Last updated: 2 October 2026
This policy explains how Grand Hotel Bucharest (“we”, “us”) collects and uses personal data when you visit www.grandhotelbucharest.ro, book a stay, plan an event, apply for a job or contact us. We process personal data in line with the EU General Data Protection Regulation (GDPR, Regulation (EU) 2016/679) and Romanian data protection law.
Who we are
Grand Hotel Bucharest, 4 Nicolae Bălcescu Boulevard, Bucharest 010051, Romania. Telephone +40 21 310 2020. For any privacy question, write to reservations@grandhotelbucharest.ro with the subject “Personal data”.
What data we collect
- Booking data: name, contact details, stay dates, preferences and payment details. Online bookings are handled by our booking engine provider, D-EDGE, on its secure site.
- Enquiries: what you write to us by email, phone or the forms on this site (event requests, contact messages, Imperial Apartment requests). Our forms open your own email program; nothing is stored on this website.
- Job applications: your CV and the details you send to hr@grandhotelbucharest.ro.
- Guest registration: identity document details we are required by Romanian law to record at check-in.
- Website usage data: pages viewed, clicks on booking, phone and email links, device and approximate location, collected with Google Analytics.
Why we use it and our legal basis
- To take and manage your booking or event (performance of a contract).
- To answer your questions and send proposals (our legitimate interest, or steps you request before a contract).
- To meet legal duties such as guest registration, accounting and tax (legal obligation).
- To assess job applications (steps before a contract, and your consent to keep your CV for future roles).
- To understand how the website is used and improve it (your consent for analytics cookies).
- To send offers by email only where you have agreed (consent, which you can withdraw at any time).
Cookies and analytics
When you first visit, we ask for your consent before setting any analytics or marketing cookies. Until you agree, Google Analytics runs in a privacy mode (Google Consent Mode) that does not store cookies on your device. You can change or withdraw your consent at any time from Cookie settings, also at the bottom of every page.
The cookies we use:
- ghb_consent (necessary, 6 months): remembers your cookie choice.
- _ga and _ga_W348D2TEVV (analytics, up to 2 years, only with your consent): Google Analytics 4, which measures visits and actions such as clicks on “Book now”, phone numbers and email addresses.
- Marketing cookies (only with your consent): used by Google to measure our advertising campaigns.
Google may process this data outside the EU under the EU-US Data Privacy Framework and standard contractual clauses. You can also block cookies in your browser settings or install the Google Analytics opt-out add-on.
Pages also embed a Google map and links to our social media pages (Instagram, TikTok and Facebook). These services apply their own privacy policies when you use them.
Who we share data with
We share data only as needed: our booking engine and channel providers (D-EDGE), restaurant booking partners (ialoc.ro) when you reserve a table, payment providers, IT and hosting providers, Google (analytics), and public authorities where the law requires it. We do not sell personal data.
How long we keep it
- Booking and invoicing records: as long as Romanian accounting and tax law requires (usually up to 10 years).
- Enquiries and event correspondence: up to 3 years after our last contact.
- Job applications: up to 6 months after the recruitment ends, or longer if you agree.
- Analytics data: 14 months.
Your rights
You can ask to access, correct or delete your data, to restrict or object to its use, to receive it in a portable format, and to withdraw consent at any time. Write to reservations@grandhotelbucharest.ro. You can also complain to the Romanian data protection authority, ANSPDCP (www.dataprotection.ro).
Security
We use appropriate technical and organisational measures to protect personal data. This website uses an encrypted (HTTPS) connection.
Changes
We may update this policy. The date at the top shows the latest version.
