Privacy Policy

1. Data controller and contact details

The controller responsible for processing personal data is Serghie Aurelian Iulian, provider of mobile massage services at the client's home in Bucharest (massage at the client's address).

For any question regarding the processing of personal data, you may contact the controller through:

• Phone: +40 761 079 009
• Email: serghieaurelian@yahoo.com
• Website: https://aurelianmasaj.ro/

2. Personal data collected

Through the contact form on the website, the following categories of personal data are collected:

• Full name
• Phone number
• Email address (optional)
• Preferred massage service
• Preferred date or time period for the appointment
• The message entered by the client in the form

3. Information voluntarily provided by phone, WhatsApp or email

When you contact the controller directly by phone, WhatsApp or email, you may voluntarily provide information such as your name, phone number, email address, the home address where the massage will take place, and preferences regarding the appointment. This information is used solely for arranging and managing the appointment.

4. Purposes of processing

Personal data is processed for the following purposes:

• Responding to your enquiries and questions
• Discussing availability and arranging appointment details
• Arranging and managing massage appointments
• Providing the requested massage service
• Follow-up communication related to the service (confirmations, changes, cancellations)

5. Legal basis for processing (GDPR)

Data processing is based on the following legal grounds, depending on the purpose:

• Art. 6(1)(b) GDPR — processing is necessary for the performance of a contract or pre-contractual measures at the request of the data subject (arranging and managing the appointment, providing the service).
• Art. 6(1)(f) GDPR — the legitimate interest of the controller in responding to enquiries and managing communication with interested individuals.
• Art. 6(1)(a) GDPR — the data subject's consent, particularly for communication through channels such as WhatsApp or email, where required and given.

Submitting the contact form, a WhatsApp message, an email or making a telephone enquiry constitutes an appointment request only, not a confirmed appointment. The appointment becomes valid only after Aurelian directly confirms the service, date, time, address and price. Because appointments are managed manually, availability may change. Do not travel or make arrangements based solely on the automatic form-submission confirmation message.

6. Recipients and data processors

Personal data is not sold or transferred to third parties for commercial purposes. In order to provide the service, certain technical processors may process data on behalf of the controller:

• Website hosting platform — for making the website available.
• CRM / form processing system — for recording and managing appointment requests received through the contact form.
• Email service (Yahoo) — for email communication at serghieaurelian@yahoo.com.
• WhatsApp — for messaging communication at +40 761 079 009.

Each processor may operate in accordance with its own terms of use and privacy policies.

7. Transfer of data outside the European Economic Area

Certain processors (for example, email or messaging service providers) may process data in countries located outside the European Economic Area (EEA). In such cases, the transfer takes place under the safeguards provided by the GDPR, such as adequacy decisions or standard contractual clauses adopted by the European Commission. For specific details, please consult the privacy policies of each service used.

8. Data retention period

Unconfirmed appointment requests and general enquiries are retained for a maximum of 12 months after the last communication. Communications regarding confirmed appointments may be retained for up to 3 years when reasonably necessary for managing services, resolving complaints or defending legal rights. Documents subject to accounting, tax or other legal obligations are retained for the period required by law. Data that is no longer required is deleted or anonymized.

You may request earlier deletion of your data, unless continued retention is required by law or necessary for establishing, exercising or defending a legal claim. No detailed medical records are collected or retained through the general contact form.

9. Rights of the data subject

In accordance with the GDPR, you have the following rights:

• Right of access to your personal data
• Right to rectification of inaccurate or incomplete data
• Right to erasure ("right to be forgotten"), where applicable by law
• Right to restriction of processing
• Right to data portability, where applicable
• Right to object to processing, including for reasons relating to legitimate interest
• Right to withdraw consent at any time, without affecting the lawfulness of processing prior to withdrawal

To exercise these rights, please contact the controller using the contact details in section 1.

10. Right to lodge a complaint

If you believe that the processing of personal data infringes the GDPR, you have the right to lodge a complaint with the Romanian supervisory authority — the National Supervisory Authority for Personal Data Processing (ANSPDCP).

11. Obligation to provide data and consequences of refusal

Providing data through the contact form (name, phone, preferred service, preferred date/period) is necessary in order to respond to your request and arrange an appointment. Refusal to provide this data will make it impossible to process the request. The other data (email, message) is optional.

12. Sensitive information and medical data

The general contact form is not intended to collect special category (sensitive) data, including data concerning health. Please do not send detailed diagnoses, confidential medical records or other sensitive data through the general form. Any relevant information regarding contraindications or health status should be communicated directly to the controller, by phone or WhatsApp, only in the context of arranging the appointment and ensuring the safety of the session.

13. Contact for personal data matters

For any question, request or exercise of rights regarding personal data, please contact the controller at: phone +40 761 079 009, email serghieaurelian@yahoo.com.