1. Data controller

The Men's Place, with its registered office at Aleea Tărnavei 2, A, 440207 Satu Mare, România, phone 0745 319 957, is the controller of the personal data collected through this site.

2. What data we collect

Our site does not request personal data directly. There are no contact forms, accounts or shopping carts. Bookings are made exclusively through the external Mero platform.

This site does not use cookies, no tracking, analytics or advertising cookies. We do not use other local storage technologies (localStorage, pixels, fingerprinting) for profiling.

We do, however, indirectly process:

• Anonymised traffic data via Vercel Analytics: page visited, country, device type, browser, referrer. The IP address is anonymised before storage; no cookies are set.
• Strictly necessary technical data (server logs) to deliver the site and prevent abuse.

3. Data concerning minors

Our services include packages for children (“The Young Gentleman”, “Family Tradition, Father & Son”). Bookings for minors are made exclusively by parents or legal guardians. We do not knowingly collect personal data from children under 16 through this site (Art. 8 GDPR). If you become aware that a minor has provided us with such data, please contact us so we can delete it.

4. Legal basis and purpose

We process this data on the basis of our legitimate interest (Art. 6(1)(f) of EU Regulation 2016/679, GDPR), in order to understand how the site is used and to improve it. We do not use the data for profiling, behavioural advertising or automated decision-making.

5. Bookings via Mero

When you click the “Book” button you are redirected to mero.ro. Mero becomes an independent controller for the data you enter there (name, phone, chosen time). Please consult their privacy policy.

6. Processors and transfers

The site is hosted by Vercel Inc. (USA), acting as a processor on our behalf. Transfers to the USA are protected by the EU-US Data Privacy Framework. We do not sell or share data with third parties for commercial purposes.

7. Security

The site is served exclusively over HTTPS (TLS) and runs on Vercel's secure infrastructure, with automatically managed certificates and network-level DDoS protection. We do not process or store payment data on this domain, transactions for services are settled physically at the salon. We apply appropriate technical and organisational measures to prevent unauthorised access, alteration or disclosure of the data processed.

8. Retention period

Anonymised traffic data is kept for a maximum of 12 months. Technical logs are automatically deleted after 30 days.

9. Your rights

Under the GDPR you have the right to access, rectification, erasure, restriction of processing, portability and objection. To exercise these rights you can contact us at 0745 319 957.

You also have the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP), dataprotection.ro.

10. Changes

This policy may be updated. The current version is always available on this page, with the date of the last revision shown at the top.