In short: this site has no accounts and no forms. You reach me by phone or WhatsApp, and what you tell me stays with me.
Who I am
The website yumeihoacasa.ro belongs to Daniel Niculae, Yumeiho therapist. I decide what data is used and why, so I am the data controller under the GDPR. You can reach me by phone or on WhatsApp at +40 728 009 118.
What I take, and why
When you call or write to me on WhatsApp to book: your number, your name, and what you tell me so we can set up the session: the day and time, the address I come to and, if you want to tell me, why you need the therapy (for example back pain). Information about your health is sensitive data: I don't note anything about your health without your agreement, I use what I learn only to adapt the session, and I don't pass it to anyone. What you write to me on WhatsApp stays in the conversation until you ask me to delete it.
When you visit the site: the hosting provider, Cloudflare, sees your IP address and basic technical data from your browser, as any web server does, to deliver the site and keep it safe.
If you press “Accept all” in the cookie banner, Microsoft Clarity is switched on: it receives data about your visit (pages viewed, device type, length of the visit and, for Clarity, clicks and scrolling on the page). Without “Accept all” this service is not loaded at all. We also use aggregate statistics that store no cookies and do not identify you: Cloudflare Web Analytics, Umami and Plausible.
What I don't do: I don't ask for data I don't use, I don't build profiles, I don't make automated decisions about you, and I never sell or rent data to anyone.
Legal basis
- Booking and the session: taking steps at your request before a session (Art. 6(1)(b) GDPR).
- Health information, if you tell me: your explicit consent (Art. 9(2)(a) GDPR): I don't note anything about your health without your agreement. You can withdraw it at any time and I will delete it.
- Running and protecting the site (hosting, security): the legitimate interest in keeping the site working and safe (Art. 6(1)(f)). No consent is needed for strictly necessary storage.
- Statistics and visit recordings (Microsoft Clarity): basis: your consent, given through “Accept all” (Art. 6(1)(a) GDPR); you can withdraw it at any time from the Cookie policy.
- Aggregate statistics without cookies: our legitimate interest in understanding how the site is used (Art. 6(1)(f)); they contain no data that identifies you.
Where it goes
Your number and messages stay in my phone and my WhatsApp account. The site does not receive them.
The providers who touch the data, each with their role:
- Cloudflare: hosts the site and carries the traffic
- Microsoft Corporation (Clarity): on-page behaviour analysis, only if you press “Accept all”
- ai-AI (FUNKTASTIC SRL): built the site and runs it technically, so it sees the visit statistics
- WhatsApp (Meta): only if you choose to write to me there
- Public authorities: only when the law requires it
Some of these providers are based outside the European Economic Area, mostly in the United States. Where that is the case, the transfer relies on the safeguards the provider offers: the EU–US Data Privacy Framework or standard contractual clauses.
How long I keep it
- Booking details: while we keep having sessions, and afterwards only as long as legal obligations require (for example for accounting documents). If you no longer want me to keep them, tell me and I delete them.
- Traffic statistics: according to the providers' retention (Microsoft: between 30 days and 13 months); aggregate statistics without cookies contain no data that identifies you.
What you can ask for
You have the right to know what data I hold about you, to correct it, to have it deleted, to ask me to stop using it, to receive it in a file you can take elsewhere, and to object to processing. You can withdraw a consent at any time, without affecting what happened before.
Call me or write on WhatsApp at +40 728 009 118. I answer within a month at the latest, usually much sooner, and it is free.
If my answer doesn't satisfy you, you can complain to the Romanian data protection authority, ANSPDCP, Bd. G-ral. Gheorghe Magheru 28-30, Bucharest, dataprotection.ro. I would rather sort it out directly, but the right is yours.
Children
This site is for adults. I don't knowingly collect children's data. If you believe I hold any, tell me and I will delete it.
When this page changes
The date at the top is the last change. If I change something that matters (what I collect, why, or who receives it), I will announce it on the site.
See also the cookie policy.