Privacy Policy and protection of personal data


Last update on 18.08.2023

  1. general information

We appreciate your interest in our accommodation unit. The confidentiality and protection of your personal data is one of the main concerns of SC METALTIM SA, with headquarters on Divizia 9 Cavaleriei street no. 68, Jud. Timiș, Romania, as data operator (hereinafter referred to as Atlas Hotel Timișoara).

It is important to us that you are fully informed about the personal data we collect when you use our online offers and services and that you are familiar with how we use them.

Please check this section regularly as the policy may undergo changes or updates.

By continuing to browse this website, filling in the data from the existing forms on it or sending us any kind of personal data, by any means, you give your express and unequivocal consent to all the provisions of this document.


Terminology used

“Site” – this website (including the sub-sites, text, images, video files, software, products, services, tools and information contained or presented on the site, hereinafter collectively referred to as the “Site”) , managed by METALTIM S.A

„Operator” – METALTIM S.A

“Visitor” – people who access and browse the Site, without using the services offered

“User/Client” – people who visit the Site, but who also use the contact forms, sending information/questions/requirements to the site operator

“Partners” – commercial companies that operate in collaboration with the operator

“Content” – any text, graphics, images, sounds, software, audio, video, information or other materials presented on the Site and subject to intellectual property rights laws.



The personal data provided with your consent are and will be collected and processed by us exclusively for the purposes that we will present below.

The categories of personal data we collect are:

  1. a) name and surname
  2. b) home address
  3. c) identity document series and number
  4. d)    cod numeric personal
  5. e) e-mail address
  6. f) phone number
  7. g) information regarding your reservation: date of arrival and entry, duration of your stay, special requirements
  8. h) reviews and opinions regarding the services provided in our accommodation unit. When you post comments, reviews or questions on social media platforms, your name and any data you provide in that comment/message is retained for the purpose of further notification about our services, products or events.
  9. i) pictures taken in our accommodation unit on the occasion of certain events
  10. j) any other types of information you choose to provide us
  11. k) promotional campaigns with prizes or discounts

You can choose at any time what personal data you want to provide us. However, failure to provide certain personal information, if the basis of our request is compliance with a legal obligation, contractual obligations or obligations necessary to conclude a contract, determines our inability to process your reservation. For example, if you refuse to give us your name, identification data, length of stay, phone number, e-mail address, we will not be able to process your reservation.

The collected data can be processed for purposes of legitimate interest to create statistics that allow us to develop new products, make certain adjustments, make better business decisions or meet the expectations of customers or potential customers to the highest possible standards.

Also, surveillance cameras and other security measures located on our property can capture or record images of guests in public places (such as the entrances to the accommodation unit, hallways, etc.), as well as your location data (through the captured images by surveillance cameras).

Simply accessing our website will not lead to the collection of your personal data unless you voluntarily enter certain data (for example online reservations).


If you are a customer of the Website, the operator will process your personal data, such as name and surname, telephone, e-mail address, billing address, delivery address, data related to how you use the Website , for example your behavior/preferences/habits within the site, as well as any other categories of data that you provide directly in the context of creating the user account, in the context of placing an order through the site or in any other manner resulting from the use of the Site.

If you use your Facebook or Google account to create a user account on the Site, the operator will process the following public profile data displayed by the respective applications: username, email address.

If you choose to create your user account only before completing the order of a product available on the Site, your email address will be requested and an account will be created automatically. If you do not complete the order, the e-mail address and other data provided will not be stored by the operator, and the created account will be deleted automatically.

If you are a visitor to the Site, the operator will process your personal data that you provide directly in the context of using the Site, such as the data that you provide in the contact / questions / complaints section, to the extent in which you contact us in this way.


If you are our guest, we process your personal data to book you a place in our accommodation unit.

According to the rules regarding the access, record and protection of tourists in tourist reception structures, their administrators are obliged to ensure the registration of all tourists in the operative records, upon their arrival, and the completion of the Arrival and Departure Notification form. The data entered in the arrival and departure notification sheet refer to name, surname, date of birth, series and no. identity card, place of birth, domicile, citizenship, purpose of travel and period of stay in the accommodation structure. We process your personal data for registration/accommodation in our accommodation unit. At the time of accommodation, according to the legal provisions in force, you are obliged to fill in the arrival and departure notification form.

We process your personal data regarding feedback/reviews to ensure that you had a pleasant experience in our accommodation unit. The basis is our legitimate interest to constantly improve the services we offer and to offer services that are as suitable and compliant as possible with the standards of our customers.

Other communications, by e-mail, post, phone or SMS, will be made for a specific reason such as: to respond to your requests, if you have not completed an online reservation or a request for an offer, to inform you about the way in which they complaints and/or incidents that occurred during your stay have been resolved. Our basis is our legitimate interest in providing services at the highest standards by resolving any requests/complaints and to assure you of our full availability.

In order to constantly ensure the qualitative evolution of our services, we take care to analyze every complaint/suggestion from you, so we draw up statistical reports to identify the problems, the degree of repetition and to find the best solutions to remedy them. We rely on our legitimate interest to provide services that meet your standards.



In order to provide you with high-quality services, we may collect information about you from our business partners and other third parties, as detailed below:

  1. a) Business partners: such as travel agencies
  2. b) tourist sites or applications

We assure you that your data collected from third parties will be processed under the same conditions as if they were collected directly from you. Also, we will only collect what is necessary to fulfill our purposes. When we contact you for the first time, we will first of all inform you of the source from which we obtained your personal data.



If you provide us with the personal data of other natural persons, please obtain their consent before providing us with their personal data and let them know how they will be processed, as described in this privacy policy. confidentiality.



Your data are stored on servers in Romania and will only be used in Romania and on the territory of the European Union. If the processing of personal data includes the transfer outside the European Union (EU), the transfer will be based on standard contractual clauses approved in the EU, thus ensuring an adequate level of personal data protection, as required by applicable laws on data protection.

In order to fulfill the processing purposes, SC METALTIM SA may disclose your data to partners, to third parties or entities that support the company in carrying out its activity through the Site (for example courier companies, accounting or audit service providers, IT service providers) , or to the central/local public authorities, in the following exemplary cases listed:


  • for the administration of the Site;
  • for the provision of contracted services through the website;
  • in situations where this communication would be necessary for awarding prizes or other facilities to the persons concerned, obtained as a result of their participation in various promotional campaigns organized by SC METALTIM SA through the Site;
  • to maintain, customize and improve the Site and the services provided through it;
  • to perform data analysis, testing and research, monitor usage and activity trends, develop security features and authenticate users;
  • for the transmission of commercial marketing communications, under the conditions and limits provided by law;
  • when the disclosure of personal data is provided by law, etc.



Your personal data is kept for the entire period of achieving the purposes detailed in this policy, if a longer storage period is not required or permitted by applicable law (for example, surveillance camera recordings will not be kept for more than 20 days) .

We constantly review the need to keep your personal data, and to the extent that the processing is no longer necessary and there is no obligation imposed by law to keep the data, we will destroy your personal information as soon as possible and in a way that does not they can still be recovered or reconstituted.

If personal information is printed on paper, it will be destroyed in a secure way, and if it is saved on electronic media, it will be deleted by technical means to ensure that the information cannot be recovered or reconstructed later.



According to the applicable legal provisions, you benefit fromthe right of access, the right to rectification, the right to delete data, the right to restrict processing, the right to data portability, the right to opposition and the automated individual decision-making process.


To exercise your rights, please contact the data protection officer of the company directly at: in writing, at the operator’s headquarters or by filing a complaint with the ANSPDCP.


Special or consent-based data processing

When the processing is based on Article 6(1)(a)”the data subject has given his consent to the processing of his personal data for one or more specific purposes” or on Article 9 paragraph (2) letter (a) ”the data subject has given explicit consent to the processing of this personal data for one or more specific purposes, unless Union law or national law provides that the prohibition provided for in paragraph (1) cannot be lifted by the consent of the person CONCERNED” of the GDPR, you have the right to withdraw your consent at any time, without affecting the legality of the processing carried out on the basis of the consent before its withdrawal. You can therefore change or remove consent at any time, and we will act immediately accordingly, unless there is a legal reason or legitimate interest not to do so.


  • Law no. 333/2003 regarding the protection of objectives, assets, values ​​and the protection of persons, with subsequent amendments and additions;
  • Government emergency ordinance no. 97/2005 regarding the records, domicile, residence and identity documents of Romanian citizens, approved by Law no. 290/2005, republished, with subsequent amendments and additions;
  • Government Decision no. 295/10.03.2021, for the approval of the Methodological Norms for the uniform application of the provisions of the Government Emergency Ordinance no. 97/2005 regarding the records, domicile, residence and identity documents of Romanian citizens, as well as establishing the form and content of identity documents, proof of residence and the real estate register;
  • Law 227/2015 regarding the FISCAL CODE, art. 319 paragraph (20);
  • MFP ORDER 2634/2015 regarding financial accounting documents;
  • HG no. 237/2001 for the approval of the rules regarding the access, records and protection of tourists in tourist reception structures;
  • Law no. 506/17.11.2004 regarding the processing of personal data and the protection of privacy in the electronic communications sector
  • EU Regulation no. 679/2016 on the protection of natural persons with regard to the processing of personal data and on the free circulation of such data and on the repeal of Directive 95/46/CE (“RGPD”)
  • LAW no. 190/18.07.2018 on measures to implement Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation)


For any additional questions about how personal data is processed and to exercise your rights mentioned above, please contact the email

This website uses cookies. For more information on how these files are used, please visit the following link: Cookie Policy





Information note regarding the processing of personal data by means of video surveillance


  • any person present inside the Atlas Hotel, including Restaurant 23
  • clients of the ATLAS HOTEL
  • customers of RESTAURANT 23

Dear Madam / Dear Sir,

METALTIM SA (hereinafter referred to as “METALTIM”), a Romanian legal entity, with its registered office in the municipality of Timișoara, str. Divizia 9 Cavalerie no. 68, Timiș County, registered in the Trade Register under no. J35/227/1991, unique registration code RO 1802770, fiscal attribute “RO,”

In accordance with the provisions of Regulation no. 679/2016 on the protection of natural persons with regard to the processing of personal data and on the free circulation of such data and on the repeal of Directive 95/46/EC (“RGPD”), we bring to your attention this Information Note (named in hereinafter “Disclosure”), to provide you with an overview of our practices regarding the collection, recording, organization, structuring, storage, adaptation or modification, retrieval, consultation, use, disclosure by transmission, dissemination or making available provision in any other way, the alignment or combination, restriction, deletion or destruction of personal data processed by means of video surveillance systems (“CCTV”) within the premises of Hotel Atlas and Restaurant 23.

If you have any question regarding the way in which we process your personal data, you can consult our Privacy Policy and protection of personal data on the website, or you can contact us at the e-mail address

Purpose of personal data processing

Following your presence within one of METALTIM’s locations and considering the fact that our premises are permanently monitored, both by security personnel and by video monitoring systems, your personal data (for example, your image and identification data , such as car registration number) are processed in order to ensure the security and integrity of the locations where we carry out our activity.

Also, your personal data is processed in order to comply with legal requirements regarding security and public order.

The processing of your personal data for these purposes takes place:

  • in order to satisfy legitimate interests, such as ensuring the security of the locations where we operate and protecting our assets, those of our customers and suppliers;
  • in order to ensure compliance with any rules, laws and regulations applicable to our activity, including collaboration with public authorities.

The processing of your personal data takes place when you enter the building or enter the viewing area of ​​the cameras installed inside the building. The location of the cameras has been carefully revised to ensure the limitation as much as possible of the monitoring of areas that are not of interest for the intended purpose. Areas where there is a high level of expectations regarding private life, such as toilets and other similar locations, are not monitored.

Moreover, as a result of your status as a METALTIM SA customer, your personal data (for example, name and surname, home address, e-mail address, telephone number) are processed in order to provide the services requested by you, and our company’s compliance with the rules, legal regulations, codes of conduct or applicable guidelines or in order to enforce the law and cooperate with the competent authorities (including, but not limited to, fiscal and judicial authorities).

As a rule, METALTIM SA obtains this personal data directly from you.

We emphasize that the Company’s video system does not aim to capture (for example, through selective focus or orientation) or process images (for example, creating profiles) that reveal special categories of personal data.

Your personal data is disclosed to other third parties

In order to facilitate the carrying out of the activities related to the processing purposes detailed above, we communicate this data to our contractual partners (for example, security service providers), our auditors or consultants, to public authorities and institutions (for example those competent in the matter of ensuring order and public and fiscal tranquility).

Not we will transfer your personal data outside the European Economic Area.

Retention period

The personal data processed for the purpose mentioned herein will be kept only as long as necessary and proportional to the purpose for which it is processed. Thus, the images captured by the video monitoring system are stored for a period of 20 days from the date of collection, with the exception of situations expressly regulated by law or thoroughly justified cases.

 At the end of the storage period, the data are deleted through the automatic procedure in the order in which they were recorded. In the event of a security incident, as well as in thoroughly justified cases, the retention period of the relevant stored data may exceed the term established depending on the time required for the additional investigation of the security incident, these cases being documented in detail.

Security of personal data

The Company makes all reasonable efforts to protect your personal data in our possession or under our control by establishing reasonable security measures to prevent unauthorized access, collection, use, disclosure, copying, modification or deletion, as well as other similar risks.

Your rights regarding personal data

Unless otherwise provided by law, you have the following rights:

  • right of access, respectively the right to obtain a confirmation from us that we are processing your personal data, as well as access to it and the provision of information about the processing method;
  • the right to rectification which refers to correcting, without undue delay, inaccurate personal data and/or completing incomplete data;
  • the right to erasure/the right to be forgotten, i.e. the right to delete your collected personal data without undue delay, if this data is no longer necessary to fulfill the purposes for which it was collected and there is no other legal basis for processing, the data was collected illegally or the data must be deleted to comply with a legal obligation;
  • the right to restrict processing, which applies where
    1. you dispute the accuracy of your personal data,
    2.  the processing is unlawful and you object to the deletion of the personal data by requesting the restriction of the processing instead,
    3. we no longer need your personal data, but you request it to establish, exercise or defend a right in court,
    4. you have objected to the processing for the time period in which it is checked whether our legitimate interests in the processing of personal data prevail over your rights;
  • the right to object to processing, unless we demonstrate that we have legitimate reasons to process your data, reasons that override your interests, rights and freedoms or to establish, exercise or defend a right in court;
  • the right of portability, respectively your right to receive the personal data, which you have provided to us for the purposes indicated herein, in a structured, commonly used and machine-readable format, as well as the right to send this data to another operator;
  • the right to file a complaint at the National Supervisory Authority for the Protection of Personal Data (ANSPDCP);
  • the right not to be subject to a decision based exclusively on automated processing,including profiling, which produces legal effects on you or affects you in a similar way, unless such processing is necessary for the performance of the contract or is permitted by law.

With the exception of the right to file a complaint with the ANSPDCP, according to the above, these rights can be exercised by sending a written request:

  • by post to the address: Timișoara, str. Divizia 9 Cavalerie no. 68, Timiș county – to the attention of the DATA PROTECTION OFFICER
  • by email to the address: