GDPR & Privacy Policy

Last updated: September 2026

1. Who We Are

CruiseRMD (operated by CruiseRMD, Bd Bucureștii Noi, Nr. 136, Etaj PARTER, Ap. 5, Bucharest, Romania) is the data controller responsible for your personal data. You can contact us at [email protected].

2. Data We Collect

We may collect full name, email address, and phone number via contact and booking forms, travel preferences and itinerary requests, and communication history with our travel agents, IP address and browser data are not collected.

3. How We Use Your Data

Your data is used to respond to enquiries, process bookings, personalise your travel experience, and comply with legal obligations. We do not sell your data to third parties.

4. Legal Basis for Processing

We process your data on the basis of: (a) your consent, (b) the performance of a contract, (c) our legitimate interests in providing travel services, and (d) compliance with legal obligations under EU/Romanian law.

5. Data Retention

We retain personal data for as long as necessary to fulfil the purposes outlined in this policy, or as required by law. Booking records are kept for a minimum of 5 years for accounting and legal purposes.

6. Your Rights Under GDPR

As a data subject, you have the right to: access your data, correct inaccuracies, request erasure, restrict or object to processing, and data portability. To exercise any of these rights, contact us at [email protected].

7. Cookies

We do not uutics 4) to understand how visitors use our site. You may withdraw consent at any time via our cookie settings.

8. Contact & Complaints

For any privacy-related queries, contact us at [email protected]. You also have the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) at www.dataprotection.ro.