Legal — Privacy
Privacy Policy
Last updated: January 2026 — Revision 01-A
1. Data Controller
The data controller for this website is Falenza, a nutritional consultancy operating from Strada Cuza Voda nr. 38, Sector 4, 040273 Bucharest, Romania. For data-related enquiries, contact us at [email protected] or by telephone at +40 21 528 6940.
This policy applies to personal data collected through the website at falenza.info, through direct contact by phone or email, and through the consultancy intake process.
2. Data We Collect
We collect personal data in the following circumstances:
- Contact form submissions: name, email address, selected consultation type, and the message content you provide.
- Consultation intake records: dietary log data, food preference documentation, and activity-level information provided as part of a consultancy programme.
- Technical data: IP address, browser type, pages visited, and time of visit — collected automatically via server logs and analytics tools.
- Cookie data: functional, analytical, and optional preference cookies as described in our Cookie Policy.
We do not collect identity documents, payment card data through this website, or data relating to minors under 16 years of age.
3. Legal Basis and Purpose
We process personal data on the following legal bases under the EU General Data Protection Regulation (GDPR) and Romanian Law 190/2018:
Contractual performance
Processing necessary to provide the consultancy service you have requested, including intake documentation, seasonal food plan delivery, and follow-up session records.
Legitimate interests
Processing of technical data (server logs, analytics) to maintain the security and performance of this website. We balance this interest against your data protection rights.
Consent
Processing via non-essential cookies (analytical, preference) where you have given explicit consent through the cookie consent interface. Consent may be withdrawn at any time.
Legal obligation
Where Romanian law requires us to retain certain records for statutory periods, we process data on this basis.
4. Data Retention
Consultation programme records — including intake documentation, dietary logs, seasonal food plans, and follow-up notes — are retained for a period of five years following the conclusion of the programme. This period reflects standard practice for nutritional consultancy documentation and aligns with Romanian statutory record-keeping requirements for service providers.
Contact form submissions are retained for twelve months unless a consultancy relationship begins, in which case the data is incorporated into the programme archive and held for the five-year retention period.
Technical server log data is retained for up to 90 days and then deleted automatically. Analytical data collected with consent is retained in anonymised aggregate form for up to 24 months.
5. Data Sharing
Falenza does not sell, rent, or trade personal data to third parties. Data is shared only in the following limited circumstances:
- Hosting provider: the web hosting provider processes server log data as part of standard hosting operations. This provider is contractually bound to data processing terms aligned with GDPR.
- Analytics service: anonymised usage data is processed by a third-party analytics provider where consent has been granted. No personally identifiable data is transmitted.
- Legal requirement: we may disclose personal data if required to do so by a Romanian court order or applicable regulatory authority.
6. Your Rights
Under GDPR and applicable Romanian data protection law, you have the following rights regarding your personal data:
Right of access
Request a copy of the personal data we hold about you.
Right to rectification
Request correction of inaccurate or incomplete data.
Right to erasure
Request deletion of your data where no legal basis for retention applies.
Right to restriction
Request that we restrict the processing of your data in certain circumstances.
Right to portability
Receive your data in a structured, machine-readable format for transfer to another service.
Right to object
Object to processing based on legitimate interests or direct contact.
To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) at www.dataprotection.ro.
7. Data Security
Falenza implements appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or loss. The website operates over HTTPS (TLS encryption). Consultation records held in the practice archive are stored in access-controlled systems with restricted access limited to the specialist and necessary administrative staff.
No data transmission over the internet can be guaranteed to be entirely secure. In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the ANSPDCP within 72 hours and inform affected individuals without undue delay.
8. Cookies
This website uses cookies as described in our Cookie Policy. Functional cookies are placed automatically as they are necessary for the website to operate. Analytical and preference cookies are placed only with your consent, which you may provide or withdraw through the cookie consent interface at any time.
9. Changes to This Policy
This privacy policy is reviewed and updated periodically. Material changes will be noted with a new revision date at the top of this page. Continued use of this website after a policy update constitutes acknowledgment of the revised terms.
For any questions about this policy, contact us at [email protected] or write to: Falenza, Strada Cuza Voda nr. 38, Sector 4, 040273 Bucharest, Romania.
Related Documents