Privacy Policy

Data Controller

BLACK MILK COFFEE S.R.L.
123 Concrete Street, Sector 3, Bucharest, Romania
Email: privacy@blackmilkcoffee.ro
CUI: RO00000000

What Data We Collect

Through the contact form on this website, we may collect:

• Name
• Email address
• Phone number (if provided)
• Message content and inquiry details
• Preferred date and party size (if provided)

We also store a cookie consent preference in your browser's local storage.

Purpose of Processing

• To respond to your inquiries and booking requests
• To manage event and collaboration inquiries
• To comply with legal obligations

Legal Basis

Processing is based on your consent (GDPR Article 6(1)(a)), provided through the contact form consent checkbox, and on our legitimate interest in responding to business inquiries (Article 6(1)(f)).

[Placeholder: A real business should specify exact legal bases for each processing activity.]

Data Retention

Contact form submissions are retained for up to 12 months after the inquiry is resolved, unless a longer retention period is required by law.

[Placeholder: Define actual retention periods per data category.]

Your Rights

Under GDPR, you have the right to:

• Access your personal data
• Rectify inaccurate data
• Request erasure of your data
• Restrict processing
• Data portability
• Object to processing
• Withdraw consent at any time
• Lodge a complaint with a supervisory authority (ANSPDCP in Romania)

To exercise these rights, email privacy@blackmilkcoffee.ro.

Third-Party Processors

• Netlify, Inc. — form submission processing and website hosting (USA, EU Standard Contractual Clauses)
• Map provider — if/when an embedded map is added, the map provider may set cookies

[Placeholder: List all real data processors and their DPA status.]

Data Sharing

We do not sell, trade, or rent your personal data. Data is only shared with the processors listed above for the purposes described.

Contact

For privacy-related questions: privacy@blackmilkcoffee.ro