GDPR Data Protection

Last updated: 1 July 2026

This page summarises how EMPIRIC WORLD SRL, which operates cristianmoldovan.com and the Cristian Moldovan brand, processes personal data under the General Data Protection Regulation (GDPR, Regulation (EU) 2016/679) and Romanian data protection law. It explains your rights and how to exercise them. The full details are in the Privacy Policy.

Data controller

Data controller:
EMPIRIC WORLD SRL, operating the Cristian Moldovan brand
Registered in Romania, CUI 31279259, Trade Register no. J12/588/2013
Registered address: Str. Ioan Budai-Deleanu nr. 65, Cluj-Napoca, Cluj County, 400474, Romania

Data protection contact: gdpr@cristianmoldovan.com

As data controller, EMPIRIC WORLD SRL decides why and how your personal data is processed and is responsible for complying with the obligations described on this page.

Personal data we process

We process only the personal data we need to run this website and deliver our services, The full list of data, purposes and legal bases is in the Privacy Policy. In summary:

Contact and inquiry data (name, email, message, details about your business): to answer your request and schedule the discussions you ask for, as steps taken at your request before a possible collaboration.
Registration and service data (name, email, scheduling details and, for online sessions, display name, image, voice and chat messages if you choose to use them): to run webinars, events, consultations and the services you buy, and to record online sessions. Based on contract performance and, for recordings, our legitimate interest.
Marketing data (email and, in the future, phone number): to send resources, event invitations and offers by email, or reminders by SMS or WhatsApp, only if you have opted in. Based on your consent.
Usage and advertising data (IP address, device, browser, pages visited): to understand how the site is used and measure and show relevant ads, through Google Analytics, Meta Pixel and OpenAI Ads pixel. Based on your consent via the cookie banner.

Legal basis for processing

Under Article 6 GDPR, we process personal data only when at least one of the following legal bases applies:

Consent — Consent: for marketing emails, SMS or WhatsApp reminders, and analytics and marketing cookies.
Contract performance — Contract performance: to register you for webinars and events, schedule the discussions you request, and deliver the services you buy.
Legitimate interest — Legitimate interest: to record online sessions, keep the website secure and defend our rights, where these interests do not override your rights.
Legal obligation — Legal obligation: to keep invoices and accounting records for the periods required by Romanian law.

Data retention

We keep personal data only as long as we need it for the purpose it was collected for, The retention period for each category is set out in the Privacy Policy. Invoices and accounting records are kept for the periods required by Romanian law. At the end of each period, we delete or anonymise the data, You can ask us to delete your data sooner, as described below.

Your rights under GDPR

You have the following rights regarding your personal data:

Right of access: ask for a copy of the personal data we hold about you.
Right to rectification: ask us to correct inaccurate data.
Right to erasure: ask us to delete your data, subject to our legal retention obligations.
Right to restriction: ask us to limit processing in certain circumstances.
Right to data portability: receive your data in a structured, machine-readable format and, where technically feasible, have it sent to another controller.
Right to object: object to processing based on our legitimate interest, and object at any time to direct marketing.
Right to withdraw consent: where processing is based on consent, withdraw it at any time. This does not affect processing carried out before you withdrew it.
Right not to be subject to automated decisions: we do not take decisions based solely on automated processing that have legal or similarly significant effects on you.

To exercise any of these rights, email gdpr@cristianmoldovan.com. We respond within one month, For complex requests, this can be extended by two more months, and we will tell you if it is. We may ask you to confirm your identity to protect your data.

International data transfers

Some of our service providers process data outside the European Economic Area, including in the United States. In these cases, the transfer is based on the European Commission's adequacy decision (EU-U.S. Data Privacy Framework) for certified providers, or on Standard Contractual Clauses approved by the European Commission, The list of providers is in the Privacy Policy.

Data subject requests

Send any GDPR request to gdpr@cristianmoldovan.com. Tell us what you need (access, correction, deletion, restriction, portability, objection or withdrawal of consent) so we can respond accurately. To stop marketing emails, you can also use the unsubscribe link in any email.

Data breach notification

If a personal data breach is likely to put your rights and freedoms at risk, we notify the Romanian supervisory authority (ANSPDCP) within 72 hours of becoming aware of it, where feasible. If the risk to you is high, we also inform you without undue delay, as required by Articles 33 and 34 GDPR.

Supervisory authority

If you believe your data protection rights have been infringed, you can file a complaint with the Romanian data protection authority:

Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP)
Website: www.dataprotection.ro

Changes to this page

We may update this page when our data practices or legal requirements change, The date at the top shows the latest version. For the full details of what data we collect and why, see the Privacy Policy, and for cookie details, see the Cookie Policy.

Contact

Questions about GDPR or your data?

gdpr@cristianmoldovan.com