Privacy Policy
1. Data controller
Your data is processed by:
ROYAL Barber [⚠ legal name to be confirmed]
Place of business: Dămăcușeni, Maramureș County, Romania
Tax ID: [⚠ to be confirmed]
Contact: Instagram
Referred to below as "we", "the business", or "ROYAL Barber".
2. About this policy
This policy explains what personal data we collect about you through kevin-the-barber-website.pages.dev, why we collect it, how long we keep it, and what rights you have.
This policy complies with EU Regulation 2016/679 (GDPR) and Romanian Law No. 190/2018 implementing GDPR.
Questions? Message us on Instagram.
3. What data we collect
3.1. The site has no contact form
ROYAL Barber does not collect personal data through web forms. Bookings run through MERO (mero.ro), a third-party platform — see section 3.3. Interest in the online courses is expressed directly on Instagram.
3.2. Data collected automatically when you visit
The site is hosted on Cloudflare Pages. Cloudflare processes, at server level:
- IP address (for anti-bot purposes, pseudonymised)
- Browser type and operating system
- Page visited and time of visit
- Referral source
This data is used solely for security and performance (anti-DDoS, anti-bot, fast content delivery). We do not use Google Analytics, Facebook Pixel, or any marketing tracking tools. See our Cookie Policy for details.
3.3. Bookings via MERO
Tapping "Book now" takes you to mero.ro, a third-party site operated by MERO Programari SRL, where you create your booking directly with them. Data entered there (name, phone) is processed by MERO under their own privacy policy — ROYAL Barber does not receive or store this data on this site.
3.4. The Google Maps link
The contact section contains a link to Google Maps (not an embedded iframe) — clicking takes you to Google Maps directly, in a new tab. Our site sets no Google cookie and sends no request to Google before you click that link.
3.5. Data we do not collect
- We do not collect national ID numbers, bank accounts, or other sensitive data.
- We do not collect data about minors. The site is intended for people over 16.
- We do not use automated profiling or automated decision-making (GDPR Art. 22).
- We do not sell your data or share it with third parties for marketing.
4. Why we collect this data (purpose and legal basis)
| Data | Purpose | Legal basis (GDPR) |
|---|---|---|
| Cloudflare data (IP, browser) | Security, anti-bot, site performance | Art. 6(1)(f) — legitimate interest |
5. Who we share data with (processors)
| Provider | Purpose | Country | Safeguards |
|---|---|---|---|
| Cloudflare, Inc. | Hosting, CDN, anti-bot security | USA + global edge network (incl. EU) | Standard Contractual Clauses (SCC). Cloudflare Policy |
| MERO Programari SRL | Booking platform (independent controller for data entered there) | Romania | MERO Policy |
We do not sell your data or share it with third parties for marketing.
6. How long we keep data
| Category | Duration |
|---|---|
| Cloudflare logs | Per Cloudflare's policy (typically 30 days for security logs, then deleted). |
7. Your rights
Under GDPR, you have the following rights:
- Right of access (Art. 15)
- Right to rectification (Art. 16)
- Right to erasure ("right to be forgotten", Art. 17)
- Right to restriction of processing (Art. 18)
- Right to data portability (Art. 20)
- Right to object (Art. 21)
- Right to withdraw consent at any time (Art. 7)
To exercise any of these rights, message us on Instagram. We will respond within 30 days (GDPR Art. 12).
8. Complaints to the supervisory authority
Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)
Address: B-dul G-ral Gheorghe Magheru 28-30, Sector 1, Bucharest, 010336
Phone: +40 318 059 211 / +40 318 059 212
Email: anspdcp@dataprotection.ro
Web: www.dataprotection.ro
9. Security
- The site uses HTTPS (TLS encryption).
- Cloudflare applies anti-DDoS and anti-bot protection.
- 72-hour breach notification to ANSPDCP in case of a security incident affecting your data.
10. International transfers
Some data is processed in the USA (via Cloudflare), based on Standard Contractual Clauses (SCC) approved by the European Commission.
11. Cookies
See our Cookie Policy for details.
12. Changes to this policy
We may update this policy. The current version is dated at the top of this document.
13. Contact
ROYAL Barber
Instagram: @kevinthebarber19
Address: Dămăcușeni, Maramureș