top of page

Privacy Policy

​

At The Thai Spa, protecting your personal data is a fundamental commitment. We allocate all necessary resources to process your data in accordance with Regulation (EU) 2016/679 (the “General Data Protection Regulation” or “GDPR”) and applicable Romanian legislation.

This Privacy Policy aims to transparently inform you about how we collect, use, transfer, and protect your personal data when you interact with The Thai Spa’s services and products, including through our website and mobile applications.

We reserve the right to update this policy whenever necessary to reflect changes in our data processing practices or applicable legal requirements. We recommend checking this page periodically to stay informed about any changes.

Who we are and How to contact us

 

The Thai Spa is the trade name of P&P Express S.R.L., headquartered in Bucharest, sector 3, Nucului, nr.6, room. 1, bl. V-101, sc. 2, et. 3, ap. 41 , registered at the Trade Register under number J2025005925004, with unique fiscal identification code 51198884.

As the data controller, The Thai Spa manages and safeguards your personal data.

For any questions or requests regarding data protection, you can contact us via email at thethaispabucharest@gmail.com.

What personal data we collect

We collect data you provide directly, for example:

  • Information necessary to process bookings or purchases: name, contact details, address, payment information, etc.

  • Data related to your use of our website or applications through cookies and similar technologies, as outlined in our Cookie Policy.

  • We do not collect sensitive data or personal data from minors under 16 years old.

​

Purposes and Legal Bases for Processing

 

We use your data to:

  • Process bookings, orders, and services provided by The Thai Spa.

  • Manage customer relationships, including support and issue resolution.

  • Send offers and marketing communications (with your prior consent or based on legitimate interest where applicable).

  • Ensure the security of our platforms and prevent fraud.


​

Data Retention Period

 

We retain personal data for a reasonable period in accordance with legal requirements or until you request its deletion.​


​

Data Sharing

Your data may be shared with:

  • Payment service providers 

  • Web analytics and traffic service providers

  • Public authorities if required by law.

All our partners are obliged to comply with data protection legislation

International Transfers

​

Your data may be transferred outside Romania, including outside the European Union, under legal conditions and with appropriate safeguards to protect your rights.

Data Security
 

 

We implement appropriate technical and organizational measures to protect your data, including encryption and secure servers. However, please note that internet data transmission is never completely secure.​


​

Your rights
 

 

You have the right to request access, rectification, deletion, restriction of processing, data portability, or to object to the processing of your data. To exercise these rights, please contact us at the address above.

You may also file a complaint with the National Supervisory Authority for Personal Data Processing.


​

bottom of page