Your information.
Handled with care.

LEGENDARY TOURS PRIVACY NOTICE Version 2026-10-04-v1 1. Who controls your information Legendary Tours SRL is the controller of personal information collected through this website. Our registered office is 26B Liberty Street, Mangalia, Constanta, Romania. Tax ID: 40293040. Company registration number: ROONRC J2018003636137. Privacy questions and requests may be sent to vlad@legendarytours.ro. 2. Information we collect When you open the private invitation, we collect the email address you submit, the date and time of your request, the version of this notice that applied, and a technical record identifier used to prevent duplicate entries. We do not use the invitation form to subscribe you to unrelated marketing. If you later make a booking or contact us, we may collect the contact, traveler, dietary, accessibility, transaction and itinerary information needed to answer your request and deliver the services you select. Payment details entered at checkout are handled by the payment provider and are not stored by this website. The website uses a necessary session cookie to open the invitation and retain your selections during the visit. No advertising trackers are installed. YouTube video and Google Calendar content load only when you choose to open them, and those providers may then process technical information under their own notices. 3. Why we use it and our legal basis We use invitation and enquiry information to provide the experience details you requested, respond to questions, prepare a possible booking and protect the website from abuse. These activities are based on steps taken at your request before entering a contract and our legitimate interests in operating a secure, responsive booking service. Booking and traveler information is used to perform the contract, meet legal and accounting duties, coordinate suppliers, and protect guests during the experience. We will request consent separately if we ever invite you to receive unrelated marketing. 4. Who receives it Access is limited to Legendary Tours personnel and service providers that need the information for the purposes above. Hostinger provides website hosting. Google Workspace provides the private lead spreadsheet and, when you choose it, calendar scheduling. Stripe provides the hosted payment page. Event, accommodation and transport suppliers receive only the information needed to deliver a confirmed reservation. Service providers process information under their own contractual and security obligations. Where a provider processes information outside the European Economic Area, the transfer is handled using an applicable legal transfer mechanism and provider safeguards. 5. How long we keep it An invitation email address that does not become part of a booking is retained for 12 months from its most recent submission, then deleted from the website lead store and the synchronized leads sheet. Booking, payment and accounting records may be retained for the periods required by Romanian law. Operational traveler details are removed or minimized when they are no longer needed for the trip, safety follow-up, legal claims or statutory records. 6. Your rights Subject to the conditions in applicable data-protection law, you may request access, correction, deletion, restriction, portability or objection to processing. You may also object to processing based on legitimate interests. We do not use the invitation information for automated decision-making or profiling. Send a request to vlad@legendarytours.ro. We may need to verify your identity before acting on a request. You may also complain to the Romanian National Supervisory Authority for Personal Data Processing at dataprotection.ro or to the competent supervisory authority where you live. 7. Changes to this notice We may update this notice when the website, providers or legal requirements change. The version shown on the website is the version that applies when you submit your email address.