We respect the privacy of the families who visit us. Below we explain what personal data we process, why, and what rights you have under Regulation (EU) 2016/679 (“GDPR”) and Law no. 190/2018.
1. The data controller
The controller is Regatul Răsfățului — Parties for girls, a salon located at Strada Horea nr. 10, ap. 1/A, Târgu Mureș, Mureș County. For any question about your data: lrn_andrea@yahoo.co.uk, phone 0756 145 461.
2. What data we process
- The parent's contact details: name, phone number and possibly email address — when you call us or write to us on WhatsApp, Facebook or by email.
- Booking details: the preferred date, number of girls, chosen package, and the birthday girl's first name and age, if you tell us.
- Health information, strictly as needed: allergies or sensitivities you tell us about for the child's safety. We use them only to adapt the activities.
- Photos and recordings, only with a parent's consent.
The website itself does not collect data: the price calculator, the invitation and the voucher work only in your browser and send nothing to us. Only if you press “Send on WhatsApp” does WhatsApp open with a prepared message, which you decide whether to send.
3. Why and on what legal basis
- to answer questions and manage bookings — Art. 6(1)(b) GDPR (steps before entering into a contract and its performance);
- for children's safety (allergies, sensitivities) — Art. 9(2)(a) GDPR, based on the parent's explicit consent;
- for published photos — Art. 6(1)(a) GDPR, the parent's consent, which you can withdraw at any time;
- for legal obligations (for example, accounting records) — Art. 6(1)(c) GDPR.
4. Who we share data with
We do not sell or rent data. Data may reach, strictly as needed, the providers of the services we use: Meta Platforms (WhatsApp, Facebook Messenger), our email provider, our accountant and Cloudflare, Inc. (website hosting). Some of these providers may process data outside the European Economic Area, under the standard contractual clauses approved by the European Commission or the EU–US Data Privacy Framework.
5. How long we keep it
We keep booking data for as long as needed to organise the service and then for at most 12 months, except for documents the law requires us to keep longer. We delete allergy information after the event. We delete published photos at the parent's request.
6. Children's data
Our services are for children, but all their data is given to us by the parent or guardian, who also gives consent where needed. We do not ask children for data directly.
7. Your rights
You have the right of access, rectification, erasure, restriction of processing, portability and objection, and the right to withdraw your consent at any time, without affecting processing carried out before then. Write to us at lrn_andrea@yahoo.co.uk; we'll reply within one month at most. If you believe your rights have been infringed, you can lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP), B-dul G-ral Gheorghe Magheru nr. 28–30, sector 1, Bucharest, www.dataprotection.ro.
8. Security
The site uses an encrypted connection (HTTPS). Only the members of our team who organise the activities have access to booking data.
Last updated: 16 October 2026. This translation is for information; in case of dispute, the Romanian version prevails.