Legal

Data protection (GDPR)

Last updated: 31 October 2026 · This is a translation; in case of differences, the Romanian version prevails.

We treat your data with the same care we'd want for our own. We collect only what's necessary, only for a clear purpose, and we never sell it.

1. Data controller

HUMAN MARKETING S.R.L., Bucharest, 21A Băiculești St., J40/5486/2017, VAT ID 37409994, email salut@andreeaorindaru.ro, phone +40 721 326 957. We process data under Regulation (EU) 2016/679 (“GDPR”) and applicable Romanian law.

2. What data we collect and why

Situation	Data	Purpose	Legal basis
You order the book	name, email, phone, delivery address, invoicing details (optional), dedication and notes (optional)	processing the order, delivery, invoicing, communication about the order	performance of a contract (Art. 6(1)(b)) and legal accounting and tax obligations (Art. 6(1)(c))
You write to us via the contact form or email	name, email, phone (optional), message content	replying to you and, if you wish, discussing working together	your consent (Art. 6(1)(a)) and steps prior to a contract (Art. 6(1)(b))
You visit the website	technical data logged automatically by the hosting server (IP address, browser type, page accessed, date and time)	security and operation of the website	legitimate interest (Art. 6(1)(f))

The website does not use cookies, traffic analytics or tracking pixels.

3. How long we keep data

order and invoice data: as long as accounting law requires (currently 5 years for supporting documents and 10 years for ledgers);
messages sent through the contact form: up to 2 years from our last communication, unless we start working together;
technical server logs: according to the hosting provider's settings, usually a few weeks.

4. Who we share data with

We don't sell or rent your data. We share it only as strictly necessary:

with the courier company, for delivery (name, phone, address);
with our accountant, for financial records;
with our web and email hosting providers, who store the data technically;
with authorities, only when the law requires it.

We don't transfer data outside the European Economic Area, except where a technical provider does so with the safeguards required by the GDPR.

5. Your rights

You have the right:

to know what data we hold about you (right of access);
to have it corrected (right to rectification);
to have it erased (“right to be forgotten”), within the limits of the law;
to restrict processing;
to receive your data in a structured format (right to data portability);
to object to processing based on legitimate interest;
to withdraw your consent at any time, without affecting earlier processing;
to complain to the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP), dataprotection.ro.

To exercise any of these rights, write to us at salut@andreeaorindaru.ro. We reply within one month; in complex cases this may be extended by two more months, and we'll let you know.

6. Security

The website uses an encrypted connection (HTTPS), and access to your data is limited to the people who need it to process your order or reply to you.

7. Children

The website is not aimed at people under 16, and we do not knowingly collect their data.

8. Changes

We may update this policy; the version in force is always the one on this page.