Privacy policy

Last updated: 11 November 2026

This privacy policy describes how your personal information is collected, used and protected when you visit cristinapaulamarin.com (the “Website”).

1. Data controller

Cristina Paula Marin
E-mail: cristinamarin@mac.com
Phone: +40 722 438 781

2. What data we collect

2.1. Data collected automatically

• IP address (anonymised), browser type and operating system;
• pages visited, time spent on the site, links clicked;
• device type and screen resolution.

2.2. Data you provide voluntarily (contact form)

• name and surname;
• e-mail address;
• the content of your message.

3. How we use the data

• operating and securing the Website;
• improving the content and the user experience;
• anonymous statistical analysis;
• replying to your requests;
• legal compliance.

4. Cookies

Cookies are small text files stored on your device.

• Essential cookies: cookie_consent – remembers your choice in the cookie banner (365 days); accessibility settings are stored locally in your browser.
• Analytics cookies (optional): Google Analytics (_ga, _gid, _gat) – anonymous visitor statistics, with IP anonymisation. They are enabled only if you accept them in the cookie banner.

You can change your choice at any time in your browser settings (by deleting the cookie_consent cookie) or with the Google Analytics opt-out add-on.

5. Legal basis (GDPR)

• Legitimate interest – for operating and securing the Website and for anonymous statistics (Art. 6(1)(f) GDPR);
• Consent – when you send us a message through the contact form (Art. 6(1)(a) GDPR);
• Legal obligation – for retaining certain data as required by law (Art. 6(1)(c) GDPR).

6. Sharing of data

We do not sell, rent or share your personal data with third parties, except for:

• Google Analytics – for statistical analysis (anonymised data);
• public authorities – where required by law;
• service providers that help us operate the Website (hosting, e-mail), under confidentiality agreements.

7. International data transfers

Some of the services we use (such as Google Analytics) may transfer data outside the European Union. Such transfers are protected by standard contractual clauses approved by the European Commission, adequacy decisions and additional security measures.

8. Retention period

• Google Analytics: 26 months (default setting);
• contact data: until your request is resolved, plus 3 years for legal compliance.

9. Your rights

Under the GDPR you have the right of access, rectification, erasure (“right to be forgotten”), restriction of processing, data portability, objection, withdrawal of consent at any time, and the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP).

10. Data security

• secure HTTPS connection;
• regular security updates;
• restricted access to personal data;
• regular backups.

11. Links to other websites

The Website may contain links to other websites (online bookshops, YouTube, social networks). We are not responsible for their privacy practices; we recommend that you read their privacy policies.

12. Minors

The Website is not intended for children under 16 and we do not knowingly collect personal data from them. If you become aware that a child has provided us with personal data, please contact us.

13. Changes to this policy

This policy may be updated. Any change will be published on this page, with the date of the update.

14. Contact