Privacy policy

Who the controller is

The controller of your data is ATELIERUL NEGRU SRL, tax ID 42681706, trade register number J40/6967/2020, with its office at Bucharest, Sector 1, 177 Durău Street, room 2, Romania. Write to us at contact@cristachenicoleta.com.

We process data under Regulation (EU) 2016/679 and Romanian Law no. 190/2018.

What we process

For the account and the order: your email address, the packs you bought, the amount, the date and the payment reference. For the VIP pack: your name, phone number and delivery address.

If you use the contact form, we keep your name, email and message. The consent cookie remembers your choice. Audience data is processed only if you accept analytics cookies.

We do not ask you for information about children. The packs are bought by adults, for family use.

Why we process it

To deliver the order, open your account and, for VIP, send the printed book. The basis is performance of the contract.

We keep order records for accounting and tax duties. Support messages and the defence of a complaint rely on legitimate interest. Analytics and marketing cookies rely on consent.

How long we keep it

Order records stay for the period required by accounting and tax law, usually 5 years. Access to the PDFs lasts while the account exists and the product is offered.

Contact messages are kept for up to 12 months. The cookie choice is kept for 6 months, then we ask again.

Who receives it

Stripe processes the payment. Supabase hosts the account, the orders and the files. Resend sends the emails. Vercel hosts the website. These providers may process data in the European Union or outside it. When data leaves the European Economic Area, the transfer uses standard contractual clauses or an adequacy decision, as applicable.

We do not sell your data, and we do not use it for third-party advertising without your agreement.

Your rights

You can ask for access, correction, deletion, restriction or portability, and you can object to a processing activity. You can withdraw cookie consent at any time from the cookie settings. Account deletion can be requested at contact@cristachenicoleta.com.

You can lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing, www.dataprotection.ro.

Security and cookies

We do not store the card number. Payment is processed by Stripe. PDFs stay in a private space, and download links expire.

Cookie details and Google Consent Mode are explained on the Cookies page.