Version 2026-05-22.1 · effective from 2026-05-22 · review 2026-11-22
Privacy Policy
1. Data controller
The data controller is Hair Craft Salon & Academy, operating under the commercial name Hair Craft Salon & Academy.
CUI: 46119892. Trade Registry no.: J23/3090/2022. Registered office: Str. Horoscopului nr. 30, Domnești, jud. Ilfov. Salon: Str. Horoscopului nr. 30, Domnești, jud. Ilfov.
Privacy contact: contact@haircraftsalon.ro, phone +40735226072.
2. Data we process
- technical and security data: IP address, user-agent, accessed pages, access times, technical errors and security logs;
- cookie consent data: consent ID, timestamp, banner/policy version, selected categories, page and language;
- appointment or request data: name, phone number, message, desired service, scheduling preferences and replies sent by phone or WhatsApp;
- photos or hair information voluntarily sent for consultation, including color history or the desired objective;
- billing data only if invoices or accounting documents are issued.
3. Purposes and legal bases
- website delivery, security and abuse prevention — legitimate interest;
- answers to requests, consultation and appointments — pre-contractual steps or contract performance;
- issuing and keeping accounting documents, where applicable — legal obligation;
- storing and proving cookie choices — legal obligation and limited legitimate interest;
- analytics, marketing or optional external content cookies — consent, if such technologies are activated.
We do not use legitimate interest for non-essential cookies, retargeting or electronic marketing without consent.
4. Cookies and similar technologies
The website uses a consent banner that allows accepting, rejecting or customizing optional categories. Before consent, the website currently sets only strictly necessary technologies for remembering choices and operating the site.
Details about the hc_consent cookie, localStorage and settings are available in the Cookie Policy.
5. Recipients and suppliers
Data may be accessed by providers that support website operation and client communication: hosting (necomunicat), email (necomunicat), analytics (nu este activat), marketing pixel (nu este activat) or booking tools (nu este activat) if activated.
WhatsApp and Instagram are external Meta services. If you contact us through these platforms or open social profiles, further processing may also follow Meta policies.
6. International transfers
If a supplier involves transfers outside the European Economic Area, we will use appropriate GDPR mechanisms such as standard contractual clauses and additional measures where necessary.
7. Data retention
We keep data only as long as needed: ordinary requests up to 12 months, appointment data up to 24 months, technical/security logs 6-12 months, cookie consents up to 6 months after withdrawal or expiry, and accounting documents according to applicable Romanian legal periods.
8. Your rights
You have the right of access, rectification, erasure, restriction, portability, objection, consent withdrawal and the right not to be subject to solely automated decisions with significant effects. Send requests to contact@haircraftsalon.ro.
9. Complaints
You may complain to ANSPDCP, the Romanian data protection authority: dataprotection.ro.
