Privacy Policy

Last updated: 19 July 2026

Thank you for visiting tinado.ro. This policy explains, in plain language, what personal data we collect, why we collect it, how long we keep it and what rights you have under Regulation (EU) 2016/679 (GDPR). In short: this is a presentation website and we collect very little data — only what we need in order to reply when you write to us.

Who we are

The tinado.ro website is operated by TINADO Curățătorie & Spălătorie — TINADO CROITORIE S.R.L., company registration number (CUI) 38819119, Trade Registry no. J2018000264221, with its registered office at Strada Petuniilor no. 9, Breazu, Iași County — referred to below as "the controller".

Location: Iulius Mall Iași, Bd. Tudor Vladimirescu no. 1, Lower ground floor (below the Dr. Max Pharmacy)
Phone: 0232 208 615
Email: contact@tinado.ro
Opening hours: Monday–Saturday 07:00–21:50, closed on Sundays

What data we collect and where it comes from

There are no user accounts, newsletters or traffic analytics tools on this site. We collect personal data in only two situations:

The contact form: your first name, last name, email address, phone number (optional) and your message — information you provide yourself when you write to us.
Your IP address, when the form is submitted: we use it to limit the number of submissions (at most 3 per minute from the same address, as anti-spam protection; it is kept only briefly — a matter of minutes — in the server's cache) and we pass it on to Cloudflare, together with the Turnstile verification response, to confirm that the message comes from a human and not a bot.

Your message goes straight to the contact@tinado.ro inbox and is not stored in the website's database. We reply to you by email as well.

Why we use your data and on what legal basis

To reply to your enquiry — legal basis: Art. 6(1)(b) GDPR (steps taken at your request) and Art. 6(1)(f) GDPR (our legitimate interest in communicating with our customers).
To keep the site secure (submission rate limiting and the Turnstile anti-bot check) — legal basis: Art. 6(1)(f) GDPR (our legitimate interest in protecting the form from spam and abuse).
To display the Google Maps map on the Contact page — legal basis: your consent, Art. 6(1)(a) GDPR (the map loads only if you accept the "Marketing" category and click the load button).

How long we keep your data

Email correspondence: for no more than 12 months after your enquiry has been resolved, after which we delete it.
The IP address used for rate limiting: just a few minutes, in the server's cache.

Who we share your data with

We never sell or rent your data. It may only reach:

Hostinger — the hosting provider on whose servers the website runs and through which your messages pass.
Cloudflare Inc. — for the Turnstile anti-bot check: the widget is displayed on the Contact page, and when you submit the form our server sends Cloudflare the verification response along with your IP address.
Google — only if you give your consent for the "Marketing" category and load the map on the Contact page; from that moment on, Google may set its own cookies, as described in its cookie policy.

Transfers outside the European Economic Area

Cloudflare and Google may also transfer data outside the EEA (for example, to the United States). These transfers rely on the appropriate safeguards provided for by the GDPR: standard contractual clauses approved by the European Commission and/or certification under the EU-US Data Privacy Framework.

Your rights

Under the GDPR, you have the following rights:

Access — to find out what data we hold about you and receive a copy of it.
Rectification — to have inaccurate or incomplete data corrected.
Erasure — to have your data deleted when we no longer have a legal reason to keep it.
Restriction — to have the processing of your data temporarily limited.
Objection — to object to processing based on our legitimate interest.
Portability — to receive the data you provided in a structured, commonly used format.
Withdrawal of consent — at any time, for processing based on consent (for example, the Google map), without affecting the lawfulness of processing carried out before the withdrawal.

To exercise any of these rights, write to us at contact@tinado.ro. We will reply as quickly as we can, and no later than one month. If you feel something is not right, you can lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) — www.dataprotection.ro.

Cookies and browser storage

We use a minimal number of strictly necessary cookies: the "tinado_session" session cookie (expires after 120 minutes of inactivity) and "XSRF-TOKEN" (protection against request forgery, valid for the duration of the session). On the Contact page, the Cloudflare Turnstile anti-bot widget may use its own storage, strictly for security purposes.

The consent banner has three categories: Necessary (always active), Statistics (we currently use no statistics cookies at all — the category exists for transparency and possible future additions) and Marketing (the Google map). Your choice is saved in your own browser (localStorage, under the key "tinado-consimtamant") and remains valid for 12 months, after which the banner appears again. You can change or revoke it at any time using the "Cookie settings" button in the footer of every page. Full details about each category can be found in the Cookie Policy.

Changes to this policy

If our practices change (for example, if we ever enable statistics tools), we will update this page and the "Last updated" date at the top. The current version is always available at /en/politica-de-confidentialitate. If you have any questions, please write to us via the Contact page.