Data Protection Officer & Subprocessors

1. Data controller

La Mer Noire SRL
VAT RO18132713 · J13/3631/2005
Registered office: str. Pandurului nr. 119, Constanta, Romania
Email: contact@aerapart.ro
Phone: +40 726 504 050

2. Data Protection Officer (DPO)

For any question about how your personal data is processed or to exercise your GDPR rights, please contact:

AER Apart Privacy Department
Email: contact@aerapart.ro (subject: GDPR / DPO)
Phone: +40 726 504 050
We respond within a maximum of 30 calendar days, in accordance with Art. 12 GDPR.

For formal requests (access, deletion, portability, etc.), use the personal data request form.

3. Subprocessors and third parties

In accordance with Art. 28 GDPR, we transparently disclose all third parties that process data on our behalf or receive data through the site:

3.1. Hosting and infrastructure

Provider	Service	Location	Data processed
Hostico SRL hostico.ro	Web hosting, email server, backup, SSL certificate	Romania (EU)	All site data (bookings, forms, technical logs)

3.2. Booking system

Provider	Service	Location	Data processed
Multisoft SRL 4booking.ro	Property management system (Solon Hotel PMS via SOLON.OB.API)	Romania (EU)	Name, email, phone, stay details — only for confirmed bookings

3.3. Analytics and marketing (consent required)

Provider	Service	Location	Data processed
Google LLC (Google Analytics 4)	Anonymous traffic statistics	USA / EU (with Standard Contractual Clauses)	Pseudonymised IP, browser ID, pages visited — only if you accepted analytics cookies
Meta Platforms Inc. (Facebook Pixel — if active)	Ad campaign measurement	USA / EU (with SCC)	Browser ID, conversion events — only with marketing consent

3.4. Email and communication

Provider	Service	Location	Data processed
Internal SMTP (Hostico)	Transactional emails (confirmations, newsletter, GDPR)	Romania (EU)	Email address, message content, transaction ID

3.5. Payments

Payments are not processed online. The booking deposit is paid by direct bank transfer to La Mer Noire SRL accounts (held at BCR). We do not collect or store card data on this site.

4. International data transfers

Your data is primarily stored in the European Union (Romania). The only transfers outside the EU are to Google and Meta — exclusively with your consent and under Standard Contractual Clauses (SCC) approved by the European Commission, per Chapter V GDPR.

5. Updates to this list

The subprocessor list may be updated. We notify you of major changes by email (if subscribed to the newsletter) and we update this page with the last modification date. We recommend periodic review.

6. Your rights

Under GDPR you have the right to object to processing by any of these subprocessors. To exercise rights (access, rectification, deletion, objection, portability, restriction, withdrawal of consent), use the GDPR request form or write to contact@aerapart.ro.

7. Complaints

If you believe your rights have been violated, you may file a complaint with the Romanian Data Protection Authority (ANSPDCP), B-dul G-ral Gheorghe Magheru 28-30, Bucharest — www.dataprotection.ro.