Privacy Notice 

regarding the processing of personal data through website

The purpose of this Privacy Notice is to inform you about the processing of your personal data and your rights under the General Data Protection Regulation (known as GDPR) on website. website is offered by SC FACILITATING CHANGE SRL, based in Bucharest, 2nd District, Cap. Bulugea Gheorghe Street, Number 9, ground floor, apartment 2, registered with the Bucharest Trade Registry under number J40/17114/2021, tax code 45010039 („Company”).  

1. Personal data we process on our website

In accordance with GDPR, when you browse our website we act as Data Controller of the personal data we collect and process via the website. 

This website does not use cookies. We use the Yoast SEO plugin for SEO optimization. According to Yoast information about the plugin and their GDPR compliance guide, the Yoast plugins do not process, collect, or store any personal data at Yoast premises or servers. Every analysis performed is done on our website and none of our content is used by Yoast off-site. 

Your personal data might be processed in several ways through our website:

a. If you choose to use the contact form to contact us

In this situation, the data is collected directly from you (name/alias, e-mail address, message). 

The data you fill in will be sent to us through an e-mail. In this situation, your personal data is processed through the provider which hosts my website, GreenGeeks LLC and the company which provides my e-mail service, Proton AG. GreenGeeks LLC hosts our data in the United States. Proton AG hosts our data in the European Union.

The data that you send via the contact form is processed based on your and our legitimate interest, in order to respond to your request and to keep records of our correspondence.

We’ll store this type of personal data for a period of 3 years from the time of collection.  

According to the GDPR Regulation, the subsequent processing of personal data for historical, statistical or scientific purposes is compatible with the original purpose of the processing.

b) If you choose to subscribe to my newsletter with resources, musings, and news. 

In this case, the data is also collected directly from you. 

In order to receive the newsletter, you are required to introduce your name/alias and e-mail. We process this personal data solely for sending you the newsletter and only as long as you choose to subscribe to our newsletter. The legal ground on which we base such processing is your consent, expressed by subscribing.

You can withdraw your consent anytime by clicking the “unsubscribe button” which is inserted in the  e-mail alerts by which you are notified about the newsletter. 

For sending the newsletter alerts we use Flodesk services.  In this situation, your e-mail adress will be shared with Flodesk, a provider from the USA. Flodesk stores and processes personal data in data centres located outside the European Union.  According to their privacy policy and contractual obligations, Flodesk is GDPR compliant.  

c) Data collected as joint controllers

In the case of my Instagram professional account,  we collect your data only for normal interaction within the platform when: you subscribe to our/my page, if you leave us comments, like or write us a direct message. The data is collected together with Instagram, with which we are, according to GDPR legislation, joint controllers. 

We process your data on the basis of our legitimate interest consisting in keeping an account on Instagram, promoting my work and for communication.

The data is used to publish the comment or to be able to respond to the message you sent us. The data is kept until you withdraw your previously obtained consent through the social network or until you ask us to delete this information. 

My  account is created under the conditions imposed by the online platform. For more details about the processing of your data by Instagram and Linkedin, please read their data policy.

2. Disclosure of personal data

In accordance with the above purposes, your personal data will not be sold or rented to third parties.

We will share your personal data only to the extent necessary and only to the following categories of third parties:

  1. Entities which provide us services for hosting, maintaining and developing the website as designated above.
  2. Entities which provide us legal, accounting or other consulting services.
  3. Public authorities and institutions, if we have a legal obligation to disclose them.
  4. We may disclose your personal data to third parties:
  • If you request or consent to this; 
  • If those people can demonstrate that they have the legal authority to act on your behalf;
  • If we have a legitimate interest to administer, expand or develop our business: in the event that the Company or a substantial part of the Cpmany’’s assets is acquired by a third party, and the personal data held by us will be part of the transferred assets; 
  • In order to respond to any claims, to protect the rights of a third party, to protect the safety of any person or to prevent any illegal activity; 
  • In order to protect the rights of the Company or our employees and customers, as well as others.


3. Transfer of personal data outside the Economic European Area

The personal data may be processed by our processors operating outside the Economic European Area (EU, Iceland, Norway and Liechtenstein), for the purposes mentioned in Section 1. Whenever your personal data is provided to entities outside the EEA, we will take appropriate measures to ensure that this transfer is in accordance with GDPR.

4. Security

We take organisational and technical measures like encryption, passwords for access to our systems and built-in security features for our computers.

5. Your rights and how do we respect them 

Personal data legislation gives you a number of rights in relation to your data; please find below details about your rights and how you can exercise them:

  • Right to access – you have the right to request information about your personal data that we process, including the purpose of the processing, if and with whom it is shared and how long it will be kept.
  • Right to rectification – if your processed data is inaccurate, you have the right to obtain their rectification or completion. 
  • Right to erasure (“the right to be forgotten”) – you have the right to ask us to delete data we process about you, except in the case where the data is necessary for us: to exercise the right to free expression and information; for compliance with our legal obligations; for archiving purpose in the public interest, for scientific purpose, historical or statistical research; for establishing, exercising or defending a right in court. 
  • Right to restriction – you can request the restriction of the processing of your personal data if: you dispute the correctness of the data, for the period in which we verify the accuracy of the respective data; the processing is illegal and you object to the deletion of your personal data, requesting instead the restriction; the data are no longer necessary for us to process, but you request them to establish, exercise or defend a right in court; you have objected to the processing, for the period of time in which we check whether our legitimate rights prevail over your rights. 
  • Right to data portability – you have the right to receive your personal data from us if you have previously provided it to us in a structured, machine-readable form. You also have the right to ask us to transfer your data to another data controller. 
  • Right to object – you have the right to object at any time, given your particular situation, to the processing of your data if we are processing it on the basis of our legitimate interests or the legitimate interests of a third party. In such a situation, we will no longer process your data with the following exceptions: (i) if we can demonstrate legitimate grounds and an interest that prevails over your interests, rights and freedoms and (ii) if the purpose of the processing is to establish, exercise or defend a right in court.
  • Right to withdraw your consent – if your personal data is processed based on your consent (e.g. subscribing to the newsletter), you can withdraw your consent at any time. 
  • Right to lodge a complaint to the National Data Protection Authority. 

Please contact us directly if you have any complaints about the way in which we process your personal data. To send us any requests or complaints, please write a message in the contact form available on the website. 

We will inform you, within one month of receiving your request, about the actions taken. This term can be extended to two months when necessary, taking into account the complexity, the number of applications or the impossibility of identifying the applicant. If we are not able to identify you, we will inform you and give you the chance to give us additional details in order to identify you.

If the deadline is extended, you will be informed within a month of the first request, also presenting the reasons for the delay. If we do not resolve your request affirmatively, we will inform you about this within a maximum of one month after receiving the request, regarding the reasons why we did not take measures and the possibility to lodge a complaint to the National Data Protection Authority or to the national court.

As a result of legal restrictions, in certain situations, we may not be able to give you access to all or some of your personal data. If we deny your request, we will inform you about the reason for refusal.

For more details regarding how to lodge a complaint to the Romanian Data Protection Authority please access the following link:

6. What can happen if you do not wish to transmit your personal data to us? 

In most cases, you do not have to provide us with your personal data. However, there are situations in which, without additional data, we cannot resolve your request. Also, if you do not provide us with this data, it will not be possible for us to provide you our services.

7. Further processing of personal data

We use your personal data only for the purpose for which it was collected. According to the GDPR, the further processing of personal data for historical, statistical or scientific purposes is compatible with the initial purpose of processing.

8. Absence of automated decision-making process

As a user of our website, you will not be subject to a decision based exclusively on the automatic processing of your data without any human involvment.

9. Changes to this privacy notice

This Privacy Notice may change from time to time. Changes are in force from the moment they are placed on the website. Each time your consent is required, we will inform you. We therefore recommend that you consult the Privacy Notice each time you use the website. This version of the Privacy Notice is stored at Privacy Notice.


Version 1 – in force since December 7, 2022