Spălătoria Germană Privacy Statement
Spălătoria Germană · Last updated October 2026
1. Scope and contact
This policy explains how Spălătoria Germană uses personal data through its website, customer accounts, reception and courier applications, orders and customer communications. For questions or requests about your data, contact contact@spalatoria-germana.ro, call +40 373 815 300, or write to our service location: Calea Șerban Vodă 76–78, Bucharest, Sector 4, 040213.
2. Data you provide
We process your name, phone number, email address where supplied, collection and delivery addresses, access instructions, selected services, quantities, order notes and correspondence. Customer records may also be created at reception or when you contact our team. An account can include a preferred language, saved addresses, an optional profile photo and email/SMS marketing preferences. Please avoid including health information, identity documents or other sensitive information in free-text notes unless specifically necessary and agreed with our team.
3. Orders, payments and security data
The application records order numbers, items, prices, payment status and references, delivery assignments, status changes and the staff actions needed to manage an order. Authentication and security systems process session identifiers, device/browser information and access events; some abuse-prevention records use hashed email or IP identifiers. Online card details are entered in Stripe’s payment interface. The application stores payment references and outcomes, rather than full card numbers or card security codes.
4. Purposes and legal bases
We use contact, address and order data to take steps you request before a contract and to provide the agreed services, account access, collection, delivery and payment handling. Legal obligations may require financial and transaction records. Our legitimate interests in protecting accounts, preventing abuse, resolving complaints and maintaining reliable operations support proportionate security and operational records, subject to your rights. Optional marketing and non-essential tracking rely on consent where required; refusing them does not prevent you from ordering. Data marked as necessary for an order or account must be provided for that function to work.
5. Portallo CRM and GoHighLevel
SPG uses Portallo as its customer relationship management platform, with GoHighLevel technology. Contact details, service enquiries, correspondence, relevant order follow-up information and communication preferences may be transferred to this CRM to organise customer relationships and communications. Access is limited to the information needed for these activities. Portallo and its technical providers can process this information on our behalf; the exact responsibilities depend on the contracted services. Operational messages about a request or order are separate from optional promotional messages. A GoHighLevel review widget is also embedded on public pages and makes requests to its provider when loaded.
6. Other recipients and providers
Authorised reception staff, managers and couriers receive the data needed for their tasks. Technology providers include Vercel for hosting, Neon for the application database and authentication, Stripe for online payments, Resend for application email, CookieYes for consent preferences and Google Maps when address suggestions or maps are used. Providers receive data relevant to their service, not unrestricted access to every customer record. Professional advisers and public authorities may receive information when necessary to meet legal obligations or handle claims. Some providers, particularly payment providers, also have independent legal responsibilities described in their own privacy notices.
7. International processing
Cloud and CRM providers may process data outside Romania and the European Economic Area, including in the United States. HighLevel’s published data processing agreement describes standard contractual clauses and its participation in the EU–US Data Privacy Framework. The applicable mechanism depends on the receiving entity, service and contractual arrangement; a provider’s general policy alone does not establish the safeguards for every SPG transfer. Contact contact@spalatoria-germana.ro for information about the safeguards applicable to your data and how to obtain a copy.
8. How long information is kept
Account information is kept while it is needed to operate your account. Order, payment and correspondence records are retained according to the service, applicable financial obligations, unresolved complaints and the time needed to establish or defend legal claims. Marketing preferences remain relevant until changed or consent is withdrawn; limited suppression records may be needed to respect an opt-out. Security records are assessed according to their protective purpose. Deleting an account does not necessarily delete records that must be retained for another lawful purpose. An account-deletion request can require identity verification and review of active or shared orders. Ask us for the retention criteria applicable to a particular record.
9. Your choices and rights
You may request access, correction, erasure, restriction, portability where applicable, and object to processing based on legitimate interests. You can object to direct marketing at any time and withdraw consent without affecting earlier lawful processing. Use your account settings where available or contact contact@spalatoria-germana.ro; we may need proportionate information to verify your identity. We normally respond within one month, subject to the extensions and exceptions permitted by GDPR. You can also complain to ANSPDCP, the Romanian data protection authority, at www.dataprotection.ro, or to the competent authority where you live or work.
10. Security, automation and policy changes
Access controls, authenticated sessions and operational logs help protect information. No online service can guarantee absolute security. The application automates functions such as price calculation, notifications and abuse checks; contact us if a check prevents legitimate access or an order needs human review. Do not share sign-in links or passwords. We will update this notice when relevant processing changes and identify the revision date above.
Questions about this document?
Our team can help you understand how these terms apply to the service.