Cristian Moldovan

    Privacy Policy

    Last updated: [Date before launch]

    This policy explains what personal data cristianmoldovan.com collects, why it's collected, and what your rights are. It's written in plain language because privacy policies shouldn't require a law degree to understand.

    Who is responsible for your data

    Data controller:
    Cristian Moldovan, trading as [Business Name / PFA or SRL entity name]
    Registered in Romania, CUI [registration number]
    Registered address: [registered address]

    Contact for privacy matters: [email address]

    Under GDPR, Cristian Moldovan is the data controller — meaning he determines why and how your personal data is processed.

    What data is collected and why

    Here's a straightforward breakdown of what's collected, the purpose, and the legal basis under GDPR:

    1. Contact form submissions

    • What: Name, email address, and whatever you write in the message field
    • Why: To respond to your inquiry about consulting services
    • Legal basis: Legitimate interest (you reached out; responding is the natural next step)
    • Retention: Up to 12 months after last contact, then deleted — unless the conversation leads to a business relationship, in which case standard business record retention applies

    2. Newsletter signup

    • What: Email address
    • Why: To send you periodic emails about marketing strategy, consulting insights, and updates on services and programs
    • Legal basis: Consent (you actively opted in by entering your email and clicking subscribe)
    • Retention: Until you unsubscribe. Once you do, your email is removed from the mailing list within 30 days
    • Service provider: [Newsletter platform — e.g., ConvertKit / Mailchimp / Beehiiv]. Your email is stored and processed by this provider on Cristian Moldovan's behalf. Their privacy policy applies to their handling of the data.

    3. Google Analytics

    • What: Anonymized usage data — pages visited, session duration, approximate geographic region, device type, referral source
    • Why: To understand how people use the site and improve it
    • Legal basis: Consent (analytics cookies are only placed after you accept them via the cookie banner)
    • Retention: 14 months (Google Analytics default), then automatically deleted
    • Note: IP anonymization is enabled. No personally identifiable information is collected through analytics.

    4. Cookies

    • What: Small text files stored in your browser
    • Why: Some are necessary for the site to function; others (analytics) help understand site usage
    • Legal basis: Necessary cookies: legitimate interest. Analytics cookies: consent.
    • Full details: See the Cookie Policy

    Who your data is shared with

    Your personal data is not sold, rented, or traded. It is shared only with the following categories of service providers, who process data on Cristian Moldovan's behalf:

    • Email / newsletter platform ([Provider name]) — to send newsletter emails
    • Google Analytics (Google LLC) — to process anonymized site usage data
    • Website hosting provider ([Provider name]) — to serve the website
    • Form processing service ([Provider name, if applicable]) — to handle contact form submissions

    These providers act as data processors under GDPR and are contractually obligated to protect your data and use it only for the specified purposes.

    International transfers: Some of these providers (notably Google) are based in the United States. Where data is transferred outside the EU/EEA, it is protected by appropriate safeguards such as Standard Contractual Clauses (SCCs) or adequacy decisions.

    Your rights under GDPR

    You have the following rights regarding your personal data:

    • Access — request a copy of the data held about you
    • Rectification — ask for inaccurate data to be corrected
    • Erasure — ask for your data to be deleted ("right to be forgotten")
    • Restriction — ask for processing to be limited in certain circumstances
    • Data portability — receive your data in a structured, machine-readable format
    • Objection — object to processing based on legitimate interest
    • Withdraw consent — where processing is based on consent (newsletter, analytics cookies), you can withdraw it at any time

    To exercise any of these rights, email [email address]. Requests will be responded to within 30 days.

    If you believe your data rights have been violated, you have the right to lodge a complaint with the Romanian data protection authority:

    Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP)
    Website: www.dataprotection.ro

    Data security

    Reasonable technical and organizational measures are in place to protect your personal data from unauthorized access, loss, or misuse. These include SSL/TLS encryption for data in transit and access controls for stored data.

    No system is 100% secure. If a data breach occurs that poses a risk to your rights, you will be notified as required by GDPR (within 72 hours of discovery to the supervisory authority, and without undue delay to affected individuals where the risk is high).

    Children's data

    This site is not directed at anyone under 16. No data is knowingly collected from minors. If you believe a minor has submitted personal data through this site, contact [email address] and it will be deleted promptly.

    Changes to this policy

    This policy may be updated to reflect changes in data practices or legal requirements. When updated, the "Last updated" date at the top will change.

    For significant changes affecting how your data is processed, a notice will be posted on the site.

    Contact

    Questions about your data or this policy?

    [Email address]

    Ready to talk? →