Cookie policy
DOCUMENT 3 OF 3: Law no. 506/2004 (OG 13/2012) · GDPR · Directive 2002/58/CE ePrivacy. SC PIETROASA S.A. · CUI RO1153002 · www.hotelpietroasa.ro
Legal basis: Law no. 506/2004 regarding the processing of personal data and the protection of private life in the electronic communications sector, amended by GEO no. 13/2012; Regulation (EU) 2016/679 (GDPR); Directive 2002/58/EC (ePrivacy). Draft amendment to Law 506/2004 in the parliamentary procedure (2025-2026): the refuse button must have the same visibility as the accept button; categories cannot be pre-checked. Effective date: May 12, 2026.
1. What are cookies and why do we use them
Cookies are small text files stored on your device (computer, tablet, phone) when you visit the www.hotelpietroasa.ro website. They allow the website to recognize you on subsequent visits and to remember certain preferences or actions. Cookies are NOT viruses, they CANNOT access other data on your device and they CANNOT execute code. We use cookies for the correct functioning of the website, the analysis of visitor behavior and, with your consent, the personalization of the experience and the display of relevant advertisements.
2. Categories of cookies used
2.1 Strictly necessary / essential cookies
LEGAL GROUNDS: Art. 4 para. (5) lit. b) from Law 506/2004 — does not require consent, they are essential for providing the explicitly requested service. They can NOT be disabled.
| Cookie name | PROVIDER | Scop | term | Categories | Transfer UE |
|---|---|---|---|---|---|
| session_id | hotelpietroasa.ro | Maintain the active booking session; without this cookie, the reservation basket is lost | Session | Essential | No (local) |
| csrf_token | hotelpietroasa.ro | Protection against CSRF attacks on online forms | Session | Essential | Not |
| lang_pref | hotelpietroasa.ro | Remembers the language preference selected by the user | 1 an | Essential | Not |
| cookie_consent | hotelpietroasa.ro | It stores the consent preferences expressed in the cookie banner | 12 months | Essential | Not |
| auth_token | hotelpietroasa.ro | Maintain the authentication session in the customer account (if any) | 30 days | Essential | Not |
2.2 Analytical / statistical cookies
LEGAL GROUNDS: Art. 4 para. (5) lit. a) from Law 506/2004 + Art. 6 para. (1) lit. a) GDPR — requires the prior consent of the user. These cookies help us understand how visitors interact with the website. Data are collected anonymously or pseudonymously and used exclusively for statistical purposes.
| Cookie name | PROVIDER | Scop | term | Categories | Transfer UE |
|---|---|---|---|---|---|
| _ga | Google Analytics | Unique identifier to distinguish users in traffic reports | 2 years | Analytical | SUA (DPF+SCC) |
| _ga_XXXXXXXX | Google Analytics | Google Analytics session state persists | 2 years | Analytical | SUA (DPF+SCC) |
| _gid | Google Analytics | It distinguishes users within the same day | 24 ore | Analytical | SUA (DPF+SCC) |
| _gat | Google Analytics | Limits the rate of requests sent to Google servers | 1 minute | Analytical | SUA (DPF+SCC) |
| _hjSessionUser_* | Hotjar Ltd. | Hotjar unique identifier (heatmaps, session recordings) | 1 an | Analytical | EU (Malta) |
| _hjSession_* | Hotjar Ltd. | Keeps the current Hotjar session active | 30 min | Analytical | UE |
2.3 Marketing / advertising cookies
LEGAL GROUNDS: Art. 4 para. (5) lit. a) from Law 506/2004 + Art. 6 para. (1) lit. a) GDPR — requires the explicit prior consent of the user. These cookies are used to display relevant advertisements and measure the effectiveness of advertising campaigns. I can track your activity on multiple websites.
| Cookie name | PROVIDER | Scop | term | Categories | Transfer UE |
|---|---|---|---|---|---|
| _fbp | Meta Platforms | Identify browsers for Facebook/Instagram ad delivery (Meta pixel) | 90 days | Marketing | SUA (DPF+SCC) |
| fr | Meta Platforms | Deliver, measure and improve the relevance of Meta ads | 90 days | Marketing | SUA (DPF+SCC) |
| _gcl_au | Google Ads | Experience the effectiveness of advertising on the website | 90 days | Marketing | SUA (DPF+SCC) |
| _gcl_yes | Google Ads | It stores information about the Google Ads campaign that brought the user to the site | 90 days | Marketing | SUA (DPF+SCC) |
| IDE | Google/DoubleClick | Remarketing — displaying ads to users who have visited the site | 13 months | Marketing | SUA (DPF+SCC) |
2.4 Functional / preference cookies
LEGAL GROUNDS: Art. 4 para. (5) lit. a) from Law 506/2004 + Art. 6 para. (1) lit. a) GDPR — requires the prior consent of the user. These cookies allow improved and personalized functionalities: live chat, interactive maps, integration with social networks.
| Cookie name | PROVIDER | Scop | term | Categories | Transfer UE |
|---|---|---|---|---|---|
| lc_window_state | LiveChat Inc. | Keeps live chat window state (open/closed/minimized) | Session | Functional | EU (Poland) |
| __lc_cid | LiveChat Inc. | LiveChat conversation identifier for continuity in the chat | 2 years | Functional | UE |
| NOT | Google Maps | It stores the preferences for displaying the Google Maps integrated in the site | 6 months | Functional | SUA (DPF+SCC) |
3. The mechanism for obtaining and managing consent
3.1. According to Law 506/2004 (OG 13/2012) and the amendment project in the parliamentary procedure (2025-2026), consent for non-essential cookies must be:
- FREE — given without constraint; continuing to browse without acceptance does NOT constitute consent
- SPECIFIC — per cookie category, not generic for all
- INFORMED — the user knows exactly what he accepts before deciding
- UNEQUIVOCAL — expressed by a positive action (click on 'Accept'), NOT by pre-checking the options
- BALANCED — the 'Reject all' or 'Only essential' button must have the same visibility and accessibility as the 'Accept all' button (requirement of the draft amendment to Law 506/2004)
3.2. Your consent is valid for 12 months. Upon expiration, you will be asked to reconfirm your preferences.
3.3. Your cookie preferences can be modified at any time through the 'Cookie Settings' link in the footer of the www.hotelpietroasa.ro website.
4. Withdrawal of consent and management of cookies
4.1. You can modify or withdraw your consent regarding non-essential cookies at any time by:
- The 'Cookie Settings' link in the footer of the website www.hotelpietroasa.ro
- Your browser settings:
- Google Chrome: Settings -> Privacy and security -> Cookies and other site data
- Mozilla Firefox: Options -> Privacy and security -> Cookies and site data
- Microsoft Edge: Settings -> Cookies and site permissions
- Safari: Preferences -> Privacy -> Manage site data
- Specialized provider opt-out tools:
- Google Analytics Opt-out: https://tools.google.com/dlpage/gaoptout
- Meta (Facebook) Ad Preferences: https://www.facebook.com/ads/preferences
- Google Ads Settings: https://adssettings.google.com
- Your Online Choices (all ad networks): https://www.youronlinechoices.eu
4.2. The withdrawal of consent does not affect the legality of the processing carried out prior to the withdrawal. Deleting cookies from the browser can affect the functionality of the site.
5. Cookies belonging to third parties
Some cookies are placed directly by third parties and are subject to their own privacy policies. SC Pietroasa S.A. does not control these cookies. Links to the privacy policies of third parties:
| Google (Analytics, Ads, Maps) | policies.google.com/privacy |
| Meta (Facebook, Instagram) | www.facebook.com/policy.php |
| Hotjar Ltd. | www.hotjar.com/legal/policies/privacy |
| LiveChat Inc. | www.livechat.com/legal/privacy-policy |
| Booking.com (if applicable) | www.booking.com/content/privacy.html |
6. Updating the Cookie Policy
We reserve the right to update this Cookie Policy whenever necessary (legislative changes, introduction of new suppliers). The updated version will be published on www.hotelpietroasa.ro. If the changes are significant, we will ask you to reconfirm your consent.
| Current version | 2.1 |
| Date of entry into force | May 12, 2026 |
| Applicable laws | Law 506/2004 (OG 13/2012), GDPR, Directive 2002/58/CE |
| Cookies supervisory authority | ANCOM (www.ancom.ro) + ANSPDCP (www.dataprotection.ro) |
IMPORTANT NOTE: These documents were drawn up according to the legislation in force on May 12, 2026 and are specific to S.C. Pietroasa S.A., CUI RO1153002, with headquarters in Piata Daciai no. 2, Buzau, Buzau county, Romania. They do not replace specialized legal advice. We recommend the periodic review of the documents with a lawyer specialized in hotel law and data protection, including after the adoption of the amendments to Law 506/2004 in the parliamentary procedure.