Data controller
The controller for this website and its bookings is LUMÉ Beauty Atelier.
- Address
- 18 Paris Street, Bucharest
- hello@lumeatelier.ro
- Phone
- 0737 337 227
Data, purposes and legal grounds
To create and manage an appointment we process your name, email, phone number, selected service and specialist, date, time and any notes you submit.
- Booking and service: steps requested by you and performance of the service, under Article 6(1)(b) GDPR.
- Legal obligations: accounting, consumer claims and requests from authorities, under Article 6(1)(c).
- Security and legal claims: limited technical data and records, based on legitimate interests under Article 6(1)(f).
- Optional Analytics: only with your consent under Article 6(1)(a).
Required fields are needed to process the appointment. Notes are optional. If you voluntarily provide allergy, sensitivity or health information relevant to a treatment, we use it only to safely assess or perform the requested service and, where required, on the basis of your explicit consent.
Recipients and international transfers
Access is limited to authorised staff and service providers supporting hosting and security, Resend for transactional email, and Google for Analytics or Maps under the conditions in our Cookie policy. Data may also be shared with professional advisers or authorities when legally required.
Where a provider processes data outside the EEA, the applicable safeguard may include an adequacy decision or standard contractual clauses. We do not sell personal data.
Retention
- cancelled, rejected or unfinished appointment requests: normally no longer than 12 months;
- completed appointments, financial documents and complaints: for the statutory period or as long as needed to establish, exercise or defend legal claims;
- security logs: normally no longer than 30 days, unless an incident requires investigation;
- Analytics data: under the configured Google Analytics retention settings and until consent is withdrawn.
Photos are not taken or published for portfolio or marketing purposes without separate, specific permission.
Your rights
Subject to the GDPR, you may request access, correction, deletion, restriction, portability or object to processing based on legitimate interests. You may withdraw consent at any time without affecting prior lawful processing.
Contact hello@lumeatelier.ro. You may also complain to the Romanian Data Protection Authority (ANSPDCP). We do not make solely automated decisions producing legal effects; automatic specialist allocation only organises the appointment.