Privacy Policy

This policy explains which personal data we process when you visit our website, send us a fitting request or contact us, and what your rights are under Regulation (EU) 2016/679 (GDPR).

Who we are

The data controller is BELLE ATELIER S.R.L., registered office Str. Pepinierei nr. 75A, Iași, Romania, tax ID RO00000000, Trade Register No. J40/0000/2026. You can reach us at andreea.events@yahoo.com.

What data we process

• Data from the fitting or contact form: name, email address, phone number, preferred fitting date, wedding date, the dress you are interested in and your message.
• Data you send us by phone, WhatsApp or email.
• Aggregated technical data about visits (pages viewed, device type, country), collected without cookies through Cloudflare Web Analytics.

Why and on what legal basis

• To answer your requests and organise the fitting – steps taken at your request prior to a contract (Art. 6(1)(b) GDPR).
• For website security and abuse prevention – our legitimate interest (Art. 6(1)(f) GDPR).
• To send you news about collections, only if you have given consent (Art. 6(1)(a) GDPR).

Who we share data with

We use providers who process data on our behalf: Cloudflare (website hosting, email notifications and aggregated statistics), Sanity (secure storage of fitting requests), Cal.com (only if you choose to book a slot in the online calendar), Google Maps (only if you press the button to load the map) and Meta/WhatsApp (if you message us on WhatsApp). Some providers may process data outside the European Union under standard contractual clauses approved by the European Commission.

How long we keep data

Fitting requests are kept for at most 24 months after the last contact. Order and invoice data is kept as required by tax law (10 years). Visit statistics are aggregated and cannot identify you.

Your rights

You have the right of access, rectification, erasure, restriction of processing, portability and objection, and the right to withdraw consent at any time. Write to andreea.events@yahoo.com; we reply within 30 days. If you believe your rights have been infringed, you may lodge a complaint with the Romanian supervisory authority, ANSPDCP (www.dataprotection.ro), or with the authority in your country of residence.

Cookies

The website sets no first-party cookies and uses no tracking cookies. Third-party services (the booking calendar, the Google map, Instagram links) load only after an action on your part and may set cookies under their own policies.