Privacy Policy

Last updated: 27 September 2026

1. Who we are

This website is operated by:

HEGYALJA S.R.L.
CUI: 47376207
Registration No.: J2022000761194
Registered office: Str. Croitorilor 3, 535600 Odorheiu Secuiesc, Harghita, Romania

Everwood Lodge
Str. Mentéd, 537362 Izvoare, Romania

Email: contact@everwoodlodge.com
Website: everwoodlodge.com

For the purposes of applicable data-protection legislation, including the EU General Data Protection Regulation (GDPR), HEGYALJA S.R.L. is the data controller for personal data processed through this website and in connection with enquiries and reservations made directly with Everwood Lodge.

2. What personal information we collect

When you use our website or contact us, we may collect information such as:

  • your name;

  • email address;

  • telephone number, if you provide it;

  • requested arrival and departure dates;

  • number of guests;

  • information contained in your message or enquiry;

  • information necessary to arrange and manage your stay.

We only collect information that is reasonably necessary for the relevant purpose.

3. Reservation enquiries

Our website provides a reservation enquiry form.

When you submit an enquiry, the information you provide is used to:

  • respond to your enquiry;

  • check availability;

  • communicate with you about your requested stay;

  • arrange and manage a reservation;

  • provide information necessary for your stay.

Submitting an enquiry does not by itself constitute a confirmed reservation. A reservation becomes confirmed only after the applicable booking process has been completed and confirmation has been provided.

4. How we process your information

We process personal data where this is necessary to:

  • respond to your request or enquiry;

  • take steps at your request before entering into a booking agreement;

  • perform a booking or accommodation agreement;

  • comply with legal obligations applicable to accommodation providers;

  • protect our legitimate interests, including operating and securing our website and accommodation business.

Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

5. Reservation enquiry delivery

The reservation form uses EmailJS to transmit the information you submit to us by email.

Information submitted through the reservation form may therefore be processed by EmailJS as a technical service provider. This may include your name, email address, requested dates, number of guests and the contents of your message.

EmailJS processes this information for the purpose of providing its email-delivery service.

We do not use the reservation form to sell or otherwise commercially distribute your personal information.

6. Availability information

The website provides an availability calendar to help you identify dates that are unavailable.

Availability information is obtained from external booking-platform calendar data and processed by our website's server-side service.

This process is used to determine whether dates are blocked. The website does not require or display the personal details of guests associated with those external reservations.

7. Third-party booking platforms

Everwood Lodge may also be available through third-party booking platforms, including Booking.com and Airbnb.

If you make a reservation through one of these platforms, that platform collects and processes your personal information under its own privacy policy.

We may receive information from the relevant platform that is necessary to administer your reservation and provide your stay.

This Privacy Policy applies to personal data processed by HEGYALJA S.R.L. It does not govern processing carried out independently by Booking.com, Airbnb or other third-party platforms.

8. Outdoor activities and third-party providers

Some outdoor activities presented on our website are provided by independent third-party providers and are not part of the accommodation service provided by Everwood Lodge.

If you ask us to help arrange an activity or request contact with a provider, we may share the information reasonably necessary to connect you with that provider.

The independent provider is responsible for its own services and its subsequent processing of personal data.

9. Cookies and similar technologies

The Everwood Lodge website may use technically necessary cookies or similar technologies required for the operation, security and functionality of the website and its booking functionality.

The website does not currently use Google Analytics, Google Ads, Meta Pixel or similar third-party advertising or behavioural-tracking technologies.

The website may load technical resources from third-party services where necessary for website functionality.

If we introduce optional cookies or tracking technologies that require consent under applicable law, we will provide an appropriate consent mechanism before using them.

10. Website hosting and technical services

Our website is hosted using third-party infrastructure providers.

Technical information may be processed automatically when you visit the website, including information such as:

  • IP address;

  • browser and device information;

  • requested pages or resources;

  • date and time of requests;

  • technical information required to maintain website security and functionality.

This information may be processed in server logs and similar technical systems for purposes such as website operation, security, troubleshooting and prevention of abuse.

11. Who we share information with

We do not sell your personal data.

Personal information may be shared with third parties only where reasonably necessary for the purposes described in this Privacy Policy, including:

  • technical and hosting service providers;

  • EmailJS for delivery of reservation enquiries;

  • booking platforms such as Booking.com or Airbnb where applicable;

  • independent activity providers where you request assistance arranging an activity;

  • professional advisers and service providers where necessary;

  • public authorities where disclosure is required by law.

We seek to limit the information shared to what is reasonably necessary for the relevant purpose.

12. International data transfers

Some of our technology and service providers may process personal data outside the European Economic Area.

Where personal data is transferred outside the EEA, we take appropriate measures required by applicable data-protection law to ensure that the transfer is subject to an appropriate legal mechanism and safeguards.

13. How long we keep your information

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected.

Reservation and guest information may be retained for longer where necessary to comply with legal, accounting, tax or accommodation-related obligations.

Enquiries that do not result in a reservation will generally not be retained longer than reasonably necessary to deal with the enquiry, unless there is a legitimate reason or legal obligation to retain them.

14. Data security

We take reasonable technical and organisational measures to protect personal data against unauthorised access, accidental loss, alteration, disclosure or destruction.

However, no internet transmission or electronic storage system can be guaranteed to be completely secure.

15. Your rights under the GDPR

Subject to applicable legal conditions and limitations, you may have the right to:

  • request access to your personal data;

  • request correction of inaccurate or incomplete information;

  • request deletion of your personal data;

  • request restriction of processing;

  • object to certain processing;

  • request portability of certain personal data;

  • withdraw consent where processing is based on consent.

You also have the right to lodge a complaint with a competent data-protection supervisory authority.

To exercise your rights or ask questions about our processing of personal data, contact:

contact@everwoodlodge.com

We may need to verify your identity before responding to certain requests.

16. Data protection authority

As the accommodation operator is established in Romania, the relevant Romanian supervisory authority is:

National Supervisory Authority for Personal Data Processing (ANSPDCP)
Bucharest, Romania

You can find information about the authority and your rights on its official website.

17. Changes to this Privacy Policy

We may update this Privacy Policy when our website, services, technology or legal obligations change.

The latest version will always be published on this page and the date at the top of the policy will indicate when it was last updated.

18. Contact

If you have any questions regarding this Privacy Policy or how your personal information is processed, please contact:

HEGYALJA S.R.L.
CUI: 47376207
Registration No.: J2022000761194
Str. Croitorilor 3
535600 Odorheiu Secuiesc
Harghita, Romania

Email: contact@everwoodlodge.com
Website: everwoodlodge.com