Privacy policy

This policy explains what personal data EVA MEDSPA SRL, CUI 52144092, J2025051318001, Str. Primar Dumitru Gordon nr. 43, sat Ruștior, com. Șieuț, jud. Bistrița-Năsăud ("Eva MedSpa") processes through https://www.evamedspa.ro and for what purpose.

Who the controller is

EVA MEDSPA SRL, CUI 52144092, J2025051318001, Str. Primar Dumitru Gordon nr. 43, sat Ruștior, com. Șieuț, jud. Bistrița-Năsăud. You can write to evamedspa13@gmail.com or call 0753 469 686.

What we collect through the site

Only what you enter in the contact form: name, phone, email address (optional), the service you're interested in, and the text of your message.

The site uses no analytics tools, advertising pixels or tracking scripts. Fonts are hosted on our own server, so no data is sent to third-party services when the page loads.

Legal basis and purpose

We process the data to answer your enquiry and arrange an appointment. The basis is your consent (Art. 6(1)(a) GDPR) and, where applicable, steps prior to entering into a contract (Art. 6(1)(b)).

Health data

Health information is a special category of data (Art. 9 GDPR). Please do not send it through the form. We discuss it by phone or in person, and where it needs to be recorded we do so on the basis of your explicit written consent given at our premises.

How long we keep it

Messages received through the form are kept for as long as needed to reply and for any follow-up appointments, generally no more than 24 months. Accounting records are kept for the period required by law.

Who we share it with

The form is processed by our form service provider, which forwards the message to our email address. The site is hosted by our hosting provider. Both act as processors. We do not sell or rent personal data.

Your rights

You have the right of access, rectification, erasure, restriction, portability, objection, and to withdraw consent at any time. Write to the email address above.

If you are unhappy, you may contact the Romanian data protection authority (dataprotection.ro).