Privacy policy

In short: I use your data to book your session and to reply to you. Analytics and marketing only start if you agree.

This is an English translation of the Romanian privacy policy. If the two versions differ, the Romanian one prevails.

Who processes the data

The data controller is Simionescu Andrei Ionuț Persoană Fizică Autorizată (sole trader), tax ID (CUI) 50743303, registration no. F2024012901001 din 22.10.2024, registered at Str. Urziceni nr. 7, bl. 12, sc. C, ap. 3, Municipiul Brașov, Județul Brașov.

Contact: [email protected], phone 0723 772 880.

What data I use and why

Bookings by WhatsApp, phone or email

Your name, phone number or email address, your messages, the chosen service and the time of the booking. I use them to arrange the booking and to reply to you. The legal basis is Art. 6(1)(b) GDPR: steps taken at your request before the session.

WhatsApp is a service of WhatsApp Ireland Limited (Meta group); conversations there are also subject to the WhatsApp policy. Please do not send medical details on WhatsApp. We talk about how you feel at the practice.

The talk at the start of the session

What you tell me about how you feel (areas of tension, the pressure you are comfortable with, any contraindications) I use only to adapt the massage. I do not write it down and I do not keep client records. If you show me medical documents (for example, a hospital discharge note), I read them at the practice and do not keep them.

Online booking — SimplyBook.me

When you book online, the data you enter in the form (name, phone, email address, date and chosen service) is processed through the SimplyBook.me platform so I can manage the booking. The legal basis is Art. 6(1)(b) GDPR: steps taken at your request before the session. The SimplyBook.me form only loads when you press “Book”; until then, the site loads nothing from SimplyBook.me.

SimplyBook.me acts as a processor, under the data processing agreement (DPA) accepted by me as controller: SIMPLYBOOK.ME LTD, Nafpliou 28, Medical Court, Floor 4, Office 401, 3025 Limassol, Cyprus (registration no. HE387490). For EU businesses, data is stored in the EU. Details:SimplyBook.me privacy policy anddata processing agreement (DPA).

Analytics — Google Analytics 4, only with your consent

Pages visited, device type, approximate location and an identifier stored in a cookie. I use the statistics to understand what information visitors are looking for. The legal basis is your consent (Art. 6(1)(a) GDPR). Provider: Google Ireland Limited.

Marketing — Meta Pixel, only with your consent

I measure whether ads on Facebook and Instagram bring visits and bookings. The legal basis is your consent. Provider: Meta Platforms Ireland Limited.

Google Maps

On the contact page, the map only loads after you click it. From that moment, Google receives your IP address and may set its own cookies. Until you click, nothing is sent to Google.

Website hosting

The site is hosted by Cloudflare, which processes technical data (IP address, browser type) to deliver pages and for security. The legal basis is the legitimate interest in keeping the site working and secure (Art. 6(1)(f) GDPR).

Transfers outside the EU

Google, Meta, Cloudflare and SimplyBook.me may transfer data outside the EU, including to the USA. Transfers only take place on the basis of an adequacy decision of the European Commission, the EU–US Data Privacy Framework or standard contractual clauses approved by the European Commission.

How long I keep the data

• Booking conversations: as long as needed for the booking, then for at most 12 months.
• Accounting documents (for example, receipts and invoices): the period required by law.
• Google Analytics data: at most 14 months.
• Cookies: the durations in the cookie policy.

Who I share the data with

Only the providers above, as far as necessary, and the authorities, when the law requires it. I do not sell or rent personal data.

Your rights

You have the right:

• to find out what data I hold about you and to receive a copy;
• to ask for it to be corrected or deleted;
• to ask for processing to be restricted or to object to it;
• to receive the data in a format that can be passed to another controller;
• to withdraw your consent at any time, without affecting what happened before: for cookies, fromCookie settings;
• to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (dataprotection.ro).

For any of them, write to me at [email protected]. I reply within one month at the latest.