GDPR

Privacy Policy

Last updated: July 2026

1. Who processes your data

The data controller is SC EPILAVERDE SRL (Adrett Beauty Med), registered office at Strada Ion Agârbiceanu nr. 11, Bl. 2, Sc. A, Spațiul comercial 13, 550049 Sibiu, Romania, J32/1419/2017, CIF RO38212213.

For any request regarding your personal data, you can reach us by phone, WhatsApp at +40 770 749 590, or by email at contact@adrettbeautymed.ro.

2. What data we collect

We only collect personal data when you provide it to us directly, in particular:

• Name, phone number and any information you share with us when contacting us by phone or WhatsApp to book an appointment;
• Information about your skin or treatment preferences discussed during the consultation, if you choose to share it;
• Before/after photographs, only with your explicit written consent, obtained separately for each occasion;
• Minimal technical data generated by the website (see our Cookie Policy).

We do not collect data through online forms, since appointments are made exclusively by phone or WhatsApp.

3. Why we process this data

We use your data to: respond to appointment requests, organize and confirm appointments, personalize treatment based on the history discussed at the consultation, and — only with your explicit consent — use before/after photographs for portfolio purposes. The legal basis is, depending on the case, performance of a contractual/pre-contractual relationship (the appointment), our legitimate interest (running the business), or your consent (photographs).

4. How long we keep data

We keep contact data for as long as you are an active client of the cabinet, plus any retention period required by financial/accounting legislation where applicable. Photographs taken with your consent are kept until you withdraw that consent.

5. Who we share data with

We do not sell or rent your data to third parties. Data may be accessed by strictly necessary technical providers (for example, the website's hosting provider), only to the extent necessary for the site to function, and only under contractual confidentiality obligations.

6. Your rights

Under Regulation (EU) 2016/679 (GDPR), you have the right to request: access to your data, rectification, erasure ("the right to be forgotten"), restriction of processing, objection to processing, and data portability. For photographs taken with your consent, you may withdraw that consent at any time. You can exercise these rights by contacting us using the details above. You also have the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP).

7. Data security

We take reasonable technical and organizational measures to protect your data against unauthorized access, loss, or misuse.

8. Changes to this policy

We may update this policy from time to time. The date of the last update is shown at the top of the page.