Privacy Policy

1. Data controller

Maisonelle SRL, VAT/registration code 52975903, Trade Register no. J2025090976004, EUID ROONRC.J2025090976004, registered office: Jud. Iași, Municipiul Iași, Strada Fântânilor, Nr. 43, Bl. B14, Ap. B39. Contact: info@maisonelle.net.

2. What we collect

Contact details (name, email, phone) submitted via website, app, or email.

Booking/service request details.

Payment-related data processed by Stripe — Maisonelle does not store full card details.

Guest data received from partner hosts/properties for pre-arrival concierge coordination (name, stay dates, contact info).

Technical/cookie data (see Cookie Policy).

3. Why we process your data

To respond to requests and deliver concierge/coordination services.

To communicate about bookings, confirmations, and service delivery.

To process payments.

To meet legal, accounting, and tax obligations.

To improve our services.

4. Legal basis

We process personal data based on: performance of a contract or pre-contractual steps taken at your request; our legitimate interest in operating and improving our services; compliance with legal obligations; and, where applicable, your consent (e.g. for marketing communications or optional cookies).

5. Who we share data with

We may share data with: vetted partners delivering a requested service; our booking and guest-experience platform (Innspire, EU-hosted); our accounting provider; Stripe for payment processing. We do not sell personal data. Each recipient only receives the data necessary to fulfil its role and remains bound by its own applicable data protection obligations.

6. International transfers

Our booking and guest-experience platform (Innspire) hosts data within the EU. Payment processing is handled through Stripe, which may process data outside the EEA under appropriate safeguards, including Standard Contractual Clauses.

7. Retention

We retain guest and client personal data for as long as necessary to deliver our services, and for 5 years from your last interaction with us, after which it is deleted or anonymized, unless a longer period is required by law. Financial and accounting records are retained for the period mandated by Romanian law (currently 10 years), independent of the above.

8. Your rights

Under GDPR, you have the right to access, rectify, erase, or restrict processing of your data, to data portability, and to object to processing based on legitimate interest. You may also withdraw consent at any time where processing is based on consent. To exercise these rights, contact info@maisonelle.net. You also have the right to lodge a complaint with ANSPDCP (the Romanian data protection authority) or, for consumer matters, ANPC (reclamatiisal.anpc.ro).

9. Children's data

We do not knowingly collect personal data from individuals under 18.

10. Cookies

Our use of cookies and similar technologies is described in our separate Cookie Policy.

11. Changes to this policy

We may update this Privacy Policy from time to time. The "last updated" date above reflects the most recent revision.

12. Contact

For any question regarding this policy or your personal data: info@maisonelle.net.