Privacy
Last updated: October 2026
​
1. Data controller
THE BEAUTY OF BEING SRL, registered office at Str. Mențiunii nr. 19, cam. 1, Sector 2, București, postal code 022654, Romania, Tax ID (CUI) 42341356, Trade Register No. J2020003017403, email contact@vistianalong.com ("we", "us"), is the controller of your personal data under Regulation (EU) 2016/679 (GDPR).
​
2. What data we collect
Contact form: first name, last name, email address, phone / WhatsApp number, preferred contact method, and the content of your message.
Bookings: name, email address, phone number, the service, date and time you choose, and payment details processed by our payment provider. We do not store your card details.
Newsletter: email address.
Purchases of digital products: name, email address, billing details and order details.
Technical data: minimal data such as IP address and device information, needed for the security and functioning of the Website. See our Cookie Policy.
​
3. Sensitive information
Because of the nature of our work, the information you share with us may include details about your emotional or mental wellbeing. We process this information only with your explicit consent, given when you submit the form (Art. 9(2)(a) GDPR). We use it only to respond to you and prepare our first conversation. Please share only what you feel comfortable sharing. You can withdraw your consent at any time by writing to us.
​
4. Why we use your data and on what legal basis
To respond to your request and arrange a first conversation: steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR) and, for sensitive information, your explicit consent.
To manage bookings and provide our services: performance of a contract (Art. 6(1)(b) GDPR).
To deliver digital products and issue invoices: performance of a contract and compliance with legal obligations (Art. 6(1)(b) and (c) GDPR).
To send our newsletter: your consent (Art. 6(1)(a) GDPR). You can unsubscribe at any time using the link in every email.
To keep the Website secure and prevent abuse: our legitimate interest (Art. 6(1)(f) GDPR).
We do not use your data for automated decision-making or profiling, and we never sell your data.
​
5. How long we keep your data
Contact form messages: up to [12] months from our last communication, unless we start working together.
Newsletter: until you unsubscribe.
Bookings and purchases: for as long as needed to provide the service, and accounting documents for the period required by Romanian accounting and tax law.
​
6. Who we share your data with
We share your data only with service providers who help us run the Website and our activity, under contracts that require them to keep it confidential and secure:
Wix.com Ltd., the platform that hosts the Website, the contact form, bookings and the newsletter;
[payment provider, e.g. Wix Payments / Stripe / PayPal], for processing payments;
our accountant, for invoicing and legal obligations.
If you choose WhatsApp as your contact method, your messages are also subject to WhatsApp's own privacy policy.
We may disclose data to public authorities only when the law requires it.
​
7. Transfers outside the European Economic Area
Some of our providers, such as Wix.com Ltd., which is based in Israel, may process data outside the EEA. Israel benefits from a European Commission adequacy decision. Any other transfers are made with appropriate safeguards, such as the Standard Contractual Clauses approved by the European Commission.
​
8. Your rights
Under the GDPR, you have the right to:
access your personal data;
rectify inaccurate data;
erase your data ("right to be forgotten");
restrict processing;
data portability;
object to processing based on our legitimate interest;
withdraw your consent at any time, without affecting processing carried out before withdrawal.
To exercise these rights, write to us at contact@vistianalong.com. We will respond within one month.
You also have the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP), B-dul G-ral. Gheorghe Magheru nr. 28-30, Sector 1, București.
​
9. Security
We use reasonable technical and organisational measures to protect your data, including a secure connection (HTTPS) and restricted access to the messages and bookings we receive.
​
10. Changes to this policy
We may update this policy from time to time. The current version is always the one published on this page.