AVEXA

Privacy Policy

Last updated · 17 June 2026

This policy explains what personal data we collect when you use AVEXA Stays, why we process it, and the rights you have under the EU General Data Protection Regulation (GDPR).

Data controller

The controller responsible for your personal data is PRIME GOLD LIVING SRL, Str. Fibrei 28, Sector 2, 020342 Bucharest, Romania (CUI 52265361, Trade Register J2025057993006). For any privacy question, contact hello@avexastays.com.

What we collect

  • Account data: your name and email address when you create an account or sign in.
  • Booking data: stay dates, number and type of guests, the apartment booked, and any requests or preferences you share.
  • Payment data: payments are processed by our payment provider. We receive a confirmation and the last digits of your card — we never store full card numbers.
  • Communications: messages you send us and our replies.
  • Usage data: basic technical information (device, browser, pages viewed) used to operate and improve the site.

Why we process it & legal basis

  • To provide your booking — performance of a contract (Art. 6(1)(b) GDPR).
  • To run and secure the website — our legitimate interest (Art. 6(1)(f) GDPR).
  • To comply with legal and tax obligations — legal obligation (Art. 6(1)(c) GDPR).
  • Marketing and optional analytics — only with your consent (Art. 6(1)(a) GDPR), which you may withdraw at any time.

Service providers

We share data only with processors that help us deliver the service, under appropriate data-processing agreements: our property-management system (booking and availability), our payment processor (payments), our database and authentication provider, our email provider (booking and transactional emails), and our hosting provider. Where a provider is outside the EU/EEA, transfers are protected by Standard Contractual Clauses or an adequacy decision.

How long we keep it

We keep booking and invoicing records for as long as required by Romanian tax and accounting law, and account data until you close your account. Data no longer needed is deleted or anonymised.

Your rights

Under the GDPR you have the right to access, rectify, erase, restrict, and port your data, and to object to certain processing. To exercise any of these, email hello@avexastays.com. You also have the right to lodge a complaint with the Romanian Data Protection Authority (ANSPDCP), dataprotection.ro.

Cookies

We use cookies that are strictly necessary for the site to function. Optional analytics or marketing cookies are set only with your consent, and you can change your choice at any time.

Changes

We may update this policy from time to time. The current version is always available on this page, with the “last updated” date shown above.