INFORMATION NOTICE REGARDING PERSONAL DATA PROCESSING

SC Adventure Unfiltered SRL, with the following identification data: Tax ID (CUI): 40850370. Trade Reg. No.: J40 / 4039/2019, Address: Gheorghe Ioachim street no. 5, lot 1, room 5, sector 5, Bucharest, Romania, Tourism Operator License: 1842 / 07.05.2019, Insurance Policies Policy no: 1303 0000156 / 29.10.2025 (Valid until 28.10.2026) Policy no: IF-i 4693 / 29.10.2025 (Valid until 28.10.2026)

Considering:
– the provisions of Regulation no. 679/2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC – “GDPR”,
– the processing of personal data of natural person contractual partners, contact persons, legal or conventional representatives, collaborators, employees and/or other natural persons designated by legal person contractual partners, transmitted for the purpose of negotiating, concluding and conducting contractual relations, we inform you regarding the personal data processing carried out for the purpose of negotiating, concluding and executing contracts to which Adventure Unfiltered SRL is a party:

1. Capacity of the entity regarding personal data processing

Adventure Unfiltered SRL is a controller of personal data in accordance with the provisions of art. 4, para. 7 of the GDPR.

2. Categories of data subjects

Personal data processed by Adventure Unfiltered SRL belongs to the following categories of persons: website users, users of media channels belonging to the entity, natural person contractual partners, contact persons designated by contractual partners, their legal or conventional representatives, collaborators, employees and/or other categories of natural persons whose data is disclosed to Adventure Unfiltered SRL by contractual partners (hereinafter collectively referred to as "Data Subjects"). This personal data is transmitted to Adventure Unfiltered SRL upon the initiation of contractual relations with contractual partners or during their conduct.

3. Purpose and legal basis for personal data processing

The purposes of processing your personal data are:
- initiating the contractual relationship, negotiating, concluding and conducting contracts with Adventure Unfiltered SRL's contractual partners, including providing services, delivering products subject to the contracts and their payment, or marketing communications;
- fulfilling Adventure Unfiltered SRL's legal obligations in the context of conducting contractual relations, such as: obligations to prepare and keep financial-accounting documents; keeping personal data throughout the duration of contractual relations and archiving documents; conducting audits; transmitting information representing personal data at the request of competent state authorities; ensuring the security of systems and databases (including through backups); other legal obligations applicable depending on the nature of the contractual relationship and/or the quality of the contractual partner;
- pursuing the legitimate interests of the Data Controller or a third party, such as: for the operator's internal reporting or for improving company processes; for managing contracts or accounting supporting documents; for communicating with the representatives of contractual partners, for resolving complaints; for auditing or verifying internal processes; fraud prevention; for defending the operator's rights, such as recovering debts held by it and formulating defenses in the event of potential litigation; The legal bases for data processing operations concern the relevant articles of the GDPR, as detailed above.

4. Categories of personal data

The categories of personal data that Adventure Unfiltered SRL processes for the purposes mentioned above may include, but are not limited to:
For the Beneficiary – natural person/representative of the legal person, signatories of the contracts:
* first name, last name
* data from the identity document: home address, number, series, date of issue, issuing authority, expiry date, Personal Identification Number (CNP), image
* position/job title
* handwritten or electronic signature
* e-mail address, phone number
* correspondence address (if applicable)
* bank account
* bank card details in case of electronic payment;
* image (in case of photographs)

5. Data provision and consequences of failure to provide

Providing the personal data mentioned above is necessary to achieve the purposes specified above. Your refusal to provide the data may lead to the impossibility of providing the services or products that are the subject of the contracts.

6. Duration of personal data processing

Adventure Unfiltered SRL processes all information and personal data provided by contractual partners throughout the period of negotiation and conduct of contractual relations. Upon the termination of these relations, information and personal data will be archived for a period of 10 years, in accordance with legal provisions. After this period, your personal data will be destroyed.

7. Transmission of personal data for fulfilling Adventure Unfiltered SRL's processing purposes

Your personal data may be disclosed to: data subjects for the exercise of their rights, auditors, supervisory bodies in accordance with the legislation applicable to the service provided, public authorities and institutions based on public law obligations, lawyers to represent us in the event of litigation or for consultancy, bailiffs for contractual communications or the enforcement of potential court decisions, debt collection firms, contractual partners of Adventure Unfiltered SRL (courier firms, suppliers, subcontractors, consultants and technical experts, etc.) for concluding and executing contracts, banks for mortgaging receivables and/or obtaining financing and/or grant instruments, insurance companies for obtaining guarantee instruments, companies affiliated with Adventure Unfiltered SRL and in any other justified situations with prior notification to you, but only for the purpose of fulfilling the above-mentioned purposes and pursuing the protection of your rights as a priority.

8. Transfer of data outside the European Union

Adventure Unfiltered SRL transfers your personal data outside the European Union to service providers with whom it collaborates, in order to provide the tourist service packages purchased by you.

9. Rights of data subjects

The rights you benefit from in accordance with the provisions of EU Regulation 2016/679 are:
* Right to information: the right to be informed about the identity and contact details of the controller and the Data Protection Officer, the purposes for which data processing is done, categories of personal data concerned, recipients or categories of recipients of the data, existence of rights provided by personal data protection legislation for the data subject and the conditions under which they can be exercised;
* Right of access to data: the right to obtain confirmation from the data controller as to whether or not personal data concerning you are being processed;
* Right to rectification: the right to obtain the rectification of inaccurate personal data concerning you, as well as the completion of incomplete data;
* Right to restriction of processing in case the data subject has opposed processing for the purpose of legitimate interests pursued by Adventure Unfiltered SRL or third parties, or in case Adventure Unfiltered SRL no longer needs the personal data, but the data subject requests them for the establishment, exercise or defense of a legal claim;
* Right to withdraw your consent at any time, insofar as the data processing operation is based on your consent;
* Right to erasure of data before signing the contract with Adventure Unfiltered SRL. After signing the contract, Adventure Unfiltered SRL will store the data related to the certificate for the 10-year period mentioned above.
* Right to data portability of provided data, insofar as the data processing operation is based on consent or has as a legal basis the contract concluded with you.
* Right to object on grounds relating to your particular situation against data processing performed for the purpose of pursuing the legitimate interests of Adventure Unfiltered SRL or third parties.
* Adventure Unfiltered SRL will notify recipients to whom personal data has been disclosed of any erasure, rectification, or restriction of personal data processing, unless this proves impossible or involves disproportionate efforts.
* Right to address the ANSPDCP (National Supervisory Authority for Personal Data Processing) for the defense of any rights guaranteed by the applicable legislation in the field of personal data protection that have been violated. In order to exercise your rights regarding personal data, you can use the following contact details:
* e-mail address: [email protected]
* correspondence address: SC Adventure Unfiltered SRL, Gheorghe Ioachim street no. 5, lot 1, room 5, sector 5, Bucharest, Romania

In case you address a request regarding the exercise of your rights regarding personal data protection, you will receive a response as soon as possible, but not exceeding 30 days, under the conditions provided by the GDPR.

As a website user or beneficiary of any purchased services, you confirm that you have taken note of the provisions of this notice and you expressly express your consent for the processing of personal data, including photo images. Also, you declare on your own responsibility that you agree to the use of photographs and/or video clips taken/broadcast of your image (unremunerated) for the purpose of promoting the Adventure Unfiltered SRL brand through our own projects, including but not limited to appearances on social media networks, press appearances, on Adventure Unfiltered SRL websites and any other events and activities of the entity.

The use of photographic/video clip images for purposes other than those described above or for commercialization by transferring images to third parties is prohibited.

10. Cookies and website usage

Our website uses cookies (small text files stored on your device) to ensure the correct and secure operation of the platform, to optimize your browsing experience, and to analyze commercial traffic. These cookies do not collect data that identifies you directly in a public manner, but they help improve your interaction with our services.

Categories of cookies used are:
- **Strictly necessary (technical) cookies:** They are indispensable for the website's operation, allowing you to navigate pages, add travel packages to your shopping cart, or complete electronic payments securely. Without these modules, the website cannot run at optimal parameters, and booking sessions cannot be maintained;
- **Analytics and performance cookies:** We use web analytics tools (such as Google Analytics) to collect anonymous information about how visitors interact with our pages (number of visits, most accessed pages, duration of browsing). This data helps us exclusively to improve the structure of the website and travel offers;
- **Marketing and advertising cookies:** They can be used (e.g., through Facebook Pixel or similar platforms) to measure the effectiveness of our promotional campaigns and to display relevant ads in accordance with your interests manifested on the site, without disclosing your personal data to third parties for their own marketing purposes.

Any user has the possibility to configure the web browser (Google Chrome, Safari, Mozilla Firefox, Edge, etc.) to block, delete, or disable cookies. However, we mention that disabling certain essential cookies may lead to malfunctions in the online booking process or payment of purchased tourist services.