Privacy policy
What personal data we process when you use LocalTravel, why, to whom we disclose it and what rights you have.
Last updated: 13 October 2026
In short
- The data controller is WE FIX BORING S.R.L.. For any question about your data, write to us at contact@wfb.ro.
- Data from a quote request is sent only to the accommodations you chose, so that they can reply to you.
- We do not sell your data and we do not use it for advertising without your consent.
- Statistics and marketing cookies are activated only if you accept them.
- You may at any time request access to, rectification or erasure of your data.
1. Who is the data controller
The controller of your personal data is WE FIX BORING S.R.L., with its registered office at Str. Nerva Traian nr. 27-33, Sc. B, Et. 1, Ap. BIR. 6, Sector 3, București, România, CUI RO51591637, Nr. Reg. Com. J2025024957000, which operates LocalTravel. For data protection, including for the exercise of your rights, write to us at contact@wfb.ro.
This policy applies to data processed through the LocalTravel site, through the quote request forms and through the trip planner, through the emails we send you and in the relationship with accommodations. It complies with Regulation (EU) 2016/679 (GDPR), Legea nr. 190/2018 and Legea nr. 506/2004.
2. What data we process, why and on what legal basis
Quote requests to accommodations
- What data
- name, email, telephone, period, number of adults and children and the children’s ages, preferences (room, meals) and your message.
- Why
- to transmit the request to the accommodations you chose and to keep a record of requests sent.
- Legal basis
- the service you requested from us (Art. 6(1)(b) GDPR).
- Who receives it
- the accommodations you chose, by email and in their LocalTravel account.
Trip planner
- What data
- travel preferences (type of trip, destinations, period and duration, who you travel with, children’s ages, interests) and, if you want to receive the plan, your email.
- Why
- to make the plan, to send it to you and so that you can reopen it from the link received.
- Legal basis
- the service you requested from us (Art. 6(1)(b) GDPR).
Correspondence with us
- What data
- name, contact details and the content of the message (email, telephone, WhatsApp, social networks).
- Why
- to reply to you and to resolve what you asked of us.
- Legal basis
- the service you requested (Art. 6(1)(b) GDPR) or our legitimate interest in responding to messages (point (f)).
Browsing the site
- What data
- IP address, browser and device type, pages accessed, date and time, technical errors.
- Why
- operation and security of the site, prevention of abuse (for example, limiting automated requests) and resolving errors.
- Legal basis
- our legitimate interest in having a secure and functional site (Art. 6(1)(f) GDPR).
Statistics and marketing, only with your consent
- What data
- online identifiers (cookies, device identifiers), interactions with the site, visit source and campaign conversions.
- Why
- to understand how the site is used and to measure and personalise campaigns, through Google Analytics, Google Ads, Meta (Facebook and Instagram) and TikTok.
- Legal basis
- your consent (Art. 6(1)(a) GDPR and Art. 4(5) of Legea nr. 506/2004), which you may withdraw at any time from “Cookie settings”.
Accommodations and their contact persons
- What data
- name, role, email and telephone of the contact person, billing data and data from the LocalTravel Manager account.
- Why
- conclusion and performance of the subscription contract, billing and account communications; transmission of requests from tourists; collaboration proposals to accommodations that are not yet on LocalTravel.
- Legal basis
- the contract (Art. 6(1)(b) GDPR), accounting and tax legal obligations (point (c)) and our legitimate interest in presenting the service to accommodations (point (f)).
- Source
- the accommodation itself or public sources: the official registers of classified tourist reception structures and public profiles of accommodations, for example from Google Maps.
Our Facebook and Instagram pages
- What data
- your interactions with our pages (likes, comments, messages) and aggregated statistics provided by Meta.
- Why
- to communicate with those who follow us and to understand what content interests them.
- Legal basis
- our legitimate interest (Art. 6(1)(f) GDPR). For page statistics we are joint controllers with Meta Platforms Ireland Ltd., according to Meta’s terms.
3. To whom we disclose data
- The accommodations you chose, for quote requests. From the moment they receive the request, the accommodations are separate controllers: they use the data to reply to you and for the stay, according to their own privacy policy. For what an accommodation does with your data, you may contact it directly.
- Providers that help us operate, as processors, with contractual confidentiality and security obligations: hosting of the site and databases, sending emails, maps (OpenFreeMap, Google Maps) and, only with your consent, measurement and advertising (Google, Meta, TikTok).
- WhatsApp (Meta), only if you choose to send the request via WhatsApp; you send the message yourself, from your application.
- Our accountants and consultants, for billing data of accommodations.
- Public authorities, only when the law requires us to do so.
We do not sell or rent personal data.
4. Transfers outside the European Economic Area
Some providers (Google, Meta, TikTok) may also process data outside the EEA, including in the USA. In these cases, the transfer is made on the basis of an adequacy decision of the European Commission, for example the EU-US Data Privacy Framework for certified companies, or on the basis of standard contractual clauses approved by the Commission.
5. How long we keep data
| Data | How long |
|---|---|
| Quote requests | 24 months from sending |
| Travel plans and associated email | 24 months from creation |
| Correspondence with us | 12 months from the last message |
| Application technical logs | 14 days |
| Your cookie choice | 180 days, in your browser |
| Statistics and marketing cookies | the durations in the Cookie policy |
| Contractual and billing data of accommodations | for the duration of the contract, then as required by accounting and tax legislation (up to 10 years) |
| Contact data of accommodations without an account | for as long as the accommodation appears on the site or until it objects |
On expiry, data is erased or anonymised.
6. Your rights
- access: to learn whether we process your data and to receive a copy of it;
- rectification: to have incorrect or incomplete data corrected;
- erasure: to have data erased, when we no longer have a legal reason to keep it;
- restriction: to limit processing, for example while we verify an objection;
- portability: to receive the data you provided in a structured format or to have it transmitted to another controller;
- objection: to object to processing based on our legitimate interest; for direct marketing, at any time and without giving a reason;
- withdrawal of consent, at any time, without affecting processing carried out beforehand.
Write to us at contact@wfb.ro. We reply within at most one month; for complex requests, the period may be extended by a further two months, with notice to you. We may ask for additional information to confirm that the request comes from you. Exercising your rights is free of charge.
You have the right to lodge a complaint with ANSPDCP (Romanian National Supervisory Authority for Personal Data Processing), B-dul G-ral. Gheorghe Magheru nr. 28-30, Sector 1, Bucharest, dataprotection.ro.
7. Automated decisions
We do not take decisions based solely on automated processing that produce legal effects concerning you. The planner automatically proposes a route and stays based on the preferences you chose, but the plan is only a suggestion. Personalised advertisements on other platforms appear only if you accept marketing cookies.
8. Customer accounts on the former site
On the previous version of the site it was possible to create a customer account. Customer accounts are no longer available. If you had an account and want to know what data we still hold or to have it erased, write to us at contact@wfb.ro.
9. Minors
The site is addressed to persons aged at least 18. Requests for families are sent by an adult, who may enter the children’s ages, so that the accommodation can calculate the correct price. We do not ask for other data about children.
10. How we protect data
We use encrypted connections (HTTPS), access to data limited to persons who need it, separate keys for each system and signed links between our systems. No transmission over the internet is completely secure, however. If we learn of a data security breach that may affect you, we notify you and ANSPDCP, according to the law.
11. Changes
We may update this policy. The date of the last update appears at the top, and we announce important changes on the site.
12. Contact
LocalTravel.ro is operated by WE FIX BORING S.R.L., with its registered office at Str. Nerva Traian nr. 27-33, Sc. B, Et. 1, Ap. BIR. 6, Sector 3, București, România, CUI RO51591637, Nr. Reg. Com. J2025024957000.
- Email: contact@wfb.ro (including for data protection)
- Telephone: 0764 678 678
- Correspondence address: Str. Nerva Traian nr. 27-33, Sc. B, Et. 1, Ap. BIR. 6, Sector 3, București, România