Privacy Notice
Last updated: 31 August 2026. This notice describes how personal data is processed under the EU General Data Protection Regulation (GDPR).
1. Controller
IACOBESCU ALEXANDRU-CIPRIAN Persoană Fizică Autorizată (PFA), Romania, is the data controller for the processing described here. Contact: [email protected].
2. What data, and why
| Data | Purpose | Legal basis |
|---|---|---|
| Name, email, company and role (booking form) | Scheduling, delivering the session and memo, correspondence | Performance of a contract (art. 6(1)(b)) |
| Intake answers (your system, constraints, cost of failure, attachments) | Preparing and delivering the session and memo | Performance of a contract (art. 6(1)(b)) |
| Session recording | Producing the written memo | Consent given at booking (art. 6(1)(a)); withdrawable at any time |
| Billing and fiscal details (name, address, VAT/CUI where given) | Issuing the legal invoice, tax compliance (including e-Factura for Romanian clients) | Legal obligation (art. 6(1)(c), Romanian fiscal law) |
| Anonymized case-study material | Public content about real problems | Consent via the separate opt-in at booking (art. 6(1)(a)) |
Payment card data is handled entirely by Stripe; I never see or store card numbers. This site itself sets no cookies and runs no trackers of mine; analytics are Cloudflare Web Analytics, which is cookie-free. The embedded Cal.com booking widget is operated by Cal.com and may use its own cookies under its own policy.
3. Processors and recipients
Data is shared only with the service providers needed to deliver the service: Cal.com (scheduling and booking forms), Stripe (payments), Cloudflare (site hosting and analytics), the video-call provider shown in your booking (Cal Video or Google Meet), SOLO (accounting and invoicing, Romania), and my email provider. Some providers process data outside the EEA; where they do, transfers rely on adequacy decisions or EU standard contractual clauses as published in each provider's data-processing terms. Data goes to public authorities only where the law requires it (for example invoice data to ANAF through e-Factura).
4. Retention
- Session recordings: deleted once the memo is delivered, at the latest 30 days after the session.
- Intake material and memos: kept for the duration of our engagement and up to 3 years after, in case of follow-up questions or disputes, then deleted.
- Invoices and fiscal records: 10 years, as Romanian fiscal law requires.
- Correspondence: up to 3 years after the last exchange.
5. Your rights
You have the right to access, rectify, and erase your data, to restrict or object to processing, to data portability, and to withdraw any consent without affecting processing done before the withdrawal. Write to [email protected] and I will answer within one month. You can also complain to the Romanian supervisory authority, ANSPDCP (dataprotection.ro), or to the authority of your own EU member state.
6. Changes
If this notice changes in a way that affects you after booking, I will tell you by email.