Privacy policy
Last updated: 15 August 2026
This policy explains how personal data is processed through the Andreea Ilinca website and describes your rights under the General Data Protection Regulation (GDPR).
1. Data controller
The data controller is:
Ilinca Andreea PFA
CUI: 51289060
Str. Mihai Viteazul no. 6, Brasov, Romania
Email: andreea.gheorghe.bv@gmail.com
2. Data we process
The website has no contact form, newsletter, user accounts, or online payments. Depending on how you use the website, the following data may be processed:
- technical data transmitted automatically by your browser and server, such as IP address, access date and time, and device information;
- your consent preference for Google Analytics;
- statistical data about website visits, only after analytics cookies are accepted.
3. Purposes and legal bases
Technical data may be processed for website operation, security, and diagnostics, based on the operator's legitimate interest under Article 6(1)(f) GDPR.
Google Analytics is used for statistics and website improvement only after consent, based on Article 6(1)(a) GDPR. You may refuse or withdraw consent without losing access to the website.
4. Google Analytics
After analytics consent is given, the website uses Google Analytics, provided by Google Ireland Limited and, where applicable, other Google entities involved in delivering the service. Google Analytics may use cookies such as _ga and _ga_* to measure visits and interactions.
More information is available in Google's Privacy Policy. Data may be processed outside the European Economic Area under applicable law and the transfer mechanisms used by Google.
5. External services
The website contains links to external services such as MERO, Instagram, Scissorsnest, and Google Maps. When you follow these links, you leave this website and become subject to the policies of the relevant providers. The website does not automatically receive data entered into those services.
6. Data retention
We retain data only for as long as necessary for the purposes described above, website security, and legal obligations. The exact retention period for technical logs may depend on the hosting provider. Google Analytics data is retained according to the service settings and Google's policies.
7. Your rights
Under the GDPR, you may have the right to request access, rectification, erasure, restriction of processing, data portability, and to object to processing based on legitimate interest. Where processing is based on consent, you may withdraw it at any time for the future.
To exercise your rights, email andreea.gheorghe.bv@gmail.com. You may also lodge a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP).
8. Policy updates
We may update this policy when website functionality, services, or legal requirements change. The current version will be published on this page.