Privacy Policy

1. Who we are (the data controller)

• SALON TRANSILVANIA SRL
• Company ID: 37525956
• Strada Republicii 105
• România
• Email: [email protected]
• Phone: 0770976325

2. What personal data we collect

Depending on how you use the website, we may collect and process:

• Identification and contact data: first and last name, phone number, email address;
• Booking data: the services you choose, date and time, preferred staff member, your booking and visit history;
• Reviews and feedback: the ratings and comments you leave about our services;
• Marketing preferences: your consent (or withdrawal of consent) to receive promotional communications;
• Messages and correspondence: the content of messages you send us (SMS, email, in-app messages);
• Technical and usage data: data collected through cookies and similar technologies.

We do not request and do not knowingly collect special categories of data (such as health data) through this website.

3. Purposes of processing and legal bases (Art. 6 GDPR)

• Creating, confirming, modifying and cancelling bookings; related transactional communications (confirmations, reminders) — Performance of a contract, Art. 6(1)(b);
• Operating, securing and improving the booking service; maintaining the customer relationship history; preventing fraud and abuse — Legitimate interest, Art. 6(1)(f);
• Sending marketing communications (offers, campaigns, news) — Consent, Art. 6(1)(a);
• Use of non-essential cookies and analytics/advertising tools — Consent, Art. 6(1)(a);
• Compliance with legal obligations (e.g. accounting and tax records) — Legal obligation, Art. 6(1)(c).

You may withdraw your consent at any time, without affecting the lawfulness of processing carried out before the withdrawal.

4. Recipients and processors

To provide the service, SALON TRANSILVANIA relies on WISE PEOPLE S.R.L. (Primer) as a processor, as well as on the following sub-processors, each processing data only to the extent necessary for the stated purpose:

• Stripe — payment processing;
• Twilio and SMSO — sending SMS messages;
• Resend — sending emails;
• Microsoft Azure — infrastructure hosting;
• Google and Meta — web analytics and advertising, only if SALON TRANSILVANIA has enabled these tools;
• Anthropic — the AI-powered assistant;
• Apify — auxiliary data-processing services.

We may also disclose data to public authorities where required to do so by law.

Transfers outside the EU/EEA: some of the providers above process data outside the European Union / European Economic Area. In such cases, transfers are safeguarded by the Standard Contractual Clauses (SCCs) adopted by the European Commission and, where applicable, by appropriate supplementary measures. You may request a copy of these safeguards using the contact details above.

5. How long we keep your data

• Booking data and customer history: for the duration of the customer relationship and thereafter for up to 36 months from your last interaction, to ensure service continuity and to handle any complaints;
• Data processed for marketing purposes: until you withdraw your consent or after a maximum of 24 months of inactivity, whichever occurs first;
• Reviews: for as long as they are publicly displayed, until you request their deletion;
• Messages and correspondence: generally for up to 24 months from the last communication;
• Records of accounting/tax relevance: for the period required by applicable law;
• Cookies: for the durations indicated in the cookie banner/management tool.

When these periods expire, the data is irreversibly deleted or anonymised.

6. Your rights

As a data subject, you have the following rights:

• Right of access to your data;
• Right to rectification of inaccurate or incomplete data;
• Right to erasure (“right to be forgotten”);
• Right to restriction of processing;
• Right to data portability;
• Right to object to processing based on legitimate interest, including direct marketing;
• Right to withdraw your consent at any time, where processing is based on consent.

7. Right to lodge a complaint

If you believe that the processing of your data infringes applicable law, you have the right to lodge a complaint with the competent supervisory authority in your country of residence or the place of the alleged infringement.

For România, the supervisory authority is the National Supervisory Authority for Personal Data Processing (ANSPDCP), B-dul G-ral Gheorghe Magheru no. 28-30, Sector 1, Bucharest, Romania. If you are located in another jurisdiction, you may contact the competent data protection authority in that country.

8. How to exercise your rights

To exercise any of the rights above, or to withdraw your consent, you can contact us using the details in Section 1, in particular by email at [email protected] or by phone at 0770976325. We may ask for additional information to verify your identity before acting on your request. We respond without undue delay and in any event within one month of receiving the request, a period that may be extended as permitted by law.

9. Changes and last updated

We may update this policy from time to time to reflect legal, technical or operational changes. The version in force is always the one published on this website, and the date at the top of this document indicates the last update. We recommend that you review this page periodically.