Last updated: April 2026
As a data subject resident in the European Economic Area, you have specific rights under the EU General Data Protection Regulation (GDPR). Carpathia respects these rights and is committed to ensuring your personal data is handled lawfully and transparently.
You may request a copy of all personal data we hold about you at any time. We will provide this within 30 days of a verified request. To request access, contact privacy@carpathia.tours with the subject "Data Access Request".
If you believe any personal data we hold about you is inaccurate or incomplete, you may request correction. We will correct the data and confirm the changes within 30 days.
Also known as the "right to be forgotten", you may request deletion of your personal data where there is no compelling legitimate reason for us to retain it. We will honour such requests unless a legal obligation prevents deletion (e.g., tax record retention requirements under Romanian law).
Where your data is held in a structured, commonly used, and machine-readable format, you may request it in that format for transmission to another controller.
You have the right to object to our processing of your personal data where that processing is based on our legitimate interests. We will cease such processing upon receipt of a verified objection unless we demonstrate compelling legitimate grounds.
If you are not satisfied with our response to any data protection request, you have the right to lodge a complaint with the competent supervisory authority. In Romania, this is the ANSPDCP (Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal): anspdcp.ro.
For any GDPR-related request or query:
privacy@carpathia.tours
Carpathia Private Tours SRL, Strada Lipscani 45, Bucharest, Romania.