Last updated 18 July 2026
This document is a template prepared for Jet Crust. Please review it with legal counsel and complete the details marked in brackets before you rely on it.
This Privacy Policy explains how Astoria Of AG SRL, trading as Jet Crust ("we", "us", "our"), collects, uses and protects your personal data when you use jetcrust.com and book a stay with us. We are the data controller. You can reach us at contact@jetcrust.com or +40 770 111 555. Our registered address is Calea Bucurestilor Nr. 78, Parter, 075100 Otopeni, Romania.
The data we collect
Account
When you create an account: your name, email address and a securely hashed password. We never store your password in readable form.
Bookings
When you request a booking: the property, dates, number of guests, any add-ons you choose, and any notes you provide.
Payments
Payments are processed by Stripe. Your card is authorized (held) when you request a booking and charged only if we approve it. We do not receive or store your full card details. Stripe processes them as an independent controller under its own privacy policy.
Your agreement
When you accept our rental agreement we record the version accepted, the date and time, your IP address and your browser user-agent, as evidence of the agreement.
Communications and technical data
Emails and messages you send us, and technical information such as your device, browser and log data, and the cookies described in our Cookie Policy.
How we use your data, and our legal bases
- To provide the booking service and manage your account and stay. Legal basis: performance of a contract.
- To take payment through Stripe. Legal basis: performance of a contract.
- To keep a record of your acceptance of the rental agreement. Legal basis: legitimate interests and legal obligation.
- To communicate with you about your enquiry, request or stay. Legal basis: performance of a contract and legitimate interests.
- To secure, operate and improve the site. Legal basis: legitimate interests.
- To send occasional marketing (the Journal) if you sign up. Legal basis: consent, which you can withdraw at any time.
Who we share it with
We share your data only as needed to run the service, with providers acting on our instructions:
- Stripe — payment processing.
- Resend — sending booking and account emails.
- Vercel — website hosting.
- Supabase — database hosting.
- Concierge or experience partners, only where you request an add-on that requires it.
- Professional advisers or authorities, where required by law.
We do not sell your personal data.
International transfers
Some providers may process data outside the European Economic Area. Where they do, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.
How long we keep it
We keep your account data while your account is active. We keep booking and agreement records for as long as needed to provide our services, and financial records for 10 years as required by Romanian accounting law to meet legal, tax and accounting obligations, after which they are deleted or anonymised.
Your rights
Under the GDPR you have the right to access, correct, erase, restrict or object to the processing of your data, to data portability, and to withdraw consent. See our GDPR page for how to exercise these rights and how to complain to the Romanian supervisory authority.
Security
We protect your data with hashed passwords, encryption in transit, and access controls. No system is perfectly secure, but we take reasonable measures to keep your information safe.
Children
Our service is intended for adults. It is not directed at anyone under 18.
Changes and contact
We may update this policy from time to time and will post the new version here. For any privacy question, contact us at contact@jetcrust.com.