This page is an English translation of the Romanian privacy policy. If there is any discrepancy, the Romanian version prevails.
1. Data controller
The controller of personal data is the entity operating the salon under the trade name New Beauty Style, at 32 Calea Torontalului, Timișoara, Romania, phone 0739 350 665, e-mail marinela.petrisor.tm@gmail.com.
2. What data we collect
We may process, as applicable:
- first and last name;
- phone number and e-mail address;
- data optionally provided in messages (bookings, questions);
- IP address and technical data automatically generated by the browser or server (e.g. device type, access time), to the extent they appear in system logs or via analytics tools, if used and if the law requires it.
3. Purposes and legal bases for processing
- Bookings and communication — handling requests, confirming times, service-related information (basis: steps at the data subject’s request and/or conclusion and performance of a contract; in some cases, legitimate interest in responding to requests).
- Legal obligations — where the law requires retention of certain documents or reports.
- Traffic analysis — only if you enable an analytics-type service; the basis may then be consent, shown via the banner or equivalent settings, according to the configuration chosen.
4. Recipients of the data
Data is used by authorised salon staff for business purposes. We do not disclose personal data to third parties for marketing without your consent, except where the law requires it or for strictly necessary technical providers (e.g. website hosting, e-mail services), bound by confidentiality / processing agreements, strictly as needed.
5. Transfers outside the EU
We do not currently intend to transfer data to countries outside the European Economic Area. If you use services (e.g. certain analytics platforms) that involve transfer, you will be informed separately, and transfer will only take place with appropriate safeguards under the law (e.g. standard contractual clauses).
6. Retention period
We keep data for as long as needed for the purposes above: for example, booking data may be kept for the duration of the contractual relationship and thereafter for statutory archiving periods (invoicing, accounting), after which it is deleted or anonymised where possible.
7. Security
We apply reasonable technical and organisational measures: limited access to data for trained staff, appropriate communication channels, software updates where relevant. No system is risk-free; please do not send passwords or sensitive data without protection.
8. Your rights
Under applicable data protection law (including the GDPR, where it applies):
- right of access to your data;
- right to rectification;
- right to erasure (“right to be forgotten”), within the limits of the law;
- right to restriction of processing;
- right to data portability, where applicable;
- right to object to certain processing based on legitimate interests;
- right to lodge a complaint with a supervisory authority (in Romania: ANSPDCP).
To exercise your rights, contact us using the details in section 1. We will respond within the statutory time limits.
9. Updates
This policy may be changed; the applicable version is the one published on this page.