peplaiuri.roTourist attractions in Romania

Privacy policy

In short: Pe Plaiuri uses no advertising or tracking cookies and does not sell your data. We only process what the site needs in order to work: your account, the ratings and comments you leave, and the suggestions you send us.

Who is responsible for your data

Pe Plaiuri is run by the Pe Plaiuri team, the controller of your data under Regulation (EU) 2016/679 (GDPR). For any question or request about your data, write to us through the contact page and leave an email address we can reply to. The rules for using the site are in the terms and conditions.

What data we process

When you just visit the site

You don't need an account to use the site, and we set no cookies while you are only reading pages.

  • Technical data. Like any web server, ours receives your IP address, browser type and the page requested. We use them to deliver the page and to keep the site secure; they may end up in server logs, kept for a limited time.
  • Country and language. When you land on the home page we pick the language (Romanian or English) from the country you are visiting from and your browser language. This is used on the spot and not stored.
  • View counts. We count how many times each attraction page is opened, as a daily total. The counter does not record who opened the page.

When you rate or vote on a photo without an account

We keep the rating (or the vote given to a photo) and a random identifier, stored in the visitor_id cookie, so that you can change your rating later and each visitor votes only once. The identifier is not linked to your name or email. If you later sign in from the same browser, the ratings move to your account.

When you create an account

You can create an account from the age of 16. We keep:

  • your name and email address;
  • your password, only in hashed form — we cannot read it;
  • at each sign-in: IP address, browser type and date, to keep your session secure;
  • your saved attractions and the ones you marked as visited, your ratings and comments, and the votes you give to photos;
  • your photographer profile, if you fill it in: username, profile photo, description and links to social networks or a website;
  • the photos you upload to attractions, with their caption and the date sent. We strip the technical data (EXIF) — GPS location, camera — from the file before storing it.

Ratings and comments are shown publicly on the attraction page, next to your account name. Your photographer profile is public, at the address formed from your username. Photos appear once we have reviewed them, with your account name as the author; they remain yours, and we only receive the right to display them, described in the terms. You can delete them from your account at any time.

When you report a photo or a profile

We keep the report (the reason, any details you write, the date) and who sent it: your account or, without an account, the random identifier in the visitor_id cookie, so that each person reports something only once. The author of the photo or profile doesn't learn who reported it. We use reports only to moderate content; an account that repeatedly breaks the rules may be blocked.

When you send us a suggestion

We keep the message, the place it refers to and, if you fill it in, your email address, which we use only to reply to you.

When you sort attractions by distance

Your browser asks for your permission first. If you grant it, we receive your coordinates rounded to about 1 km and keep them for 24 hours in the loc cookie, only to order the list. We do not save them in our database.

Why we process it

  • To provide the service you asked for (Art. 6(1)(b) GDPR): your account, saved and visited attractions, ratings and comments.
  • With your consent (Art. 6(1)(a)): your location, for sorting by distance. You can withdraw consent at any time from your browser settings.
  • In our legitimate interest (Art. 6(1)(f)): site security, preventing multiple votes, aggregate view statistics and replying to suggestions.

Cookies

We only use cookies needed for features you ask for. Each one appears only when you use that feature:

  • NEXT_LOCALE — the language chosen in the language selector; 1 year.
  • loc — your approximate location, for sorting by distance; 24 hours.
  • visitor_id — the random identifier for ratings given without an account; 2 years.
  • the session cookie — keeps you signed in; expires 7 days after last use or when you sign out.

We use no analytics, advertising or social media cookies. That is why the site has no cookie banner: the law requires consent only for cookies that are not strictly necessary. You can delete them at any time from your browser settings.

Who we share data with

We do not sell or rent data. It only reaches those who help us keep the site running:

  • Our hosting provider, whose servers run the site and its database.
  • Our email provider, for password recovery messages.
  • Maps. Map images are downloaded by your browser directly from OpenStreetMap (map previews) and OpenFreeMap (the interactive map), which therefore see your IP address.

The “Open in Google Maps” and “Open in Waze” buttons are plain links: those services receive data only after you tap them, under their own policies. We request the weather forecast ourselves, from our server, from Open-Meteo; nothing about you is sent to them.

How long we keep data

  • Your account and everything tied to it (saved and visited attractions, ratings, comments, profile): until you delete it, from your account.
  • Photos: until you delete them yourself. When deleting your account you choose whether we delete them too or they stay on the site, with your name as the author or without a name; even afterwards you can ask us at any time to delete or anonymise them.
  • Sign-in sessions: 7 days after last use.
  • Ratings given without an account: for as long as they stay published on the site.
  • Suggestions: for as long as needed to review them and keep track of the changes made.

Your rights

You have the right to request access to your data, its rectification or erasure, restriction of processing and data portability, and you can object to processing based on our legitimate interest. You can change or delete your ratings, comments, photos and profile from your account, and you can delete the account yourself, from your account; for any other request, write to us and we will reply within 30 days.

If you believe we are processing your data wrongly, you can lodge a complaint with the Romanian data protection authority (ANSPDCP), dataprotection.ro.

Changes to this policy

When we change how we process data, we update this page and the date at the top.