Price Drop Refund

Get refunded if price drops after you book!

Download
Flight ticketsHotelsBoatsCars
Help & Support

Social Media Policy - Vola

Annex to Vola.ro Privacy Policy

Social Media Policy

By using our accounts on social media, you interact with us, for example, by subscribing to our page, leaving a reaction (likes, comments), or sending us a message. The information you provide to us about yourself may constitute personal data. This Social Media Policy describes how we process personal data collected through accounts on the following social media platforms (hereinafter referred to as “Social Media Services”):

We process your personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as the “General Data Protection Regulation” or “GDPR”).

Data Controller

The controller of your personal data is Vola.ro, headquartered at Splaiul Unirii 165, TNO 2, 2nd floor, District 3, Bucharest (hereinafter referred to as the “Controller” or “we”). You may contact the Controller by email or by post at the address indicated above.
Data Protection Officer: Ana Tatu, e-mail: privacy@vola.ro

Categories of data subjects and scope of data processing

FACEBOOK
We process data of individuals who:

  • subscribed to the account by clicking the “Like” or “Follow” button,
  • published a comment, shared a post, or clicked “Like” on any post.

Categories of data:

  • account identifier (usually name and surname or nickname),
  • profile picture,
  • other photos (which may depict the person’s image),
  • content of comments,
  • statistical data about visits to the page, available through the “Facebook Insights” function and collected via cookies.

INSTAGRAM
We process data of individuals who:

  • subscribed to the account by clicking the “Follow” button,
  • published a comment or clicked “Like” on any post.

Categories of data:

  • account identifier (name and surname or nickname),
  • profile picture,
  • other photos (which may depict the person’s image),
  • content of comments,
  • visitor statistics, collected via cookies.

LINKEDIN
We process data of individuals who:

  • visited our profile,
  • interacted with our profile,
  • published or submitted personal data through LinkedIn features (e.g., forms, surveys).

Categories of data:

  • name, surname, image, and other identification information publicly available on your profile (e.g., address, contact details: email, phone number, education, professional experience, qualifications, and employment history),
  • statistical data about visits to the profile, collected via cookies.

YOUTUBE
We process data of individuals who:

  • subscribed to the channel by clicking the “Subscribe” button,
  • published a comment under a video or reacted to videos.

Categories of data:

  • account identifier (name, surname, or nickname),
  • profile picture,
  • content of comments,
  • statistical data about visits to the channel, collected via cookies.

TIKTOK
We process data of individuals who:

  • subscribed to the account by clicking the “Follow” button,
  • published a comment on posts or reacted to photos.

Categories of data:

  • account identifier (name, surname, or nickname),
  • profile picture,
  • content of comments,
  • statistical data about visitors to the account, collected via cookies.

Purpose and legal basis of processing

We process your personal data:
a) based on legitimate interest (Art. 6 para. 1 letter f GDPR), consisting of:

  • managing social media accounts, providing information about our activities, promoting events, brand, products, and services, building and maintaining a community around us (including moderating content published by users), and communicating through available features (comments, messages),
  • maintaining statistics (analyzing user activity data), 
  • establishing, exercising, or defending against legal claims.

b) based on your consent – to the extent and for the purpose specified in the consent, until it is withdrawn (Art. 6 para. 1 letter a or Art. 9 para. 1 letter a GDPR),
c) based on legal obligations – to fulfill obligations arising from the law (Art. 6 para. 1 letter c GDPR).

If we organize promotional campaigns on social media, the rules regarding data processing (purpose and legal basis) are specified in the regulations of those campaigns.

Joint Controllership

With respect to data processed for statistical purposes, we are joint controllers (Art. 26 para. 1 GDPR) together with the operator of the respective social media platform.

Detailed information:

Data recipients

Access to your personal data will be granted to:

  • our authorized employees and entities providing us with services (including, but not limited to: marketing, IT, and support), for whom access to the data is necessary for the performance of their duties,
  • other users of the social media platform (as information about followers, likes, comments, posts, and other user-provided data is publicly visible),
  • public authorities and entities performing public tasks or acting on their behalf – within the limits and purposes set by applicable law,
  • the administrator of the social media platform – under the privacy policies made available by them.

Social media operators are separate entities responsible for processing user data, including your data. They may process your data for their own purposes, based on legal grounds established by themselves. In particular, they may collect, and process information contained in cookies of visitors to our account, according to their own operating rules. Our influence on this process is limited.
Therefore, please consult their terms and privacy policies:

Data transfers to third countries or international organizations

We do not transfer your personal data to third countries or international organizations.

Data retention period

The duration of data processing depends on the purposes and legal grounds of the processing:

  • data processed based on consent will be stored until the consent is withdrawn,
  • data processed based on legal requirements will be stored according to statutory deadlines,
  • data processed based on the Controller’s legitimate interest will be stored until a valid objection is raised or until the interest ceases, namely:
    • as a rule, we process your data until we stop managing our social media account, 
    • data obtained through correspondence will be kept for the period necessary to resolve the message,
    • data processed for the establishment, exercise, or defense of claims will be stored for the limitation period of such claims.

Your rights

You have the following rights:

  • the right to access your personal data, rectify, erase, or restrict its processing, as well as the right to data portability
  • the right to object at any time to the processing of your data for direct marketing purposes,
  • the right to object to the processing of your data for reasons related to your particular situation,
  • if the processing is based on consent – the right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

To exercise your rights, please contact us using the contact details provided in the introduction.

You also have the right to lodge a complaint with the supervisory authority – the National Supervisory Authority for Personal Data Processing (ANSPDCP) – G-ral. Gheorghe Magheru Bulevard, 28-30, 1st District, postal code 010336, Bucharest, Romania.

Information about the source of data and other information

  • Your personal data is obtained directly from you through interaction with our social media account and from your public profile,
  • Providing data is voluntary,
  • Personal data will not be subject to automated decision-making, including profiling.

Last modification date: September 9, 2025