Data protection
Privacy policy
Last updated: 2 October 2026
This notice explains how Maison Mireille processes personal data when you visit the website, contact us, use WhatsApp or request an appointment.
1. Data controller
MAISON MIREILLE SRL
CUI 54865931
J2026037710002
EUID ROONRC.J2026037710002
Registered office: Calea Urseni 28 A, Sat Giroc, Timiș, 307220, Romania
Boutique: Bulevardul 3 August 1919 13, Timișoara, Timiș, Romania
Telephone: 0721 371 252
Email: [email protected]
2. Personal data we may process
- identity and contact information you provide voluntarily, such as your name, telephone number, email address and message content;
- information you provide when booking a fitting through Google Calendar Appointment Schedules, used to reserve and administer the selected time slot, including confirmation, rescheduling or cancellation;
- your telephone number, messages and information you choose to send when communicating with Maison Mireille through WhatsApp, including information about your appointment or dresses you are interested in;
- technical and security data normally generated when accessing a website, such as IP address, browser and device information and technical logs, to the extent processed by the hosting and security infrastructure.
The website does not require an account and does not directly collect payment-card or other payment data.
3. Purposes and legal bases
- to respond to enquiries and communicate with you: legitimate interests and, where applicable, steps taken at your request before entering into a contract;
- to reserve and manage a fitting through Google Calendar Appointment Schedules, including confirmation, rescheduling or cancellation of the selected slot: steps taken at your request before entering into a contract;
- to communicate with you through WhatsApp when you choose that channel, including questions about appointments, fittings or dresses: legitimate interests and, where applicable, steps taken at your request before entering into a contract;
- for website security, integrity and operation: our legitimate interest in protecting infrastructure and services;
- to comply with legal, tax, accounting or legal-claims obligations where applicable;
- for analytics or marketing based on non-essential technologies, only after those tools are enabled and only on the basis of consent where legally required.
4. Service providers and external services
To operate the website we may use providers that process data on our behalf or act as independent controllers for their own services. The website is delivered through Cloudflare infrastructure. We use Google Calendar Appointment Schedules to book fittings. Information entered in the Google form is used to reserve and administer the requested appointment, including confirmation, rescheduling or cancellation, and is processed within Google services.
We also use WhatsApp for direct communication. If you choose this channel, your telephone number, messages and information you send are processed so we can respond to your enquiry and communicate about your appointment, fitting or dresses you are interested in. WhatsApp is an external service provided in the European Economic Area by WhatsApp Ireland Limited.
Information entered for a Google Calendar booking is not automatically transferred to WhatsApp. WhatsApp is used only if you choose to communicate with us through that channel. Links to Google, WhatsApp and social networks lead to external services that are subject to their own privacy notices.
5. International transfers
Some technology providers may process data outside the European Economic Area. Where such a transfer occurs, it must rely on a mechanism recognised by applicable law, such as an adequacy decision or appropriate contractual safeguards, as described by the relevant provider.
6. How long we retain data
We keep personal data only for as long as necessary for the purpose for which it was collected. Ordinary enquiries may generally be retained for up to 12 months after the last interaction, unless there is an ongoing contractual relationship, legal obligation, complaint or a need to establish, exercise or defend legal rights. Commercial and accounting records are retained for the periods required by applicable law.
7. Your rights
Subject to the GDPR, you may have rights of access, rectification, erasure, restriction, portability and objection, as well as the right to withdraw consent without affecting processing carried out before withdrawal. The rights available depend on the legal basis and circumstances of the processing.
To exercise your rights you may contact us by telephone, and a public email address will be available before the website is launched.
8. Data-protection complaints
If you believe your personal data has been processed unlawfully, you have the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP).
Analytics
We use Google Analytics 4, Measurement ID G-7M3B0VERNQ, only after you accept the Analytics category. Its purpose is to measure website usage and page performance. Google Analytics is not loaded if you reject Analytics. Google Tag Manager and advertising pixels are not active. You can change or withdraw consent at any time through Cookie settings in the website footer.
9. Changes to this notice
We may update this notice when the website, service providers or legal requirements change. The version published on this page is the version applicable on the date shown above.