Privacy policy
Last updated: 02/11/2026 · In accordance with the General Data Protection Regulation (EU) 2016/679 and the French "Loi Informatique et Libertés".1. Data controller
- Identity
- Mihai Cristea — trading as maxRELAX
- Address
- 68000 Colmar, France
- mihai@maxrelaxmassage.fr
2. What data we collect, why, and on what legal basis
| Data | Purpose | Legal basis | Retention |
|---|---|---|---|
| Name, phone, email (when you contact us) | Replying to your booking enquiry | Contract / pre-contractual measures (GDPR art. 6.1.b) | 3 years from last contact |
| Booking history (date, service, address) | Providing the service; accounting | Contract + legal obligation (GDPR art. 6.1.b/c) | 10 years (accounting) |
| Audience measurement data (Google Analytics, only if you accept cookies) | Understanding how the site is used to improve it | Consent (GDPR art. 6.1.a) | 14 months (per CNIL recommendation) |
3. Cookies and tracking
This site uses cookies only with your consent (CNIL guidance). When you first visit the site, a banner lets you accept or reject non-essential cookies. You can change your choice at any time using the Manage cookies link in the footer.
| Cookie | Provider | Purpose | Retention |
|---|---|---|---|
| _ga, _ga_* | Google Analytics (Google Ireland Ltd) | Audience measurement | Up to 13 months |
| maxrelax_consent_v1 | maxRELAX (this site) | Remember your cookie choice | 6 months |
4. Recipients and transfers outside the EU
Your data may be processed by:
- Our hosting provider Romarg (servers located in Romania);
- Google Ireland Ltd (Google Analytics) — data may be transferred to Google LLC in the United States under the EU–US Data Privacy Framework;
- WhatsApp Ireland Ltd, only if you choose to contact us via WhatsApp.
5. Your rights
Under the GDPR you have the right to:
- access your data (art. 15);
- correct inaccurate data (art. 16);
- request erasure (art. 17), subject to retention obligations;
- restrict processing (art. 18);
- data portability (art. 20);
- object to processing (art. 21);
- withdraw consent at any time;
- lodge a complaint with the CNIL (the French data protection authority): www.cnil.fr.
To exercise these rights, contact us at mihai@maxrelaxmassage.fr.
6. Security
We take reasonable technical and organizational measures to protect your data: HTTPS encryption, restricted access to email, regular software updates.
7. Changes to this policy
This policy may be updated from time to time. The current version is always the one published on this page.