Privacy policy

In short

I take just your email – enough to send you the calendar invite and get in touch. That’s it. Nothing sold, nothing passed on.

Who the data controller is

The controller of your data is O SACOSA CU TEI S.R.L. (Tax ID 45535799, Trade Register J2024005027231, Str. Mușetești nr. 29, 3rd floor, ap. 18, Sector 1, Bucharest), legally represented by Bălăceanu Radu-Andrei, administrator.

The site is built and operated by Andrei Trandaf as a collaborator of the company. For any question or request about your data: radu@notaconsultant.ro.

What I collect

From the “Book a Call” form: your email, plus the day and time you pick for the call. That’s all the form asks for.

Separately, I measure how many people visit the site – anonymously, as plain traffic stats. The details are in the cookie policy.

Why I collect it

So I can send you the calendar invite and we can talk at the time you picked. Without an email, I can’t.

Legal basis

For the booking: performance of a contract at your request, before entering into it – Art. 6(1)(b) GDPR.

For my own traffic stats, cookie-free and not identifying you: my legitimate interest in knowing how visited the site is – Art. 6(1)(f) GDPR.

For Google Analytics: your consent – Art. 6(1)(a) GDPR. It loads only after you press “Accept” in the banner, and you can withdraw at any time from “Cookie settings” in the footer.

How long I keep it

Booking data: 24 months from our last contact. After that I delete it.

Who I share it with

I don’t sell it and I don’t hand it to third parties. Technically it passes through the processors that keep the site running: Railway (hosting for the site and database) and Resend (the service that delivers the confirmation email and calendar invite). Both act as data processors under a data processing agreement (Art. 28 GDPR): they touch the data strictly technically, on my instructions, and never for their own purposes.

If you accept analytics cookies, traffic data, with the IP anonymized, also reaches Google Ireland Ltd. for Google Analytics 4. Without your consent, Google receives nothing from here.

Your rights

You have the right to access, rectification, erasure, portability and objection. And the right to complain to ANSPDCP – the Romanian Data Protection Authority.

How to exercise them

Email radu@notaconsultant.ro and we’ll sort it out. No forms, no bureaucracy.

Where the data lives

Physically, in the European Union: the site and its database run on Railway’s servers in Amsterdam, and emails go out through Resend’s Ireland region. Railway and Resend are companies based in the United States, so if a transfer outside the Union ever becomes necessary (for technical support, say), it relies on the safeguards of Art. 46 GDPR: the standard contractual clauses included in their data processing agreements.

Google Analytics, if you accept it, may transfer anonymized traffic data to the US under the EU-US Data Privacy Framework. I transfer nothing anywhere else, to anyone else.

Automated decisions

None. I don’t profile you and no algorithm decides anything about you.