APUSENI DIGITAL HUB S.R.L. · CUI 52599906
Version 1.0 — effective from the date of publication on the website
1.1. Explore Apuseni is operated by APUSENI DIGITAL HUB S.R.L., CUI 52599906, J2025074412001, with its registered office in Dealu Bajului village, Arieșeni commune, 253A Principală Street, Alba County. Contact: contact@exploreapuseni.ro; telephone 0750 269 246.
1.2. This policy concerns the Explore Apuseni web application available at exploreapuseni.ro and its subdomains, including use through a phone browser. There is no native mobile application.
1.3. Third-party services opened separately, such as Stripe Checkout or linked websites, have their own policies. This does not remove our responsibility for third-party components loaded in our own pages.
2.1. Cookies are small text files stored by a browser for a website. They may retain a session identifier, a user's choice or other information necessary for a function. Some expire when the browser closes (session cookies); others have a set duration (persistent cookies).
2.2. First-party cookies are placed by exploreapuseni.ro; third-party cookies are placed by other domains whose components load in our pages, such as Google or Stripe.
2.3. Similar technologies include browser storage (localStorage, sessionStorage) and identifiers used by measurement scripts. We treat them under the same rules as cookies.
3.1. Storage of or access to information on your device follows Article 4 of Law no. 506/2004. Without your consent, we use only technologies strictly necessary to provide the service you requested. All others remain off until you activate them.
3.2. If cookies process personal data, GDPR also applies on the bases described in the Privacy Policy.
3.3. Consent is freely given, specific, informed and expressed by an unambiguous action in the cookie banner. Continuing to browse, scrolling or closing the banner does not constitute acceptance.
3.4. Statistical and marketing consent are managed separately. Core services, including viewing offers, booking and accounts, are not conditional on accepting optional categories.
4.1. Strictly necessary: functions without which the Platform cannot provide the requested service, including maintaining login sessions, protecting forms against attacks, remembering language and cookie choices, and secure payment processing. These are used without consent under the statutory exception.
4.2. Statistics (analytics): measure use of the Platform, including pages visited, traffic sources, interactions and errors, so we can improve it. They activate only with your consent.
4.3. Marketing: Meta Pixel, Meta Conversions API, campaign attribution and, when configured, Google Ads measure campaigns only with separate marketing consent. Click identifiers and first and last campaign sources are retained for 90 days. Contact details for conversion matching are transformed with SHA-256 before transmission.
4.4. Rejecting optional categories allows use of all core Platform functions.
The current technical inventory, including cookie names, providers, purposes, lifetimes and categories, appears in the table below. Remembered sessions last 7 days; locale lasts 1 year; apuseni_consent lasts 6 months; first and last campaign attribution lasts 90 days and requires marketing consent.
5.1. Strictly necessary cookies have technical names that may be updated with Platform versions; their function and duration remain as described. The inventory is updated whenever components change.
5.2. Google Analytics 4 is configured with Consent Mode v2: without consent, no measurement cookies are placed and no user identifiers are transmitted. Google truncates IP addresses. The provider is Google Ireland Ltd.; data may also be processed in the USA under the conditions described in the Privacy Policy (Article 8); Google's policy: https://policies.google.com/privacy.
5.3. Stripe (Stripe Payments Europe, Ltd.) uses the listed cookies exclusively for payment security and fraud prevention; Stripe's policy: https://stripe.com/cookies-policy/legal. Full card details are not stored in cookies.
6.1. On the first visit, the banner offers “Accept all”, “Reject all” and “Cookie settings”, with equal access to acceptance and rejection. Only strictly necessary technologies are active before a choice.
6.2. “Cookie settings” allows separate selection of “Analytics” and “Marketing” and saving preferences. Optional categories are initially disabled, without preselected checkboxes.
6.3. “Accept all” authorises only categories and providers described at the time of the choice. “Reject all” keeps only strictly necessary technologies. Closing the banner without choosing does not activate optional tools.
6.4. The choice applies to the browser and device used. Another browser, cleared data or a private window may require a new choice. The choice is remembered for 6 months, after which the banner appears again.
7.1. You can change your choice at any time using “Cookie settings” in every page's footer. Disabling a category is as simple as enabling it.
7.2. Withdrawal stops future uses based on withdrawn consent; the Platform deletes previously placed statistics cookies insofar as it controls them. Cookies already placed by a third-party domain can be deleted in browser settings.
7.3. Withdrawal does not affect the lawfulness of earlier processing or existing bookings. For personal data erasure and other rights, use the channels in the Privacy Policy.
7.4. If the mechanism does not work, write to contact@exploreapuseni.ro.
8.1. Your browser allows cookies to be viewed and deleted and certain cookies to be blocked through privacy settings; consult your browser's help. Deletion may sign you out and remove preferences, including cookie choices.
8.2. Blocking all cookies in the browser may prevent strictly necessary functions such as login or payment. This differs from rejecting optional cookies in the Platform banner.
8.3. Deleting a cookie does not delete data already received by a controller; rights relating to those data are exercised under the Privacy Policy.
9.1. For personal data processed through cookies, you have GDPR rights of access, rectification, erasure, restriction, objection, portability and withdrawal of consent, exercisable at contact@exploreapuseni.ro. We respond within one month.
9.2. You may complain to ANSPDCP: https://www.dataprotection.ro/?page=Plangeri_pagina_principala.
9.3. Policy changes identify the version and effective date. A new provider, purpose or significant category change requires new information and, for optional categories, new consent. Updating the policy does not turn an earlier rejection into acceptance.