Privacy Policy
Last updated: September 10, 2025
1) Who we are
Controller: TATARU TEODOR PERSOANĂ FIZICĂ AUTORIZATĂ (“we”, “us”).
Website: https://weisscentralboutique.com
Email: nicodim.tataru@gmail.com
Postal address: Erou Mircea Marinescu 5, Voluntari, Ilfov 077190, Romania
2) Scope of this notice
This notice explains how we process personal data when you browse our website or contact us. Bookings and payments are handled on Airbnb; when you click “Book on Airbnb,” Airbnb’s own privacy policy applies.
3) What data we process
A. Data you provide directly
Messages you send us by email or via any contact method we publish (plus the contact details you include).
We do not intentionally collect special/sensitive categories of data.
B. Data collected automatically when you browse
Technical and usage data such as IP address, device/browser type, pages viewed, timestamps, referrers, and performance metrics.
Map tiles: to show the interactive map, your browser requests tiles from CARTO’s tile CDN (cartocdn.com). Your IP address and user-agent are processed to deliver those tiles.
We do not use Google Analytics or Google Maps at this time. We currently do not set non-essential cookies.
4) Tools & service providers (processors)
Vercel Inc. — hosting/deployment; Vercel Web Analytics (cookieless) and Vercel Speed Insights (Web Vitals).
CARTO — basemap tiles for Leaflet (© OpenStreetMap contributors; tiles via cartocdn.com).
Email provider (e.g., Google/Gmail) — to receive and reply to your messages.
We have appropriate data protection terms in place with these providers.
5) Purposes & legal bases (GDPR Art. 6)
Site operation, performance, security, and map delivery (server logs, Web Vitals, tile requests) — Legitimate interests.
Responding to your inquiries — Legitimate interests or performance of a contract (if applicable).
Legal compliance (e.g., responding to lawful requests) — Legal obligation.
If we later add analytics/advertising trackers (e.g., Google Analytics/Ads/remarketing), we will first seek your consent and update this notice.
6) Cookies & trackers
We do not currently use non-essential cookies. Vercel Analytics and Speed Insights are cookieless. If we introduce tools that set cookies (e.g., Google Analytics, remarketing pixels, chat widgets, certain embeds), we will display a consent banner (Accept / Reject / Manage), block such tools until you opt in, and publish a Cookie Policy listing each cookie and lifetime.
7) Sharing & disclosures
We share personal data with our processors listed above and with authorities where required by law. We do not sell personal data.
8) International transfers
Some providers may process data outside the EEA/UK. Where this occurs, we rely on appropriate safeguards (e.g., Standard Contractual Clauses) offered by those providers.
9) Retention
Server/edge logs: retained for 30–90 days for security and performance troubleshooting, then deleted or aggregated.
Contact emails: retained for 12 months after our last exchange, then deleted.
Cookie consent records: retained for 12 months.
We keep personal data only as long as necessary for the purposes above and to meet legal obligations.
10) Security
We implement reasonable technical and organizational measures to protect personal data. No system is 100% secure; we work to prevent unauthorized access, use, or disclosure.
11) Your rights (EEA/UK/CH)
Subject to law, you may have the right to access, rectify, erase, restrict or object to processing, and data portability. Where we rely on consent, you may withdraw consent at any time (this does not affect processing before withdrawal). To exercise your rights, email nicodim.tataru@gmail.com. We will respond within one month as required by GDPR.
You may also lodge a complaint with the Romanian data protection authority (ANSPDCP): https://www.dataprotection.ro.
12) Targeted advertising & Google Ads (future)
We do not currently run targeted ads or remarketing. If we start using Google Analytics and/or Google Ads (including remarketing audiences): (a) we will obtain your prior consent via a cookie banner; (b) only then will we load those scripts; and (c) we will update this policy and provide a detailed Cookie Policy.
13) Children
This site is intended for adults. We do not knowingly collect data from children under 18.
14) EEA/UK representative
Not applicable. We are established in the EEA (Romania) and do not require an Article 27 representative.
15) Changes to this notice
We may update this notice from time to time. The “Last updated”” date at the top reflects the latest version.
16) Contact
For privacy questions or requests: nicodim.tataru@gmail.com
Postal: Erou Mircea Marinescu 5, Voluntari, Ilfov 077190, Romania