Applies to visitors of the kigumo.net website. Requests submitted through the booking page are governed by the policy displayed on that page. Version 1, 11 November 2026.
1. Controllers
Until Deep Blue Waters SRL is registered with the Trade Register, the kigumo.net website is operated by the founders of Kigumo, Andrei-Cristian Burloiu and Andrei-Constantin Popescu, natural persons, acting as joint controllers within the meaning of Article 26 of Regulation (EU) 2016/679 (“GDPR”). Andrei-Cristian Burloiu is the point of contact for requests concerning personal data. Andrei-Constantin Popescu administers the website and the relationship with the technical providers. The rights under the GDPR may be exercised against either controller.
Contact details: [email protected]; Str. Alexandru Iacobescu 2-6, Faza 1, ap. 33, sector 6, Bucharest, Romania.
After registration, the website will be operated by Deep Blue Waters SRL, which will become the sole controller. An updated version of this policy will be published at that time.
2. Categories of data processed
- IP address and technical browser data: transmitted to DigitalOcean, the provider that hosts the website, and to Sentry, which receives a technical report on each page load, for the purpose of detecting errors.
- Selected language (Romanian or English): stored in a cookie, described in section 3.
The website does not collect names, e-mail addresses or phone numbers. No traffic analytics, advertising, fonts or third-party content are used.
3. Cookies
| Cookie | Purpose | Consent |
|---|---|---|
ch-locale | Stores the website’s display language | Not required: it serves a preference expressed by the visitor |
The website uses no other cookies. Error reports store no information on the visitor’s device. The cookie can be deleted at any time from the browser settings.
4. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Ensuring the security and operation of the website and fixing technical errors | Art. 6(1)(f) GDPR: legitimate interest in operating a secure website |
| Displaying the website in the selected language | Art. 6(1)(f) GDPR: legitimate interest in respecting the visitor’s preference |
No decisions are taken based solely on automated processing, including profiling.
5. Recipients
Data is not sold or rented.
| Provider | Service | Data location |
|---|---|---|
| DigitalOcean | Hosting of the website | Frankfurt, EU |
| Sentry | Receiving technical error reports | EU |
Some providers are headquartered in the US. Any transfer outside the EEA takes place only with the safeguards provided for in Chapter V GDPR, such as the EU–US Data Privacy Framework or standard contractual clauses.
6. Retention period
Visitor data is not stored in the database. Error reports and technical logs are retained according to the settings of the server and of the monitoring provider; the period will be specified in the next version of this policy.
7. Data subject rights
Subject to the GDPR, you have the right of access, rectification, erasure, restriction of processing, and the right to object to processing based on legitimate interest. Requests should be sent to [email protected] and are answered within one month of receipt.
You have the right to lodge a complaint with Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP), B-dul G-ral Gheorghe Magheru nr. 28-30, sector 1, Bucharest, www.dataprotection.ro.
8. Changes
Any change to this policy is published as a new, dated version.