Privacy

Privacy notice

Who is responsible

This site is run by me, Emanuel Andreescu, in Bucharest, Romania. I'm the controller of the personal data described here, which means I decide how it's used. For any privacy question or request, write to me through the contact form or on LinkedIn.

When you visit the site

When you use the contact form

What I receive: your name or organisation, your email address, the type of request and topic, your message, and the language and page you sent it from. Your name, email and message are needed so I can reply; without them I can't answer you.

Why: only to read and answer your request and, if we decide to work together, to prepare that work. The legal basis is taking steps at your request before a possible agreement (Article 6(1)(b) GDPR) and my legitimate interest in answering messages sent to me (Article 6(1)(f) GDPR).

Health information: you don't need to share any diagnosis or health details. If you choose to, for example in a pro-bono request, I use them only to help with that request, based on your explicit consent (Article 9(2)(a) GDPR). You can withdraw it at any time by asking me to delete them.

Who helps me receive it: your message reaches my inbox through a form-delivery service and email services, and an automation service may pass it on to my own tools. I may also get a short alert on my phone that a new request has arrived, without your name, email or message. These providers handle your data only to deliver it to me. Where one of them processes data outside the European Economic Area, the transfer relies on the safeguards the GDPR provides, such as an adequacy decision (including the EU-US Data Privacy Framework) or the European Commission's standard contractual clauses.

I don't sell your data, add you to a mailing list or use it for anything other than your request. There is no automated decision-making or profiling.

How long I keep it

The form-delivery service deletes its copy after 30 days. I keep our emails for as long as our conversation needs them and delete them within 12 months of our last contact. If we work together, I keep what accounting and tax law requires, for as long as it requires.

Your rights

You can ask me for a copy of your data, to correct or delete it, to restrict or object to how I use it, and to send it to you in a portable format. Where I rely on your consent, you can withdraw it at any time. Send your request through the contact form or LinkedIn and I'll answer within one month.

You can also complain to the Romanian data protection authority (ANSPDCP) or to the authority in the EU country where you live or work.

Changes

If this notice changes, the date at the top changes with it.