Privacy Policy.
This policy explains how Georgiana Gogolan ("we", "us") collects, uses and protects personal data on georgianagogolan.com, in accordance with the EU General Data Protection Regulation (GDPR) and applicable Romanian data-protection law.
1. Who is responsible for your data?
Data controller: Georgiana Gogolan
Email: [email protected]
Location: Bucharest, Romania
2. What data we collect and why
Newsletter / Journal subscriptions
- Data collected: email address; the fact that you gave consent (timestamp recorded by our form processor).
- Purpose: to send you design updates, event journals and project stories.
- Legal basis: your freely given, specific and informed consent (GDPR Art. 6(1)(a)). You can withdraw consent at any time (see section 5).
Contact / project enquiry form
- Data collected: name, email address, project type, message.
- Purpose: to respond to your enquiry and discuss a potential project.
- Legal basis: pre-contractual steps taken at your request (GDPR Art. 6(1)(b)) and our legitimate interest in responding to enquiries (Art. 6(1)(f)).
What we do not collect
We do not use cookies for tracking or analytics. We do not collect payment data. We do not build advertising profiles.
3. Who processes your data (third parties)
We use Formspree, Inc. to receive form submissions. Formspree acts as a data processor on our behalf. When you submit a form, your data is transmitted to and temporarily stored on Formspree's servers.
- Formspree privacy policy: formspree.io/legal/privacy-policy
- Formspree is GDPR-aware and offers a Data Processing Agreement (DPA) to paying customers. We have accepted Formspree's data processing terms.
- Formspree may store data on servers located in the United States. Where applicable, transfers are covered by Standard Contractual Clauses (SCCs) or equivalent safeguards.
No other third parties receive your personal data. We do not sell your data.
4. How long we keep your data
- Newsletter subscribers: until you unsubscribe or request deletion.
- Contact enquiries: up to 2 years from the date of last contact, or shorter if the enquiry does not lead to a project.
After the retention period, data is deleted or anonymised.
5. Your rights
Under the GDPR you have the right to:
- Access — request a copy of the personal data we hold about you.
- Rectification — ask us to correct inaccurate data.
- Erasure ("right to be forgotten") — ask us to delete your data.
- Restriction — ask us to limit how we use your data.
- Portability — receive your data in a structured, machine-readable format.
- Object — object to processing based on legitimate interest.
- Withdraw consent — unsubscribe from the newsletter at any time by clicking the unsubscribe link in any email we send, or by emailing us directly. Withdrawal does not affect the lawfulness of processing before withdrawal.
To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.
6. Right to complain
If you believe your data has been processed unlawfully, you have the right to lodge a complaint with the Romanian supervisory authority:
Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP)
www.dataprotection.ro
7. Links to other websites
Our site may contain links to third-party websites (Instagram, YouTube, LinkedIn, TikTok). We are not responsible for their privacy practices. Please review their individual privacy policies.
8. Changes to this policy
We may update this policy from time to time. The "Last updated" date at the top will reflect any changes. Significant changes will be communicated via the journal or by email where we have your address.
Questions? Contact us at [email protected].