—LEGAL INFORMATION

Privacy Policy

Protecting your personal data is our priority.

Last updated: 22.05.2026

This Privacy Policy describes how HAIRSTAGE EDUCATION SRL, as data controller, collects, uses and protects the personal data of site users, in accordance with Regulation (EU) 2016/679 (GDPR) and applicable Romanian law (including Law no. 190/2018).
01

Data controller

  • HAIRSTAGE EDUCATION SRL
  • Registered office: Str. Popa Petre nr. 27, Rosetti Luxury, Sector 2, București, România
  • Trade Register no.: J23/1024/2019 · CUI: 40736929
  • Phone: 0725 774 414
  • E-mail: contact@hairstage.ro
02

What data we collect

We may process the following categories of personal data:

  • Identification and contact data: first and last name, email address, phone number.
  • Booking data: the desired service, preferred date and time, the messages you send.
  • Technical and usage data: IP address, browser type and browsing data collected through cookies (only with consent — see the Cookie Policy).

The data is provided voluntarily (usually through the contact form, by phone or via WhatsApp). We do not intentionally collect sensitive data and we do not request more data than is necessary to respond to your request.

03

Purposes and legal basis for processing

We process data for specific purposes, each with a corresponding legal basis:

  • Bookings and service delivery – organizing and confirming bookings: performance of the contract / pre-contractual measures, art. 6 (1) (b) GDPR.
  • Responding to requests and communication – handling questions received via the form, phone or WhatsApp: art. 6 (1) (b) or our legitimate interest, (f).
  • Statistics and analytics (Google Analytics) – improving the site: your consent, art. 6 (1) (a).
  • Site security and legal compliance – our legitimate interest, (f), or a legal obligation, (c).
04

Categories of recipients

We do not sell your data. We may disclose it, strictly as necessary, to:

  • the site's web hosting and email provider;
  • Google (Google Analytics), for traffic statistics — only with consent;
  • Meta Platforms (WhatsApp), when you contact us through this app, in accordance with its own policies;
  • public authorities, where there is a legal obligation to do so.

Note: the list of providers and the retention periods represent a standard configuration and may be adjusted; for up-to-date details you can contact us anytime.

05

Transfers outside the EU/EEA

Some providers (e.g. Google, Meta) may process data on servers located outside the European Economic Area, including in the United States. These transfers are carried out on the basis of appropriate safeguards, such as the European Commission's standard contractual clauses or the EU-US Data Privacy Framework.

06

Storage period

We keep data only for as long as necessary for the purposes for which it was collected:

  • data related to bookings and contact requests: usually 1–3 years from the last interaction;
  • documents with accounting/fiscal relevance: according to legal terms (generally 10 years);
  • statistical data from Google Analytics: for the duration of consent (generally up to 14 months).

Once these terms expire, the data is deleted or anonymized.

07

Data security

We implement appropriate technical and organizational measures to protect data against unauthorized access, loss or destruction. Access is granted only to authorized personnel of HAIRSTAGE EDUCATION SRL.

08

Rights of data subjects

Under the GDPR, you have the following rights:

  • the right of access to data;
  • the right to rectify inaccurate or incomplete data;
  • the right to erasure of data (the “right to be forgotten”);
  • the right to restrict processing;
  • the right to data portability;
  • the right to object to processing;
  • the right to withdraw consent at any time, without affecting the lawfulness of prior processing.

To exercise these rights you can contact us using the details in point 1. You also have the right to lodge a complaint with the supervisory authority:

Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP)

B-dul G-ral Gheorghe Magheru nr. 28-30, Sector 1, cod poștal 010336, București

E-mail: anspdcp@dataprotection.ro

Web: www.dataprotection.ro

09

Automated decisions and profiling

We do not make decisions based solely on automated processing of data (including profiling) that produce legal effects concerning you or similarly significantly affect you.

10

Cookies

Details about cookies and managing your preferences can be found in the Cookie Policy.

11

Changes to this policy

We reserve the right to update this policy. Any change will be published on this page, and the update date will be revised accordingly.

12

Contact

For questions or requests regarding the processing of your personal data, you can contact us at:

  • E-mail: contact@hairstage.ro
  • Phone: 0725 774 414
  • Address: Str. Popa Petre nr. 27, Rosetti Luxury, Sector 2, București, România

NEED CLARIFICATIONS?

Our team answers any question.

contact@hairstage.ro · 0725 774 414