Privacy Policy

Last updated: 8 September 2026

Your privacy matters. This policy explains what personal data is processed when you visit this site or contact me for an appointment, for what purpose, and what rights you have.

Who the data controller is

What data I process

• Contact and booking data: your name, phone number, and the messages you send me when you reach out via WhatsApp, phone, or Instagram for an appointment or a question.
• The question form on the site: your name, phone number, your e-mail address if you choose to give it, your question, and the article you wrote from. It is stored in a database hosted by Cloudflare, and I receive a notification by e-mail.
• Newsletter sign-up: your e-mail address, the date you signed up, the country you wrote from, and your browser type. These are kept in my subscriber list and in the e-mail platform Brevo.
• Technical data: minimal information stored by your browser (essential cookies and, with your consent, anonymous statistics). Details in the Cookie Policy.

Article reactions (the emoji buttons) are counted without recording who pressed them. I do not request or process health data, financial data, or other special categories.

For what purpose and on what legal basis

• Appointments and communication (replying to messages, arranging a makeup session or a course) · legal basis: the steps taken prior to entering into a contract and the legitimate interest in responding to you (Article 6(1)(b) and (f) GDPR).
• Replying to a question sent through the form · legal basis: the steps taken prior to entering into a contract and the legitimate interest in responding to you (Article 6(1)(b) and (f) GDPR).
• Sending the newsletter · legal basis: your consent (Article 6(1)(a) GDPR). You can unsubscribe from any e-mail you receive, in one click, and your address is deleted straight away from the list and from Brevo.
• Usage statistics (if you enable the optional cookies) · legal basis: your consent (Article 6(1)(a) GDPR), which you can withdraw at any time.

How long I keep the data

Messages and contact data are kept for as long as needed to respond to you and to provide the requested service, plus the period required by tax and legal obligations. Questions sent through the form are kept for at most two years after the last message, then deleted. The e-mail address for the newsletter is kept until you unsubscribe. After that they are deleted. Preferences saved in your browser remain until you clear them from your browser.

Who I share the data with

I do not sell or rent anyone's data. I work with the following providers, each with its own privacy policy:

• Cloudflare · site hosting and the database where questions sent through the form arrive.
• Brevo · sending the newsletter and e-mail notifications.
• The messaging platform you choose to contact me on, WhatsApp or Instagram.

It may be disclosed to authorities only where the law requires it.

Your rights (GDPR)

Under GDPR (EU Regulation 2016/679), you have the right to:

• access to your data and information about the processing,
• rectification of inaccurate data,
• erasure of your data (the "right to be forgotten"),
• restriction of processing,
• object to the processing,
• data portability,
• withdraw your consent at any time, without affecting processing carried out beforehand.

For any of these, write to me at 0752 702 577, makeup@puccadiana.ro or on Instagram @puccadiana.ro. I will reply as quickly as I can.

Complaints

If you feel your data has not been handled correctly, you have the right to lodge a complaint with the National Supervisory Authority for Personal Data Processing, ANSPDCP (Romanian Data Protection Authority), dataprotection.ro.

Changes

I may update this policy as the services change. The current version is always here, with the date of the last update at the top.