Effective Date: 01.03.2025

At ROMAO TRANDING S.R.L. (“we,” “us,” “our”), we prioritize your privacy and are committed to ensuring that your personal data is processed securely, transparently, and in compliance with applicable laws, including the General Data Protection Regulation (GDPR). This Privacy Policy explains how we collect, use, and protect your personal data when you interact with our website www.oanarotariu.com (the “Site”) or engage with our services.

This policy outlines the types of personal data we collect, how it is processed, stored, and shared, as well as your rights regarding your personal data.

Please read this Privacy Policy carefully to understand how your personal information will be handled.

1. Application of the Privacy Policy

This Privacy Policy applies to:

• Personal information you provide when using our website or services (e.g., booking a discovery call, filling out a contact form, purchasing resources).
• Personal data we collect through third-party services (e.g., Mailerlite, Stripe, Google Meet) used to facilitate services like payment processing, email marketing, and video coaching sessions.

By using the Site or engaging with our services, you consent to the collection and processing of your personal data as described in this Privacy Policy.

2. What is Personal Information?

Personal Information is any information that can identify you either directly or indirectly. This includes, but is not limited to:

• Your name, surname, and contact details (email, phone number, address).
• Answers to wellbeing-related questions, personal goals, or any other information shared during interactions with our services.
• Payment details, such as credit/debit card information, for purchases made through Stripe.

3. How, When, and Why Do We Collect and Use Personal Information?

We collect personal data when you:

• Book a discovery call
• Fill out contact forms on the Site
• Subscribe to receive resources (free PDFs or e-books)
• Make a purchase (e-books or coaching sessions)
• Register for coaching sessions or meetings via Google Meet

Types of personal data we collect:

• Contact information: Name, surname, email address, phone number, address.
• Interaction details: Responses to questions about your wellbeing and goals.
• Payment details: Information necessary for processing payments (processed securely via Stripe).

How We Use Your Information:

• To provide services: We use your data to book sessions, process payments, and send relevant resources.
• To personalize your experience: We may use your responses to personalize coaching sessions, providing better-targeted advice.
• To process payments: Payment information is securely processed via Stripe for resource purchases or coaching payments.
• For communication: To send marketing emails, newsletters, and promotional offers, provided you have opted in.

We will only use your personal data for the specific purposes outlined above, and only after obtaining your explicit consent where applicable (e.g., for email marketing).

4. How Do We Share Your Personal Information?

We respect your privacy and do not sell or rent your personal data to third parties. However, we share your data with trusted third-party service providers to facilitate the services we provide. These include:

• Stripe: To process payments securely.
• Mailerlite: For email marketing and sending newsletters, if you opt-in.
• Google Meet: For video coaching sessions.

These third-party providers are carefully selected and required to comply with strict data protection agreements, ensuring your data is processed securely.

We may also share your personal data if:

• We are required to comply with legal obligations (e.g., responding to a subpoena or legal request).
• We are involved in a corporate transaction (e.g., sale, merger, or transfer of assets).

5. International Transfers

If required, we may transfer your personal data to third-party service providers outside of the European Economic Area (EEA). For example, Stripe and Mailerlite may process data in jurisdictions that do not offer the same level of protection as those in the EEA. However, we ensure that any international transfers are safeguarded through appropriate measures such as Standard Contractual Clauses (SCCs).

6. Cookies

Our website uses cookies to enhance your experience, track website usage, and provide personalized services. For more details on how we use cookies and how you can manage your preferences, please refer to our [Cookie Policy].

7. How Long Do We Retain Your Personal Information?

We retain personal data for as long as necessary to fulfil the purposes outlined in this Privacy Policy or as required by applicable laws. After this period, we will securely erase or anonymize your personal data.

Specific retention periods:

• For coaching records: Data related to ongoing or completed coaching sessions will be retained for as long as we are providing services to you and for a reasonable period afterward for record-keeping.
• For financial transactions: Payment and purchase data will be retained for compliance with tax and accounting obligations.

8. Security of Your Personal Information

We take appropriate security measures to safeguard your personal data from unauthorized access, disclosure, alteration, and destruction. These measures include:

• Encryption of payment information during transactions via Stripe.
• Secure servers to store personal information.
• Access control and audit mechanisms to ensure only authorized personnel can access sensitive data.

Although we use industry-standard security measures, no online service is completely risk-free, and we cannot guarantee the absolute security of your information. However, we continuously review and improve our security practices to minimize risks.

9. GDPR Compliance

In compliance with the General Data Protection Regulation (GDPR), we are committed to processing your personal data transparently, securely, and in a lawful manner. The personal data we collect from you will only be processed for the purposes outlined in this Privacy Policy, and we ensure that we have a legal basis for processing your data.

Your Rights Under GDPR

As a user, you have the following rights regarding your personal data:

• Right to Access: You can request a copy of your personal data held by us.
• Right to Rectification: You can ask us to correct inaccurate or incomplete personal data.
• Right to Erasure: You may request that we delete your personal data if it is no longer necessary or if you withdraw your consent.
• Right to Restrict Processing: You can request the restriction of processing in certain circumstances.
• Right to Data Portability: You have the right to obtain your personal data in a structured, commonly used format and to transfer it to another provider.
• Right to Object: You may object to the processing of your personal data for specific purposes, including marketing.
• Right to Withdraw Consent: You can withdraw your consent at any time, where we rely on it for processing.

You can exercise these rights by contacting us at contact@oanarotariu.com.

Legal Basis for Processing Your Data

We process your personal data on the following legal grounds:

• Consent: Where you have given explicit consent (e.g., booking a call, subscribing to a newsletter).
• Contractual Necessity: To fulfil our contractual obligations, such as providing coaching services or processing payments.
• Legitimate Interests: To improve our services, marketing, and customer relationships.

How to Contact Us

If you have any questions or concerns regarding this Privacy Policy or wish to exercise your rights, please contact us at:

Email Address: contact@oanarotariu.com

We will generally respond to your request within one month. In complex cases, this period may be extended by up to two additional months. If you are not satisfied with our response, you can lodge a complaint with the relevant data protection authority.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, or legal obligations. When we make changes, we will post the updated policy on our website and update the effective date. Please review this policy regularly to stay informed about how we protect your data.