Privacy notice
Last updated: 14 October 2026 · Website and booking enquiries
This notice describes the current website preview. Hosting providers, their retention periods and any international data transfers must be checked for the final hosting environment before launch.
Who is responsible for your information?
ARTEX EXCLUSIV CONCEPT SRL, operating Club XS. CUI: 38548583. Trade Register: J40/19877/2017. Registered office: Str. Vulturilor 9A, Sector 3, Bucharest, Romania.
Contact: office@club-xs.ro · +40 769 778 644. The club venue is at 24 Gheorghe Magheru Boulevard, Bucharest; this is separate from the registered office.
Information you choose to share
The website has no booking form, account registration, newsletter sign-up or online checkout. If you contact the club by email, telephone or WhatsApp, the club processes the contact details you provide, your message and relevant booking details, such as your requested date and group size. Please do not send identity documents or other unnecessary sensitive information.
Why information is used
The club uses enquiry information to reply to you and organise your requested visit. General enquiries are handled on the basis of the legitimate interest in responding to customers (Article 6(1)(f) GDPR). Steps you request before making a booking rely on Article 6(1)(b). Where records must be retained to meet a legal obligation, Article 6(1)(c) applies. Information requested for a booking is needed to respond to or arrange that booking; you can browse without submitting an enquiry.
Technical information and age confirmation
Serving and protecting the website involves technical requests that can include your IP address, browser information, requested pages and request time. The hosting and security providers may process these details for delivery, security and troubleshooting. The site stores only your 18+ confirmation in the current browser session; it does not ask for a date of birth or an identity document. There are no analytics or advertising trackers configured in this version, and no automated decisions or profiling are implemented by the site.
Providers and external links
Authorised staff and providers supporting website delivery or communications may handle information as needed for those services. WhatsApp, Google Maps and other linked services open only when you choose their links, and their own privacy notices apply. Communications through those services may involve processing outside the EEA under their applicable safeguards. You may use email or telephone instead of WhatsApp. The final hosting provider and applicable transfer arrangements must be confirmed before moving this preview to the main domain.
How long information is kept
The existing Club XS privacy policy sets a retention period of 12 months for contact enquiries. Booking records that are subject to legal retention requirements or needed for a legal claim may be retained for the applicable period. The age-confirmation value is kept in browser session storage, normally until the tab or browser session closes; restored sessions may preserve it. Hosting and communications providers have their own retention settings, which must be checked for the final service configuration.
Your rights
Subject to the conditions in the GDPR, you may request access, correction, erasure, restriction of processing or data portability, and object to processing based on legitimate interests. Where processing relies on consent, you may withdraw it without affecting earlier lawful processing. Contact office@club-xs.ro to exercise your rights. Requests are normally answered within one month; the GDPR allows an extension in specified circumstances.
You may lodge a complaint with the Romanian supervisory authority, ANSPDCP, or the competent supervisory authority in your country. You do not have to contact the club first.
Adults only
This website and the club experience are intended for adults aged 18 and over. If you believe a minor has provided personal information, contact the club so the matter can be addressed.