Privacy Policy

Last updated: January 17, 2026

1) Who we are

2) Scope of this notice

This notice explains how we process personal data when you browse our website or contact us. Bookings and payments are handled on Airbnb; when you click “Book now,” Airbnb’s own privacy policy applies.

3) What data we process

A. Data you provide directly

• Messages you send us by email or via any contact method we publish (plus the contact details you include).

• We do not intentionally collect special/sensitive categories of data.

B. Data collected automatically when you browse

• Technical and usage data such as IP address, device/browser type, pages viewed, timestamps, referrers, and performance metrics.

• Analytics data: We use Google Analytics 4 to understand visitor behavior (anonymized metrics on sessions, bounce rates, and location).

• Map tiles: to show the interactive map, your browser requests tiles from CARTO’s tile CDN (cartocdn.com). Your IP address and user-agent are processed to deliver those tiles.

4) Tools & service providers (processors)

• Vercel Inc. — hosting/deployment; Vercel Web Analytics and Speed Insights.

• Google Ireland Ltd. — Google Analytics 4 (visitor statistics).

• CookieYes Ltd. — Consent Management Platform (manages your cookie preferences).

• CARTO — basemap tiles for Leaflet (© OpenStreetMap contributors; tiles via cartocdn.com).

• Email provider (e.g., Google/Gmail) — to receive and reply to your messages.

We have appropriate data protection terms in place with these providers.

5) Purposes & legal bases (GDPR Art. 6)

• Site operation, performance, security, and map delivery — Legitimate interests.

• Analytics & Statistics (Google Analytics) — Consent (Article 6(1)(a)). We only process this data if you click “Accept” on our banner.

• Responding to your inquiries — Legitimate interests or performance of a contract (if applicable).

• Legal compliance (e.g., responding to lawful requests) — Legal obligation.

6) Cookies

We use both essential (functional) and non-essential (analytics) cookies. Essential cookies help the site work (e.g., language settings). Analytics cookies (Google Analytics) are blocked by default until you give consent. For a complete list and to manage your preferences, please view our Cookie Policy.

7) Sharing & disclosures

We share personal data with our processors listed above and with authorities where required by law. We do not sell personal data.

8) International transfers

Some providers (like Google or Vercel) may process data outside the EEA/UK. Where this occurs, we rely on appropriate safeguards (e.g., the EU-US Data Privacy Framework or Standard Contractual Clauses) offered by those providers.

9) Retention

• Server/edge logs: retained for 30–90 days for security and performance troubleshooting.

• Google Analytics data: retained for 14 months.

• Contact emails: retained for 12 months after our last exchange, then deleted.

• Cookie consent records: retained for 12 months.

We keep personal data only as long as necessary for the purposes above and to meet legal obligations.

10) Security

We implement reasonable technical and organizational measures to protect personal data. No system is 100% secure; we work to prevent unauthorized access, use, or disclosure.

11) Your rights (EEA/UK/CH)

Subject to law, you may have the right to access, rectify, erase, restrict or object to processing, and data portability. Where we rely on consent (e.g., for Analytics), you may withdraw consent at any time. To exercise your rights, email info@weisscentralboutique.com. We will respond within one month as required by GDPR.

You may also lodge a complaint with the Romanian data protection authority (ANSPDCP): https://www.dataprotection.ro.

12) Targeted advertising

We do not currently run paid targeted ads. However, Google Analytics features are enabled to support future analysis. If we launch ad campaigns (e.g., Google Ads), we will update this policy.

13) Children

This site is intended for adults. We do not knowingly collect data from children under 18.

14) EEA/UK representative

Not applicable. We are established in the EEA (Romania) and do not require an Article 27 representative.

15) Changes to this notice

We may update this notice from time to time. The “Last updated” date at the top reflects the latest version.

16) Contact

For privacy questions or requests: info@weisscentralboutique.com
Postal: Erou Mircea Marinescu 5, Voluntari, Ilfov 077190, Romania