Privacy Policy

The data controller is:

• CELLA.ART SRL (Cella.art studio&academy)
• Tax ID (CUI): 54689363, Trade Registry no.: J2026031739007
• Registered office: Str. Timiș nr. 52A, Săcele, jud. Brașov
• Place of business: Strada Carpaților 93, Bloc 19, Ap. 7, parter, Brașov
• Phone: 0770 877 800
• Email for personal data matters: contact@cellastudioacademy.ro

Only what we need to book your appointment and to be able to contact you:

• When you book online: your name, phone number, email (if you provide it), the service and specialist you choose, the date and time, and any notes you write.
• When you chat with Ella on WhatsApp: your phone number (or your WhatsApp identifier, if you have hidden your number), your profile name, and the content and time of the messages.
• Notifications: confirmation or cancellation messages related to your appointment.
• Technical data: our providers' server logs (for example your IP address and the time of the request), needed for operation and security.
• Your cookie choice: a small cookie that remembers whether you accepted third-party content (see the Cookie Policy).

Please do not send us sensitive data (for example about your health) in the chat or in the notes, unless it is strictly necessary for the service.

• Booking and communication about it (confirmation, changes, cancellation): necessary for the service you requested (Art. 6(1)(b) GDPR).
• Security, preventing abuse, complaints: our legitimate interest (Art. 6(1)(f)).
• Legal obligations (for example accounting records, where applicable): Art. 6(1)(c).
• Third-party content (the map, the video): only with your consent (Art. 6(1)(a)), which you can withdraw at any time.

We do not send you marketing messages and we do not sell your data. If we introduce promotional messages, we will do so only with your separate consent, which you can withdraw at any time.

• Ella is an automated program, not a person, and presents itself as such.
• To understand and write its replies, the content of the conversation is sent to an artificial intelligence provider (Anthropic). Prices, opening hours and available times come from the salon's database.
• Ella does not make decisions with legal effect on you. It can create or cancel an appointment only for the number you are writing from and only after your confirmation. Payment is made at the salon.
• You can call us at 0770 877 800 at any time. If a member of our team replies to you directly from the WhatsApp Business app, the assistant stops for that conversation.

Providers that process data on our behalf, under contracts:

• Meta Platforms (WhatsApp Business Platform): delivery of WhatsApp messages.
• Anthropic: the artificial intelligence model that drafts the chat replies.
• Supabase: the database with appointments and conversations (Stockholm region, EU).
• Vercel: hosting of the website and the application.
• Our email mailbox hosting provider: the email server through which we send you confirmations, reminders and cancellation messages, if you provided an email address.

Data may be disclosed to authorities only when the law requires us to. The map (OpenStreetMap) and the video player (Facebook) load only with your consent. Some images (for example the logo and photos of the team) are temporarily served by the infrastructure of the Mero platform (Amazon CloudFront), which receives your IP address when the page loads.

Some providers (for example Meta, Anthropic, Vercel) may also process data outside the European Economic Area, including in the United States. In that case we rely on the mechanisms provided by the GDPR (the European Commission's adequacy decision or standard contractual clauses), in accordance with each provider's contracts.

As long as needed for your appointments and for the relationship with the salon, but no longer than 24 months after your last appointment, unless the law requires us to keep it longer (for example accounting documents). Conversations with Ella are kept for the same period. On request, we delete them earlier.

• access to your data and a copy of it;
• rectification of incorrect or incomplete data;
• erasure (the “right to be forgotten”), when we no longer have a legitimate reason to keep it;
• restriction of processing and objection, in the cases provided by law;
• portability, that is, your data in a commonly used format;
• withdrawal of consent, where the processing is based on it;
• the right not to be subject to a decision based solely on automated processing with legal effects on you.

Write to us at contact@cellastudioacademy.ro or call 0770 877 800; we reply within one month at most and may ask you to confirm your identity. You can lodge a complaint with ANSPDCP (the Romanian data protection authority), dataprotection.ro, but we ask that you first give us a chance to resolve the issue.

The site uses only strictly necessary cookies, plus one cookie that remembers your choice. The third-party map and video load only if you accept them. Details, durations and how to change your choice: Cookie Policy.

The connection to the site is encrypted (HTTPS), access to the database is restricted, messages received from WhatsApp are verified by digital signature, and the administration panel requires authentication. No method is perfect, but we take reasonable measures to protect your data.

If we change the way we use data, we will update this page and the date at the top.