Privacy Policy

Last updated: January 20, 2026

1. Introduction

Blaga Razvan Antonio PFA ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services, in compliance with the General Data Protection Regulation (GDPR) (EU) 2016/679 and Romanian Law No. 506/2004 regarding the processing of personal data.

By using our services, you consent to the data practices described in this policy. If you do not agree with the data practices described in this policy, you should not use our services.

2. Data Controller

The data controller for your personal data is:

Blaga Razvan Antonio PFA

CUI: RO12345678

Romania, European Union

Email: [email protected]

Phone: +40 772 169 637

3. Information We Collect

3.1 Personal Information

We may collect personal information that you voluntarily provide to us when you:

  • Register for our services or create an account
  • Book a consultation or appointment
  • Contact us via email, phone, or contact forms
  • Subscribe to our newsletter or marketing communications
  • Use our services

This information may include:

  • Name and contact information (email address, phone number)
  • Company information (if applicable)
  • Project descriptions and requirements
  • Payment information (processed securely through third-party payment processors)
  • Any other information you choose to provide

3.2 Automatically Collected Information

When you visit our website, we may automatically collect certain information about your device, including:

  • IP address
  • Browser type and version
  • Operating system
  • Pages you visit and time spent on pages
  • Referring website addresses
  • Date and time of access

4. How We Use Your Information

We use the information we collect for the following purposes:

  • Service Delivery: To provide, maintain, and improve our services
  • Communication: To respond to your inquiries, send you service-related information, and provide customer support
  • Appointments: To schedule and manage consultations and appointments
  • Legal Compliance: To comply with legal obligations and protect our legal rights
  • Marketing: To send you promotional materials and newsletters (only with your consent)
  • Analytics: To analyze website usage and improve user experience
  • Security: To detect, prevent, and address technical issues and security threats

5. Legal Basis for Processing

We process your personal data based on the following legal grounds under GDPR:

  • Consent: When you have given clear consent for us to process your data for specific purposes
  • Contract Performance: When processing is necessary for the performance of a contract with you
  • Legal Obligation: When processing is necessary to comply with legal obligations
  • Legitimate Interests: When processing is necessary for our legitimate business interests, provided they do not override your rights and freedoms

6. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

  • Service Providers: With trusted third-party service providers who assist us in operating our website and conducting our business (e.g., hosting providers, payment processors)
  • Legal Requirements: When required by law, court order, or government regulation
  • Business Transfers: In connection with a merger, acquisition, or sale of assets
  • Protection of Rights: To protect our rights, property, or safety, or that of our users or others

All third-party service providers are contractually obligated to protect your data and use it only for the purposes we specify.

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. When we no longer need your data, we will securely delete or anonymize it.

Specific retention periods:

  • Contact information: Until you request deletion or withdraw consent
  • Booking information: 3 years after the last interaction
  • Financial records: 10 years as required by Romanian tax law
  • Website analytics: 26 months (Google Analytics default)

8. Your Rights Under GDPR

As a data subject, you have the following rights:

  • Right of Access: You can request access to your personal data and receive a copy
  • Right to Rectification: You can request correction of inaccurate or incomplete data
  • Right to Erasure: You can request deletion of your personal data ("right to be forgotten")
  • Right to Restrict Processing: You can request restriction of processing in certain circumstances
  • Right to Data Portability: You can request transfer of your data to another service provider
  • Right to Object: You can object to processing based on legitimate interests
  • Right to Withdraw Consent: You can withdraw consent at any time where processing is based on consent
  • Right to Lodge a Complaint: You can file a complaint with the Romanian Data Protection Authority (ANSPDCP)

To exercise these rights, please contact us at: [email protected]

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

  • Encryption of data in transit (SSL/TLS)
  • Secure data storage and access controls
  • Regular security assessments and updates
  • Employee training on data protection
  • Limited access to personal data on a need-to-know basis

However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

10. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your experience. You can control cookie preferences through your browser settings. For more information, please see our Cookie Policy.

11. International Data Transfers

Your data is primarily processed within the European Economic Area (EEA). If we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

12. Children's Privacy

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.

14. Contact Information

If you have questions, concerns, or wish to exercise your rights regarding this Privacy Policy, please contact us:

Blaga Razvan Antonio PFA

Email: [email protected]

Phone: +40 772 169 637

Data Protection Authority (ANSPDCP):
B-dul G-ral. Gheorghe Magheru 28-30
Sector 1, Bucharest, Romania
Website: www.dataprotection.ro