Data protection
This page explains what personal data we receive through our website, by phone, on WhatsApp or by email, why we use it, how long we keep it and what rights you have.
Last updated:
Questions about your personal data:
The controller of your personal data is:
ART SENIOR RESIDENCE S.R.L.
Tax ID (CUI): 47797915
Trade Register No.: J2023001060356
Registered office: Calea Lugojului nr. 30, sat Ghiroda, com. Ghiroda, jud. Timiș, 307200, Romania
Phone: +40 724 130 640
Email: contact@
We run the Art Senior Residence care home for older adults and the artsenior.ro website.
This policy explains what happens to the data we receive through our website and when you first get in touch with us, before any admission. We comply with the EU General Data Protection Regulation 2016/679 (GDPR) and with Romanian Laws No. 190/2018 and No. 506/2004.
You send us your name and phone number. If you wish, you can add your email address, who you are looking for care for, when you would like to visit, when we can call you, and a message.
When you call or write to us, we receive your phone number or email address and whatever you tell us. On WhatsApp we also see your profile name and, depending on your settings, your profile photo.
When you use the virtual assistant, we receive the questions you type. See Virtual assistant for details.
As with any website, the servers that host it automatically receive some technical data: your IP address, your browser and device type, the page requested, and the date and time. The website cannot work or be protected without it.
The website remembers a few of your choices in your browser, such as the text size. Statistics and ad measurement only start if you give your consent. See Cookies for details.
You do not need an account. On the website we never ask for your national ID number, your home address or your bank details.
We use your data only for the purposes below. For each one, the law requires us to tell you the legal basis.
We answer your questions, give you information about the care home and our costs, and agree a day for your visit with you.
Legal basis: steps taken at your request before a possible contract (Art. 6(1)(b) GDPR). When you write to us on behalf of someone else: our legitimate interest in replying to people who contact us (Art. 6(1)(f) GDPR).
Technical logs, blocking automated messages (spam) and limiting repeated requests.
Legal basis: our legitimate interest in a secure, working website (Art. 6(1)(f) GDPR).
We find out how many people visit, which pages they read and whether our ads lead to calls and enquiries.
Legal basis: your consent, given through the cookie banner (Art. 6(1)(a) GDPR and Art. 4(5) of Romanian Law No. 506/2004). You can withdraw it at any time.
We respond to authorities that request information under the law.
Legal basis: a legal obligation (Art. 6(1)(c) GDPR).
We do not use your data for personalised advertising (remarketing), and we never sell it.
Health data is a special category of personal data, which the law protects more strictly (Art. 9 GDPR).
Please do not send us medical information through the form or the virtual assistant. We do not need it when you first contact us. We discuss it by phone or during your visit, when it is needed.
If you do send us such information, we use it only to reply to you, for example to tell you whether we can provide the right care. We do not keep it longer than we need to for that.
The virtual assistant cannot assess anyone’s health and does not give medical advice. In an emergency, call 112.
Often a son, a daughter or another relative writes to us on behalf of a parent or grandparent. In that case, you also give us some information about that person, such as their name, their age or the help they need.
We use it only to reply to you and arrange the visit, just like your own data, and keep it for the same length of time. The source of this information is you, the person who contacted us.
Please tell us only what is necessary and, if possible, let the person know that you have contacted us. They have the same rights as you, described below (Art. 14 GDPR).
The virtual assistant is an automated program based on artificial intelligence. It is not a member of our team. It answers general questions about the care home, our services, costs and visits.
Please do not type medical information, ID numbers or bank details into the chat. The assistant’s answers may contain mistakes. For the cost of care or for admission, please call us.
Legal basis: our legitimate interest in answering your questions quickly (Art. 6(1)(f) GDPR). When you ask us to call you: steps taken at your request (Art. 6(1)(b) GDPR).
We do not sell or rent your data to anyone. Only the providers below may receive it. They work for us, follow our instructions and are bound by confidentiality (processors, Art. 28 GDPR).
The Facebook and Instagram links at the bottom of each page take you to those networks’ websites. Our website has no Meta plugins or tracking pixels.
Netlify, Cloudflare, Anthropic, Resend and Google LLC are US companies, so your data may be processed on servers outside the European Economic Area.
These transfers rely on the EU–US Data Privacy Framework (the European Commission’s adequacy decision of 10 July 2023) for certified companies, or on standard contractual clauses adopted by the European Commission, as applicable. On request, we will tell you which safeguards apply to each provider.
The law (Articles 15–21 GDPR) gives you the following rights:
Email us at contact@
We will reply without undue delay and within one month at the latest. If your request is complex, this may be extended by two further months; if so, we will let you know. To protect your data, we may ask you to confirm who you are.
If you are not satisfied with our reply, you can lodge a complaint with the Romanian data protection authority, the National Supervisory Authority for Personal Data Processing (ANSPDCP):
B-dul G-ral Gheorghe Magheru nr. 28-30, sector 1, 010336 Bucharest, Romania
Phone: +40 318 059 211
Email: anspdcp@
Website: www.dataprotection.ro
If you live or work in another EU country, you can also contact the data protection authority there. It helps, though, if you tell us first: we can often sort things out quickly.
A cookie is a small file that a website saves in your browser. A website can also save small pieces of information in your browser’s storage (localStorage and sessionStorage).
Romanian Law No. 506/2004 allows us to store, without your consent, only what is strictly necessary for something you have asked for. For everything else, we ask for your consent.
If you send us your CV by email or on WhatsApp, we use it only for recruitment: to assess your application and to contact you.
Legal basis: steps taken at your request before a possible employment contract (Art. 6(1)(b) GDPR).
We keep your CV until the recruitment process has ended. If you ask us to, we delete it sooner.
Please do not include health information, ID numbers or copies of identity documents in your CV. We do not need them at this stage.
The roles we are recruiting for are listed on our Careers page.
We do not make decisions based solely on automated processing, including profiling, that have legal effects on you or affect you in a similarly significant way (Art. 22 GDPR). The virtual assistant only answers questions. Decisions about admission are made by people in our team.
Our website and our services are intended for adults. We do not knowingly ask for or use data about children under 16. If we learn that a child has written to us, we delete the data.
When we change the way we use data, we update this page. The version published here is the one that applies.
This is a translation of the Romanian version. If the two versions differ, the Romanian version prevails.
Last updated: .