Privacy Policy (GDPR)

1. Data Controller

The data controller is ISTRATE MARIANA ANDREEA PERSOANĂ FIZICĂ AUTORIZATĂ (CUI 55763280, Trade Reg. F2026047537006), operating at Strada Nicolae Teclu nr. 1, Sibiu. For any privacy requests, contact us at istrate.iandreea13@gmail.com or 0747 662 975.

2. What Data We Collect

When you fill out the booking form (name, phone number, desired service and notes), this information is processed locally in your browser solely to compose your WhatsApp booking message. The website does not store this data in a server database.

Once you send us the message via WhatsApp, call us or email us, we process your name, phone number and appointment details.

3. Purpose and Legal Basis

We process your data solely for: (a) scheduling and confirming your appointment (Art. 6(1)(b) GDPR); (b) fulfilling legal tax and accounting obligations where applicable (Art. 6(1)(c) GDPR).

4. Third-Party Services

For communication and directions we use: WhatsApp (Meta Platforms Ireland Ltd.) when you initiate a chat, and Google Maps (Google Ireland Ltd.) on the Contact page to display directions.

5. Data Retention

Appointment details are kept only for the duration necessary to manage appointments and comply with applicable legal obligations.

6. Your GDPR Rights

Under GDPR, you have the right of access, rectification, erasure, restriction of processing, data portability and objection. To exercise these rights, email us at istrate.iandreea13@gmail.com.

You also have the right to lodge a complaint with the Romanian Data Protection Authority (ANSPDCP) at www.dataprotection.ro.