Legal

Privacy Policy

Last updated: March 2026 · Applies to corinam.com

    This website is operated by Corina Mustata, an independent consultant based in Romania. Your privacy matters. This policy explains clearly what data is collected when you visit this site, why, and what rights you have under the General Data Protection Regulation (GDPR) and Romanian Law no. 190/2018.
  

1. Data Controller

The data controller responsible for this website is:

Corina Mustata
Bucharest, Romania
Email: [email protected]
Website: corinam.com

2. Data Collected and Why

a) Contact form

When you submit the contact form, the following data is collected:

First and last name
Email address
Organisation name (optional)
Topic and message content

This data is used solely to respond to your enquiry. The legal basis is Article 6(1)(b) GDPR (processing necessary to take steps at your request prior to entering into a contract) and Article 6(1)(f) GDPR (legitimate interest in responding to business enquiries).

Form submissions are received by email and are not stored in any database. They are retained only as long as necessary to handle the enquiry and any follow-up correspondence, typically no longer than 24 months.

b) Server logs

When you visit this website, the web server automatically records standard technical data including your IP address, browser type, referring URL, and the pages visited. This data is used solely for security monitoring and technical maintenance. It is stored for a maximum of 30 days and is never shared with third parties. The legal basis is Article 6(1)(f) GDPR (legitimate interest in maintaining the security and performance of the website).

3. Cookies

This website does not use tracking cookies, analytics cookies, or advertising cookies. No third-party tracking scripts are loaded.

The only technical data stored is standard browser session information necessary for the website to function, which does not require your consent under Romanian Law no. 506/2004 as amended.

4. Third-Party Services

This website uses the following external service solely for typography:

Google Fonts — fonts are loaded from Google's servers, which means your IP address is transmitted to Google when the page loads. Google's privacy policy applies: policies.google.com/privacy. The legal basis is Article 6(1)(f) GDPR.

No analytics platform (e.g. Google Analytics), advertising network, or social media tracking pixel is used on this website.

5. Data Transfers Outside the EU/EEA

Google Fonts requests may involve data transfer to servers outside the EU/EEA. Google LLC participates in the EU–US Data Privacy Framework, providing an adequate level of data protection as recognised by the European Commission.

No other personal data collected via this website is transferred outside the EU/EEA.

6. Your Rights

Under the GDPR and Romanian Law no. 190/2018, you have the following rights regarding your personal data:

Access Request a copy of the personal data held about you.

Rectification Request correction of inaccurate or incomplete data.

Erasure Request deletion of your personal data ("right to be forgotten").

Restriction Request that processing of your data be restricted in certain circumstances.

Objection Object to processing based on legitimate interests.

Portability Receive your data in a structured, machine-readable format.

To exercise any of these rights, please contact [email protected]. Requests will be responded to within 30 days.

7. Right to Lodge a Complaint

If you believe your data has been processed unlawfully, you have the right to lodge a complaint with the Romanian supervisory authority:

Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP)
Bulevardul General Gheorghe Magheru 28–30, Sector 1, Bucharest
Website: dataprotection.ro
Email: [email protected]

8. Changes to This Policy

This privacy policy may be updated from time to time to reflect changes in the website or applicable law. The date at the top of this page indicates when it w