Andriciuc, Smaranda-Maria · Business & Financial Strategy
Privacy Policy
Compliant with EU Regulation 2016/679 (GDPR) and Belgian Law of 30 July 2018
01
Who is the data controller
Controller identification details
Andriciuc, Smaranda-Maria is a Belgian sole trader providing financial coaching and business consulting services, delivered exclusively online. The controller processes personal data as an independent data controller, in compliance with EU Regulation 2016/679 (GDPR), the Belgian Law of 30 July 2018 on the protection of natural persons with regard to the processing of personal data, the Belgian Code of Economic Law (WER/CEL), and any other applicable regulation in force.
02
What data we collect
Depending on how you interact with our platform, we may collect the following categories of personal data:
Categories of data processed
We do not collect special categories of data (health data, religious beliefs, ethnic origin, etc.) and we do not request such information. If a data subject voluntarily provides such data during sessions, the processing is based exclusively on their explicit consent, in accordance with Art. 9(2)(a) GDPR.
03
Purposes and legal basis
Each processing of personal data has a specific purpose and an explicit legal basis, in accordance with Art. 6 GDPR. The complete table is presented below:
| Purpose | Data involved | Legal basis (Art. 6 GDPR) |
|---|---|---|
| Providing coaching and consulting services | Identification, professional, general financial | Performance of contract — Art. 6(1)(b) |
| Responding to contact requests and enquiries | Identification, communication | Consent — Art. 6(1)(a) or legitimate interest — Art. 6(1)(f) |
| Managing appointments and online sessions | Identification, technical data (video platforms) | Performance of contract — Art. 6(1)(b) |
| Sending newsletters or marketing communications | Email address, preferences | Explicit and revocable consent — Art. 6(1)(a) |
| Fulfilling legal obligations (invoicing, accounting) | Identification, billing data | Legal obligation — Art. 6(1)(c) |
| Statistical analysis and website improvement | Technical data (anonymous IP, site behaviour) | Legitimate interest — Art. 6(1)(f) |
04
How long we retain data
Personal data is retained for the period strictly necessary for the purpose for which it was collected, in accordance with the storage limitation principle (Art. 5(1)(e) GDPR):
Retention periods
Upon expiry of the retention period, data is securely deleted or irreversibly anonymised so that it can no longer be associated with an identifiable person.
05
Who we share data with
Your personal data is not sold, rented or traded to third parties. Access to data is limited to the persons and entities strictly necessary for the provision of services:
Categories of recipients
06
International data transfers
Some of the platforms used (e.g. Google Meet, Mailchimp) may involve the transfer of data outside the European Economic Area (EEA), including to the United States of America.
These transfers are carried out exclusively on the basis of appropriate safeguards, in accordance with Chapter V of GDPR, in particular:
Transfer mechanisms used
You may request additional information about the safeguards applied for each provider by contacting the controller at the email address indicated above.
07
Your rights as a data subject
In accordance with EU Regulation 2016/679, you benefit from the following rights, which you may exercise at any time, free of charge, by sending an email to the controller's address:
Art. 15 GDPR
Right of access
You may request a copy of the personal data we hold about you and information about how we process it.
Art. 16 GDPR
Right to rectification
You may request the correction of inaccurate data or the completion of incomplete data concerning you.
Art. 17 GDPR
Right to erasure
You may request the deletion of your data under the conditions provided by law (e.g. withdrawal of consent, data no longer necessary).
Art. 18 GDPR
Right to restriction
You may request the restriction of processing of your data in certain situations provided for by GDPR.
Art. 20 GDPR
Right to portability
You may receive data provided on the basis of contract or consent, in a structured and machine-readable format.
Art. 21 GDPR
Right to object
You may object to processing based on the controller's legitimate interest or to direct marketing, at any time.
Art. 22 GDPR
Automated decision-making
We do not use automated profiling or decisions with legal effects based solely on automated processing.
Art. 7(3) GDPR
Withdrawal of consent
Where processing is based on your consent, you may withdraw it at any time, without consequences for your rights.
If you believe your rights have been violated, you have the right to lodge a complaint with:
Competent supervisory authority
09
Data concerning minors
The services of Andriciuc, Smaranda-Maria are addressed exclusively to persons aged at least 18 years. We do not knowingly collect or process personal data of minors.
If a minor provides us with personal data without the knowledge of a legal guardian, please contact us immediately. We will delete such data without undue delay, in accordance with Art. 8 GDPR and applicable Belgian law.
10
Changes to this policy
The controller reserves the right to periodically update this privacy policy to reflect legislative changes, technological developments or evolutions in the services offered.
The updated version will be published on this page, with the date of the last update indicated. In the case of material changes affecting the rights of data subjects, we will send a notification by email (for users with a newsletter subscription), at least 30 days before the new provisions come into force.
Continued use of the website or our services after the publication of updates constitutes acceptance of the revised version, to the extent permitted by law.
Questions about your data?
We are available for any request related to your GDPR rights.
📧 smaranda.andriciuc@gmail.com
Response time: maximum 30 calendar days
Andriciuc, Smaranda-Maria · Kievitlaan 5, Bornem 2880, Belgium · Compliant with GDPR (EU) 2016/679 & Belgian Law of 30 July 2018