I. Introduction

II. Categories of personal data we process

III. Purpose of collecting personal data

IV. Retention period for your personal data

V. Data security

VI. Data transfer

VII. Your rights

VIII. Contact information

I. INTRODUCTION

This Privacy Policy explains how the personal data of individuals who access the website cosmincorendea.com is collected, used, and protected.

The website cosmincorendea.com may collect and process personal data in accordance with Regulation (EU) 2016/679, known as the GDPR, as well as with the applicable data protection legislation.

The data controller is Cosmin Corendea, through the website cosmincorendea.com.

This policy explains the conditions under which your personal data is processed when you use the website cosmincorendea.com, the forms available on the website, the digital systems associated with it, or the communication channels made available.

Personal data is processed only for clear, legitimate, and proportionate purposes in relation to your interaction with the website.

II. CATEGORIES OF PERSONAL DATA WE PROCESS

Personal data means any information that can directly or indirectly identify a natural person. This may include data provided directly by you or data collected automatically when you use the website.

Through the website cosmincorendea.com, we may process the following categories of data:

Website visitors

· IP address;

· browser type;

· device type;

· operating system;

· pages accessed;

· visit duration;

· traffic source;

· data collected through cookies or similar technologies.

Individuals who complete forms or send requests

· first and last name;

· email address;

· phone number, if voluntarily provided;

· city, region, or county, if voluntarily provided;

· the message sent through the form;

· any other information you voluntarily provide through the website.

Individuals who subscribe to updates or newsletters

· first and last name, if requested;

· email address;

· communication preferences;

· history of interaction with the messages sent.

If you contact us by email, we may retain the content of your messages, your email address, and the replies we send to you.

We may also collect personal information when you interact with social media pages associated with Cosmin Corendea. In this case, we will use the information only for the purpose for which it was provided.

We do not knowingly collect information from persons under the age of 16.

III. PURPOSE OF COLLECTING PERSONAL DATA

We process your personal data for the following purposes:

· administering and operating the website cosmincorendea.com;

· displaying website content correctly;

· responding to messages and requests sent through forms or by email;

· sending updates, newsletters, or notifications, only if you have given your consent;

· analyzing traffic and improving the website;

· preventing fraud, abuse, or unauthorized access;

· complying with applicable legal obligations.

The processing of personal data may be carried out based on the following legal grounds:

· your consent, under Article 6(1)(a) of the GDPR;

· the performance of a request submitted by you, under Article 6(1)(b) of the GDPR;

· compliance with a legal obligation, under Article 6(1)(c) of the GDPR;

· the legitimate interest of administering, securing, and improving the website, under Article 6(1)(f) of the GDPR.

Where processing is based on consent, you may withdraw your consent at any time, without affecting the lawfulness of processing carried out before the withdrawal.

We may also process your data for statistical purposes, usually in aggregated or anonymized form.

IV. RETENTION PERIOD FOR YOUR PERSONAL DATA

Your personal data is retained only for as long as necessary for the purpose for which it was collected or for as long as there is a legal basis for retaining it.

· data collected through cookies is retained according to the periods mentioned in the Cookie Policy;

· data sent through contact forms is retained until the request is resolved and for a reasonable period afterwards;

· data used for newsletters is retained until you unsubscribe or withdraw your consent;

· data required for compliance with legal obligations is retained according to the periods required by law.

In the absence of a different legal obligation, data will not be retained for longer than necessary for the purposes mentioned in this policy.

V. DATA SECURITY

We take reasonable technical and organizational measures to protect personal data against unauthorized access, loss, alteration, disclosure, or destruction.

These measures may include limiting access to data, using passwords, updating systems, protecting technical infrastructure, and verifying the providers used.

If a security incident occurs that may affect the rights and freedoms of data subjects, the necessary measures will be taken in accordance with the applicable legislation.

Your privacy settings on third-party platforms, such as social media networks, may be affected by changes made by those platforms. The privacy policies of the respective platforms apply to such changes.

VI. DATA TRANSFER

Your personal data may be transmitted only when necessary for fulfilling the purposes described in this policy.

Data may be transmitted to providers that help operate the website and associated digital services, such as:

· hosting providers;

· IT service providers;

· email or newsletter service providers;

· web analytics services, such as Google Analytics, if used;

· social media platforms, depending on your interaction with them;

· public authorities, where there is a legal obligation.

Providers that process data on behalf of the controller must comply with GDPR requirements regarding confidentiality and data security.

Some services used by the website may involve the transfer of data outside the European Union. In such cases, the transfer is carried out only with appropriate safeguards under the GDPR, such as standard contractual clauses or other legally recognized mechanisms.

VII. YOUR RIGHTS

You have the following rights in relation to the personal data we process:

· the right of access to your personal data;

· the right to request the correction of inaccurate or incomplete data;

· the right to request the deletion of data, under the conditions provided by law;

· the right to request the restriction of processing;

· the right to object to data processing;

· the right to data portability;

· the right to withdraw consent, where processing is based on consent;

· the right not to be subject to a decision based solely on automated processing, including profiling, if such processing produces legal effects or similarly significant effects;

· the right to lodge a complaint with the competent supervisory authority.

To exercise these rights, you may submit a request using the contact details mentioned below.

VIII. CONTACT INFORMATION

To exercise your rights regarding personal data, including accessing, correcting, deleting, or restricting the processing of your data, you may contact us at:

Email: contact@cosmincorendea.ro

Website: https://cosmincorendea.com

If you believe that your data protection rights have been violated, you may contact the Romanian National Supervisory Authority for Personal Data Processing.

Website: www.dataprotection.ro

Address: Bd. G-ral Gheorghe Magheru no. 28-30, Sector 1, Bucharest, Romania.

This policy may be amended or updated periodically. The most recent version will be available on the website cosmincorendea.com.