Privacy policy

 

Privacy policy regarding the processing of personal data

 

  1. Identity and contact details of the controller

 

Company name: MEGANOVA SRL

Registered office address: BRAȘOV, Gării Boulevard, no.7, room 1

Tax identification number: RO 7848750

Email address: reservations@kasho.ro

 

 

As the author, owner, and administrator of the website, MEGANOVA SRL respects the confidentiality and security of the processing of personal data of each person who accesses the website, to access the user account, subscribe to the newsletter, or send messages.

 

MEGANOVA SRL strives to protect the right to privacy and image of website users, to provide them with a safe online experience that does not negatively impact their personal lives. In this regard, we make every effort to ensure that the information entered into the system is used only for the purposes you have in mind. We are 100% anti-spam. By visiting the website and accepting the Policy on the processing of personal data, you express your express consent to the collection and processing of personal data in our own IT system, both manually and automatically, in accordance with the provisions of Regulation no. 679/2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing of the 95/46/EC (General Data Protection Regulation) – GDPR Directive. If you do not agree to your data being processed, you have the right and freedom not to access the website.

 

  1. Definitions:

 

ANSDCP (NASPDP) stands for National Authority for the Supervision of Personal Data Processing.

 

Personal data means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person;

Processing means any operation or set of operations which is performed on personal data or on sets of personal data, whether by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

Restriction of processing means the marking of personal data stored with the aim of limiting their processing in the future.

Operator means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the operator or the specific criteria for its nomination may be provided for by Union or Member State law.

Authorized person means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the operator.

Recipient means the natural or legal person, public authority, agency, or any other entity to whom personal data is disclosed, whether they are a third party. However, public authorities to whom personal data may be communicated in the framework of a particular inquiry in accordance with Union or Member State law shall not be regarded as recipients; the processing of those data by those public authorities shall be in compliance with the applicable data protection rules according to the purposes of the processing.

Consent of the concerned person means any freely given, specific, informed, and unambiguous indication of the concerned person’s wishes by which he or she, by a statement or by a clear affirmative action, agrees to the processing of personal data relating to him or her.

 

  1. User Rights of the Website

 

MEGANOVA SRL as a personal data operator, has implemented technical and organizational measures to ensure compliance with the rights of the website users (individuals concerned according to Regulation no. 679/2016, namely):

The Right to Access means the right of the concerned person to obtain a confirmation from the operator that it processes or not the personal data concerning him and, if so, access to the respective data and to information regarding the way the data are processed.

The Right to Data Portability refers to the right to receive personal data in a structured, commonly used, and machine-readable format and to the right to have this data transmitted directly to another operator, if this is feasible from the point of view of technical view.

respective data and to information regarding the way the data are processed.

The Right to Object/Opposition refers to the right of the concerned person to oppose/to object to the processing of personal data when the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller, or when the processing is necessary for the purposes of the legitimate interests pursued by the controller. When the processing of personal data is carried out for direct marketing purposes, the data subject has the right to object at any time.

The Right to Rectification refers to the right to have inaccurate personal data rectified without undue delay. The rectification shall be communicated to each recipient to whom the personal data have been disclosed unless this proves impossible or involves disproportionate effort (demonstrable).

The Right to Ask for the Data to be Deleted means the right of the data subject to request that their personal data be deleted, without undue delay, if one of the following reasons applies: they are no longer necessary to fulfill the purposes for which they were collected or processed; they object to the processing and there are no overriding legitimate grounds for the processing; personal data were processed illegally; ; the personal data have been unlawfully processed; the personal data have been collected in connection with the provision of information to the society services.

The Right to Restrict Processing can be exercised if the person contests the accuracy of the data, for a period that allows verification of the correctness of the data; the processing is illegal, and the person opposes the deletion of personal data, requesting the restriction instead; in case the operator no longer needs the personal data for the purpose of processing, but the person requests them for ascertaining, exercising or defending a right in court; if the person has objected to the processing for the time interval in which it is checked whether the legitimate rights of the operator prevail over those of the respective person.

The collection and processing of personal data obtained through the website is carried out in compliance with the provisions of Regulation no. 679/2016. For any information or requests based on the right of data subjects according to the GDPR, you can contact the specified email address.

  1. Purposes and legal basis of processing. Categories of personal data collected and processed by MEGANOVA SRL.

 

Upon accessing the website, MEGANOVA SRL will collect personal data that can identify a certain person.

In some areas of the website, MEGANOVA SRL will ask for personal data, including name, email address, phone number, and other information that can identify you. In other areas of the website, MEGANOVA SRL collects personal data such as age, gender, and your interests. Sometimes a combination of the two types of data is collected.

MEGANOVA SRL also receives and records information about the requested site’s IP address and cookies on its servers. You have the option to set your internet browser to reject cookies. However, this will have a negative impact on your site navigation. Our company’s cookie policy can be found below.

MEGANOVA SRL uses the stored information, personal data mentioned above, and provided by you to carry out activities on the https://kasho.ro/ website, in order to facilitate access to the site and improve certain products and services.

 

  1. Protection of personal data. Data retention period.

 

MEGANOVA SRL will not disclose the personal data collected through the website, except to the administrators who require this data to process it on behalf of MEGANOVA SRL or to provide services available on the website, or in cases where disclosure is a legal obligation of MEGANOVA SRL or its administrators.

MEGANOVA SRL has implemented the necessary organizational and security measures to protect against unauthorized access, use, alteration, or destruction of personal data in accordance with the provisions of the GDPR Regulation. MEGANOVA SRL, together with its collaborators, has taken responsibility for implementing appropriate technical and organizational measures regarding the confidentiality and security of personal data.

Moreover, MEGANOVA SRL provides access to personal data to administrators only in accordance with the declared purpose of data collection. All MEGANOVA SRL administrators who come into contact with personal data must act in accordance with the principles of this personal data privacy policy and have signed confidentiality agreements regarding this data.

 

MEGANOVA SRL can provide personal data collected from you to its partners with whom it has a partnership relationship, based on confidentiality agreements concluded with them and only for the purposes mentioned in this Policy, as follows: marketing service providers, payment/banking service providers, website creation, maintenance, and hosting providers.

The server equipment on which the website is hosted, and through which personal data is collected, is protected both physically and remotely, being installed in an EU location in Romania and subjected to periodic security audits.

 

  1. Changes to the Privacy Policy

 

If MEGANOVA SRL considers it necessary to change the privacy rules, it will publish such changes on this page to inform you about the types of data that are collected and how they are used. If you have any questions regarding the privacy policy, please write to us at the email address: dpo@kasho.com

 

  1. Information regarding ANSPDCP

 

If you believe that your rights provided by Regulation no. 679/2016 have been violated, you have the possibility to address the National Authority for the Supervision of Personal Data Processing, respectively ANSPDCP, by submitting a complaint.

The contact details of ANSPDCP are as follows:

Address: 28-30 G-ral. Gheorghe Magheru Blvd., Sector 1, postal code 010336, Bucharest, Romania

Phone: +40.318.059.211 / +40.318.059.212 Fax: +40.318.059.602

Email: anspdcp@dataprotection.ro

Website: www.dataprotection.ro

 

What is a cookie? An Internet Cookie (also known as a browser cookie or HTTP cookie or simply cookie) is a small file, consisting of letters and numbers, which will be stored on a user’s computer, mobile terminal or other equipment used to access the Internet. The cookie is installed by a request sent by a web server to a browser (e.g., Internet Explorer, Chrome) and is completely passive (it does not contain software programs, viruses or spyware and cannot access information from the user’s hard drive). A cookie consists of 2 parts: the name and its value. Moreover, the duration of a cookie’s existence is determined; technically, only the web server that sent the cookie can access it again when a user returns to the website associated with that web server.

Cookies themselves do not request personal information to be used and, in most cases, do not personally identify internet users.

Session cookies are stored temporarily in the web browser’s cookie folder so that it can remember them until the user exits the respective website or closes the browser window (e.g., when logging in/out of a webmail account or social networking site).

Persistent cookies are stored on the hard drive of a computer or device (and generally depend on the pre-set lifespan of the cookie). Persistent cookies also include those placed by another website than the one being visited by the user at that time, known as third-party cookies, which can be used anonymously to remember a user’s interests so that more relevant advertising can be delivered to them.

What are the advantages of cookies? A cookie contains information that links a web browser (the user) with a specific web server (the website). If a browser accesses that web server again, it can read the information already stored and react accordingly. Cookies provide users with a pleasant browsing experience and support the efforts of many websites to offer comfortable services to users, such as preferences for online privacy, language options for the site, or relevant advertising.

What is the lifespan of a cookie? Cookies are managed by web servers. The lifespan of a cookie can vary significantly depending on the purpose for which it is placed. Some cookies are used exclusively for a single session (session cookies) and are not retained once the user leaves the website, while some cookies are retained and reused each time the user returns to that website (persistent cookies). However, cookies can be deleted by a user at any time through their browser settings.

How are cookies used by this site?

Visiting this site may place cookies for the following purposes:

Advertising cookies. These cookies may come from third parties.

Cookie for visitor analysis. Every time a user visits this site, the analytics software provided by a third party generates a user analysis cookie. This cookie tells us whether you have visited this site before. The browser will tell us if you have this cookie, and if not, we will generate one. This allows us to monitor unique users who visit us and how often they do so. If you are not registered on this site, this cookie cannot be used to identify individuals, it is used only for statistical purposes. If you are registered, we may also know the details you provided to us, such as your email address and username, which are subject to confidentiality and the provisions of the Terms and Conditions, Personal Data Processing Policy, and the legislation in force regarding the protection of personal data.

Geotargetting Cookies. These cookies are used by software that determines which country you come from. It is completely anonymous, and it is used only to target content. No matter if you are navigating on our website in Romanian or in another language, you receive the same ad.

Registration cookies. When you register on this site, we generate a cookie that notifies us whether you are registered or not. Our servers use these cookies to show us the account you are registered with and if you have permission for a particular service. It also allows us to associate any comments you post on our site with your username. If you have not selected “keep me logged in,” this cookie will be automatically deleted when you close your browser or computer.

Advertising cookies. These cookies allow us to find out if you have viewed an online ad, what type of ad it is, and how long it has been since you saw the ad. We use these cookies to target online advertising as well. We may also use cookies belonging to a third party for better advertising targeting, for example, to show ads about vacations if the user has recently visited an article on the site about vacations. These cookies are anonymous, they store information about the content viewed, not about users. We also set anonymous cookies through other sites on which we advertise. By receiving them, we can use them to recognize you as a visitor to that site if you subsequently visit our site, and we can deliver advertising based on this information.

What kind of information is stored and accessed through cookies? Cookies store information in a small text file that allows a website to recognize a browser. The web server will recognize the browser until the cookie expires or is deleted. The cookie stores important information that improves the browsing experience on the Internet (e.g., language settings for accessing a site, keeping a user logged into a webmail account, online banking security, keeping products in the shopping cart).

Why are cookies important for the Internet? Cookies are the cornerstone of efficient Internet functionality, helping to generate a user-friendly browsing experience tailored to the preferences and interests of each user. Refusing or disabling cookies can make some sites impossible to use. Refusing or disabling cookies does not mean that you will no longer receive online advertising, but only that it will no longer be able to consider your preferences and interests, as highlighted by your browsing behavior.

Examples of important uses of cookies (which do not require user authentication through an account):

Content and services tailored to user preferences such as news categories, weather, sports, maps, public and government services, entertainment sites, and travel services. Offers tailored to user interests such as password retention, language preferences (e.g., displaying search results in Romanian). Retention of child protection filters for Internet content (family mode options, safe search functions). Limiting the frequency of advertising and the number of times a certain ad is displayed to a specific user on a site. Providing more relevant advertising to the user. Measuring, optimizing, and analytical features such as confirming a certain level of traffic on a website, what type of content is viewed, and how a user arrives at a website (e.g., through search engines, directly, from other websites, etc.).

Websites use these usage analyses to improve their sites for the benefit of users. Security and privacy issues: Cookies are NOT viruses! They use plain text formats and are not made up of pieces of code, so they cannot be executed or self-run. Therefore, they cannot duplicate or replicate on other networks to run or replicate again. Because they cannot perform these functions, they cannot be considered viruses.

However, cookies can still be used for negative purposes. Because they store information about users’ preferences and browsing history, both on a particular site and on multiple other sites, cookies can be used as a form of spyware. Many anti-spyware products are aware of this and constantly mark cookies to be deleted in antivirus/anti-spyware scanning procedures. In general, browsers have integrated privacy settings that provide different levels of acceptance of cookies, validity periods, and automatic deletion after the user has visited a particular site.

Other security aspects related to cookies

As identity protection is highly valuable and represents the right of every internet user, it is important to know what potential problems cookies can create. Because they constantly transmit information in both directions between the browser and website, if an attacker or unauthorized person intervenes in the data transmission process, the information contained in the cookie can be intercepted. Although very rare, this can happen if the browser connects to the server using an unencrypted network (e.g., an unsecured Wi-Fi network).

Other cookie-based attacks involve incorrect cookie settings on servers. If a website does not request that the browser uses only encrypted channels, attackers can use this vulnerability to trick browsers into sending information through unsecured channels. Attackers then use the information to access certain sites without authorization. It is very important to be careful in choosing the most appropriate method of protecting personal information. Tips for safe and responsible browsing based on cookies. Due to their flexibility and the fact that most of the most visited and largest websites use cookies, they are almost inevitable. Disabling cookies will not allow the user to access the most popular and commonly used sites including YouTube, Gmail, Yahoo, and others. Here are some tips that can ensure worry-free browsing with the help of cookies:

Customize your browser settings regarding cookies to reflect a comfortable level of cookie usage security for you.

If you don’t mind cookies and you are the only person using the computer, you can set long expiration terms for storing browsing history and personal login data.

If you share computer access, you may consider setting your browser to clear individual browsing data every time you close the browser. This is an option to access sites that place cookies and to erase any visitation information when the browsing session ends.

Install and constantly update anti-spyware applications. Many spywares detection and prevention applications include website attack detection. This prevents the browser from accessing websites that could exploit browser vulnerabilities or download dangerous software. Make sure your browser is always updated. Many cookie-based attacks exploit the weaknesses of old browser versions.

Cookies are everywhere and cannot be avoided if you want to enjoy access to the best and largest local or international websites on the Internet. With a clear understanding of how they operate and the benefits they provide, you can take the necessary security measures to confidently browse the internet.

 

How can I stop cookies?

Disabling and refusing to receive cookies can make certain sites impractical or difficult to visit and use. Also, refusing to accept cookies does not mean that you will no longer receive/see online advertising. It is possible to set your browser to no longer accept these cookies or to allow cookies from a specific site. However, for example, if you are not registered using cookies, you will not be able to leave comments. All modern browsers offer the ability to change cookie settings. These settings are usually found in the options or preferences menu of your browser. To understand these settings, the following links may be helpful, otherwise you can use the browser’s help option for more details. Cookie settings in Internet Explorer, Cookie settings in Firefox, Cookie settings in Chrome, Cookie settings in Safari.

 

Company cookie policy

This site uses cookies.

The law states that we can store cookies on your device if they are strictly necessary for the operation of this site. For all other types of cookies, we need your permission.

Necessary cookies help make a site usable by activating basic functions such as page navigation and access to secure areas of the site. The site cannot function properly without these cookies. Preference cookies allow the site to remember information that changes based on how the site behaves or looks, such as your preferred language or region.

Statistic cookies help website owners understand how visitors interact with the site by collecting and reporting information anonymously.

Marketing cookies are used to track users from one site to another. The intention is to display relevant and engaging ads for individual users.

Unclassified cookies are cookies that are being classified, together with individual cookie providers.