Privacy Policy

Mysterious-spa.ro Last updated: May 2025

1. Who We Are

The operator of this website is Mysterious SPA, accessible at mysterious-spa.ro. For any questions related to the processing of personal data, you can contact us at: contact@mysterious-spa.ro

2. What Data We Collect

Currently, our website does not collect personal data through contact forms or newsletters.

However, through the use of advertising services (Google Ads, Meta Ads) and cookie technologies, the following data may be automatically collected:

IP address
Browser type and version
Pages visited and duration of visit
Traffic source (how you arrived on the site)
Information about the device used

3. Cookies

Our website uses cookies to improve your browsing experience and to analyze traffic. These include:

Essential cookies – necessary for the correct functioning of the site.

Performance/analytics cookies – collected through Google Analytics, which help us understand how visitors interact with the site.

Advertising cookies – used through Google Ads and Meta Ads (Facebook/Instagram) to display relevant advertisements and measure the effectiveness of advertising campaigns.

You can manage your cookie preferences directly from your browser settings or through the consent banner displayed on your first visit to the site.

4. Purpose of Data Processing

Data collected through cookies and advertising platforms is used for:

Improving website functionality
Analyzing visitor behavior (traffic statistics)
Displaying personalized ads on Google and Meta platforms
Measuring the performance of advertising campaigns

5. Legal Basis

Data processing is carried out on the basis of your consent (Art. 6(1)(a) of the GDPR), granted by accepting cookies when visiting the site.

6. How Long We Retain Data

Data collected through cookies is retained in accordance with the policies of Google and Meta platforms. Generally, cookies expire between 30 days and 2 years, depending on their type.

7. Who We Share Data With

Data collected through cookies may be shared with:

Google LLC – through Google Analytics and Google Ads (privacy policy: policies.google.com)
Meta Platforms Inc. – through Meta Pixel / Meta Ads (privacy policy: facebook.com/privacy/policy)

These companies may transfer data outside the European Union, in compliance with legal transfer mechanisms (e.g. Standard Contractual Clauses).

8. Your Rights

Under the GDPR, you have the following rights:

Right of access – you can request a copy of the data we hold about you
Right to rectification – you can request correction of inaccurate data
Right to erasure – you can request deletion of your data (“right to be forgotten”)
Right to restriction of processing
Right to data portability
Right to object – including to processing for direct marketing purposes
Right to withdraw consent at any time, without affecting the lawfulness of prior processing

To exercise these rights, you can contact us at contact@mysterious-spa.ro. You also have the right to lodge a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP) – www.dataprotection.ro

9. Changes to This Policy

We reserve the right to update this Privacy Policy. Any changes will be published on this page, with an updated date in the header. We recommend checking this page periodically.

For any questions: contact@mysterious-spa.ro