Processing of personal data
At THAI temple SPA, we are committed to respecting your privacy and protecting your personal data, in accordance with Regulation (EU) 2016/679 (GDPR).

What type of data do we collect?
We collect personal data when you use our website, make a booking, fill in a form, contact us, or interact with us. This may include:
• First and last name
• Phone number, email address
• Billing details (if you purchase services online)
• Information about your treatment preferences
• Appointment history
• Any other information voluntarily provided through contact or booking forms

Purpose of data processing
Your data is processed for:
• Managing appointments and communicating with you
• Billing and other administrative procedures
• Improving your experience on our website
• Informing you about services, offers, or events (only with your consent)
• Ensuring website security and preventing fraud

Legal basis
We process your data only based on:
• Consent (newsletter, marketing)
• Performance of a contract (bookings or purchased services)
• Legal obligations
• Our legitimate interests (service optimisation, website protection)

Who do we share data with?
Your data may only be shared with:
• IT providers managing our website
• Payment and booking processors
• Public authorities, only when required by law
• We do not sell or transfer your data for commercial purposes.

Data Storage
Your data will be retained solely for the duration necessary to fulfil the purposes outlined or as mandated by law. Should you subscribe to our newsletter, your data shall be maintained until you withdraw your consent.

Your rights
Under the General Data Protection Regulation (GDPR), the following rights are afforded to individuals:
• access to personal data;
• rectification of inaccurate information; erasure of data, commonly known as the “right to be forgotten”;
• restriction of or objection to data processing;
• data portability;
• withdrawal of consent;
• The right to file a complaint with the National Authority for the Supervisory Council for Personal Data Processing (ANSPDCP) – www.dataprotection.ro.

Data security
Our website uses security protocols (SSL) and technical and organizational measures to protect your data.

Contact
For any questions or requests regarding your personal data, you can contact us at:
Email: contact@thaitemplespa.