1. Who We Are
White Collar is a premium valet laundry service for professionals and companies, integrated into office buildings.
For the purposes of data protection law, White Collar acts as the Data Controller.
📧 Contact: office@white-collar.ro
2. Personal Data We Process
Depending on how you interact with us (app, forms, orders), we may process:
a) Identification & contact data
- First and last name
- Address (delivery / billing)
- Phone number
- Email address
b) Order & service-related data
- Garment details
- Order history
- Special instructions provided by you
c) Data submitted via forms
- Information provided through contact forms, pilot requests, bookings, or inquiries
d) Technical data
- IP address
- Browser and device type
- Pages visited
- Cookies and similar technologies
⚠️ We do not intentionally process special categories of personal data under Art. 9 GDPR.
3. Online Payments
Card payments are processed exclusively by authorized third-party payment processors.
White Collar does not store or access card details.
The payment processor acts as an independent controller or processor, under its own privacy policy.
4. Purposes of Processing
We process your data for legitimate purposes such as:
- account creation and management
- pickup, cleaning, and delivery of garments
- order-related communication and notifications
- responding to inquiries
- billing and accounting
- service improvement
- marketing (with explicit consent)
- system security and fraud prevention
- legal compliance
5. Legal Basis (Art. 6 GDPR)
Processing is based on:
- performance of a contract
- your consent
- legal obligations
- legitimate interests
6. Data Recipients
Your data may be shared with:
- IT and hosting providers
- payment processors
- professional cleaning partners
- public authorities, when legally required
All partners are GDPR-compliant.
7. Data Retention
Data is retained:
- for the duration of the contractual relationship
- according to legal obligations (e.g. accounting – 10 years)
- until consent is withdrawn, where applicable
8. Your Rights Regarding Personal Data
Under Regulation (EU) 2016/679 (GDPR), you have the following rights:
Right of access
You have the right to know whether we process your personal data and to request a copy of the data we hold about you, as well as information on how it is used.
Right to rectification
If your personal data is inaccurate or incomplete, you have the right to request its correction or update.
Right to erasure (“the right to be forgotten”)
You may request the deletion of your personal data when it is no longer necessary for the purposes for which it was collected, when you withdraw your consent, or when the processing is unlawful, subject to applicable legal limitations.
Right to restriction of processing
You have the right to request that we limit the processing of your data in certain situations, for example if you contest its accuracy or if the processing is unlawful but you do not want the data to be erased.
Right to data portability
You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to request that it be transferred to another data controller, where technically feasible.
Right to object
You may object at any time to the processing of your personal data, on grounds relating to your particular situation, especially where data is processed for direct marketing purposes.
Right to withdraw consent
Where processing is based on your consent, you may withdraw it at any time. This will not affect the lawfulness of processing carried out before the withdrawal.
Right to lodge a complaint with a Supervisory Authority
If you believe your data protection rights have been violated, you have the right to lodge a complaint with the competent data protection authority (ANSPDCP).
9. Policy Updates
We may update this Privacy Policy when necessary. Any changes will be published on the website and take effect immediately.
This Privacy Policy was published on December 20, 2025.