: the contract. We do not send advertising or newsletters without your consent.
• Website security — IP address, date and time of requests, anti-bot check. Legal basis: our legitimate interest in preventing abuse (art. 6(1)(f)).
• Contracts with companies — for cars in the fleet of a company with a contract, the driver's name and the fleet manager's confirmation. Legal basis: the contract with the company.
• Statistics on returning customers — after the retention period below, the registration number is no longer kept in readable form, but only as a hidden (pseudonymised) code from which the number cannot be read. The code tells us how many times the same car has come back, so we can reward loyal customers. We do not link it to a name, phone number or email and we do not share it with anyone. Legal basis: our legitimate interest in knowing our loyal customers (art. 6(1)(f)); you can object at any time by writing to us, and we will delete the code too.
• Video surveillance of the car park — images of the car park, to protect cars and people. Legal basis: the legitimate interest in protecting the property entrusted to us (art. 6(1)(f)). The monitored area is signposted at the entrance.

Card details never reach us: you enter them only on the secure EuPlătesc page.

3. Who we share data with

• EuPlătesc — processing online card payments.
• SmartBill — issuing invoices; invoices also go to the national RO e-Factura system (ANAF), as required by law.
• GlobeHosting — hosting the website and email, on servers in Romania.
• Cloudflare — only if the anti-bot check on the form is active.
• Google — only if you choose to show the map on the home page (Google Maps).
• Public authorities, when the law requires us to.

We do not sell data and do not use it for profiling or advertising.

4. How long we keep data

• Your data (name, phone, email, registration number, saved companies): 10 years from your last booking. After that we anonymise it automatically: the booking remains only as a statistical and accounting record, without name, phone or email, and the registration number remains only as a hidden code (see “Statistics on returning customers”).
• Invoices and accounting documents: as long as accounting and tax law requires.
• The administration activity log (who changed what): one year.
• Video recordings: 30 days, then deleted automatically (longer only if needed in an incident or at the request of the authorities).

5. Your rights

You have the right to request access to your data, rectification, erasure, restriction of processing, data portability and to object to processing based on legitimate interest (art. 15–21 GDPR). Requests should be sent to office@parknfly.ro; we reply within one month at the latest. Some data cannot be erased while the law requires us to keep it (for example invoices).

You can lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP), dataprotection.ro.

6. Security

The website uses an encrypted connection (HTTPS). Staff access to data is by account and password, based on roles, and changes are recorded in a log. Links sent by email are signed and cannot be guessed.

7. Cookies

Details in the Cookie policy.