Privacy Policy

Effective date: 01.08.2026

1. Who we are

This Privacy Policy explains how Elite Homes Company SRL, operating through the website rentaciti.com (“Rentaciti”, “we”, “us”), collects and processes personal data when you visit the website, make enquiries about accommodation, make a booking, rent a property, use property management services, make a payment, or contact customer support.

Data Controller: Elite Homes Company SRL
IDNO: 1024600079429
Legal address: str. Pietrariei 19A, of. 4, Chișinău, Republic of Moldova
Email: support@rentaciti.com
Phone: +373 760 64 033
Website: rentaciti.com

This Policy is for information purposes only. Simply visiting or using the website does not constitute general consent to all the processing operations described. For each purpose we rely on the appropriate legal basis.

2. Who this Policy applies to

This Policy applies to:

  • website visitors;
  • persons requesting information or a quotation;
  • persons making a booking for themselves or other guests;
  • actual guests and accompanying guests;
  • property owners, hosts and authorised representatives;
  • corporate clients and business partners;
  • persons contacting customer support.

3. What personal data we process

3.1. Identity data

  • first name and last name;
  • date of birth and nationality, where required;
  • type, series, number and other necessary details of identity documents;
  • any other information required for identity verification or compliance with the law.

3.2. Contact data

  • email address;
  • telephone number;
  • postal or billing address;
  • WhatsApp and other messenger identifiers through which the client contacts Rentaciti;
  • preferred method of communication.

3.3. Booking and stay data

  • selected property and dates of stay;
  • number and details of guests;
  • booking status and history;
  • arrival, check-in and check-out times;
  • special requests;
  • information about cancellations, changes, deposits, damage and refunds;
  • correspondence related to the stay.

3.4. Payment and transactional data

  • amount, currency and payment status;
  • transaction identifier or reference;
  • information about invoices, deposits and refunds;
  • bank details when required for refunds or settlements;
  • accounting and tax documents.

3.5. Account, enquiries and communications data

  • login details, account identifier and saved preferences (where accounts are available);
  • enquiries submitted via forms, email, telephone and messengers;
  • complaints, reviews, support requests and the history of their handling.

3.6. Owner and partner data

  • contact and professional information;
  • contractual and financial data;
  • information about the property and authorisations;
  • bank and accounting details;
  • history of interactions and services provided.

3.7. Technical and network data

  • IP address;
  • browser, device and operating system;
  • date and time of access;
  • pages viewed and referral source;
  • security, error and activity logs;
  • cookie identifiers and information about consent choices.

3.8. Special categories of data

Please do not send health-related or other sensitive data unless they are necessary for a specific accessibility or accommodation request. Where such information is objectively required, we process only the minimum amount necessary and only where an appropriate legal basis exists.

4. Where we obtain data from

We may receive data:

  • directly from you;
  • from the person making a booking on your behalf;
  • from an employer or corporate client;
  • from a property owner, host or manager;
  • from booking platforms and channel managers;
  • from payment organisations and banks;
  • from communication, security and fraud-prevention services;
  • through cookies and similar technologies;
  • from official or publicly available sources where permitted by law.

Any person who provides information about another guest must have the authority to do so and must ensure that the guest has the opportunity to read this Policy.

5. Purposes and legal bases

We process personal data for the following purposes:

  • responding to enquiries and preparing quotations — pre-contractual steps and, where necessary, legitimate interest in serving the client;
  • creating, administering and performing bookings — pre-contractual steps and performance of a contract;
  • identity verification and check-in — performance of a contract, legal obligation (where applicable), and legitimate interest in ensuring security;
  • receiving payments, managing deposits and refunds, issuing invoices — performance of a contract and legal obligations;
  • support and service communications — performance of a contract and legitimate interest in serving the client;
  • protecting the website, accounts and systems — legitimate interest in ensuring security;
  • preventing and investigating fraud, damage, complaints and disputes — legitimate interest and, where applicable, legal obligation;
  • accounting and tax records — legal obligation;
  • sending marketing messages — consent, where required;
  • use of non-essential analytics, preference and marketing technologies — consent;
  • improving services on the basis of aggregated or properly anonymised information — legitimate interest.

Where processing is based on legitimate interest, such interests include the conduct and protection of the business, the security of systems, guests and property, fraud prevention, customer service, and the establishment, exercise or defence of legal claims.

6. Mandatory and voluntary data

Data required to identify the parties to a contract, to prepare and perform a booking, for check-in, payment or compliance with legal obligations are mandatory. If they are not provided, we may be unable to process the booking or provide the service.

Subscription to marketing messages and the use of non-essential cookies are voluntary. Refusal or withdrawal of consent does not prevent the use of the core booking and accommodation services.

7. Cookies and similar technologies

We use strictly necessary technologies and, subject to your choice, preference, analytics and marketing technologies. Detailed information about the specific technologies, their providers, purposes and retention periods is set out in a separate Cookie Policy.

You may change or withdraw your choice at any time via the permanent “Manage Consent” or “Cookie Settings” link on the website.

8. Who data may be shared with

Where necessary, data may be shared with:

  • property owners, hosts and authorised managers;
  • booking platforms and channel-management providers;
  • payment organisations, banks and refund providers;
  • hosting, cloud, email, CRM, messenger and IT-support providers;
  • accountants, auditors, insurers, lawyers and other professional advisers;
  • cleaning, maintenance, check-in and transfer services — only to the extent necessary;
  • identity verification, security and anti-fraud providers;
  • courts, law-enforcement and public authorities where disclosure is required or permitted by law.

We do not sell personal data. Providers acting on our behalf must be bound by appropriate confidentiality, security and data-protection obligations.

9. International transfers

Some providers may store or process data outside the Republic of Moldova. In such cases the transfer is carried out using a mechanism provided by law, such as an adequacy decision, appropriate contractual safeguards, or another permitted ground.

Information about the safeguards applied can be requested using the contact details in Section 19.

10. Retention periods

We retain data no longer than necessary for the relevant purpose:

  • unfinished enquiries — normally up to 12 months after the last communication;
  • bookings, contracts, invoices and payments — for the contractual period and the applicable tax, accounting and limitation periods;
  • identity document details — only for the period of verification and performance of applicable obligations;
  • support requests — normally up to 24 months after closure, unless needed for an ongoing booking, complaint or dispute;
  • marketing data — until consent is withdrawn or the established period of inactivity ends; a minimal record of opt-out may be retained to honour the choice;
  • security logs — normally up to 12 months, unless longer retention is required for an investigation;
  • cookie data — for the periods specified in the Cookie Policy;
  • complaints and legal materials — until final resolution and expiry of the applicable limitation period.

11. Your rights

Subject to the conditions and exceptions provided by law, you may request:

  • information about the processing and access to your data;
  • a copy of your personal data;
  • rectification of inaccurate or incomplete data;
  • erasure of data;
  • restriction of processing;
  • objection to processing based on legitimate interest;
  • objection to direct marketing at any time;
  • data portability where this right applies;
  • withdrawal of consent at any time;
  • available information about the source of data not obtained from you;
  • the safeguards provided by law in the case of solely automated decision-making.

Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal. You may also lodge a complaint with the National Center for Personal Data Protection of the Republic of Moldova (CNPDCP) or seek judicial protection.

12. How to exercise your rights

Please send your request to support@rentaciti.com or to the legal address of the controller. Describe the request and provide information that allows us to locate the data relating to you. Where we have reasonable doubts about the identity of the requester, we may request proportionate additional information.

We will respond without undue delay and normally within one month. In cases permitted by law due to complexity or the number of requests, the period may be extended by up to a further two months; you will be informed of any extension and the reasons for it.

13. Automated decisions

Rentaciti does not intend to take decisions based solely on automated processing that produce legal or similarly significant effects for the client.

14. Security

We apply technical and organisational measures appropriate to the nature of the data and the risks involved. These may include access control, confidentiality obligations, secure transmission, backups, logging, software updates, supplier control, data minimisation, retention schedules and incident-response procedures.

15. Third-party websites and services

Booking platforms, banks, payment services, maps, social networks and messengers may independently determine the purposes and means of their own processing and apply their own privacy policies. This does not limit Rentaciti’s responsibility for the processing and transfers performed by the company itself.

16. Children and accompanying guests

The person making a booking must have the necessary legal capacity. Information about children and accompanying guests is processed only to the extent reasonably necessary for the booking, accommodation or compliance with the law.

17. Complaints

You have the right to lodge a complaint with the National Center for Personal Data Protection of the Republic of Moldova (CNPDCP). The current address, email, telephone number and procedure for lodging a complaint should be taken from the official CNPDCP website immediately before publication.

18. Changes to the Policy

We may update this Policy when services, processing operations, providers or legal requirements change. The current version is published on the website with a new date and version number. Where reasonably possible, we will inform affected persons of material changes. Continued use of the website will not be treated as new consent where the law requires separate consent.

19. Contact details

Elite Homes Company SRL
IDNO: 1024600079429
Address: str. Pietrariei 19A, of. 4, Chișinău, Republic of Moldova
Email: support@rentaciti.com
Phone: +373 760 64 033
Website: rentaciti.com