Privacy Policy

The controller of your personal data is Ionuț Rizea, personal trainer and online coach, operating in Romania.

• Email for personal data matters: rizeaionutir@gmail.com
• Phone: 0762042992

Through the coaching application form:

• first and last name;
• email address;
• phone number;
• your goal and the message you write.

If you choose to sign up for an offer, we collect your email address. During the collaboration, in order to personalize your plan, data regarding weight, measurements, activity level, dietary habits and, only if you choose to share it, health-related information may also be processed. The latter constitutes special category data, processed exclusively based on your explicit consent, in accordance with art. 9(2)(a) GDPR, and may be withdrawn at any time.

Automatically, when visiting the website, technical data may be processed: IP address, device type, browser and pages visited, for security and proper functioning purposes.

• Assessing your application and contacting you, legal basis: pre-contractual measures at your request, art. 6(1)(b) GDPR.
• Providing the coaching services, legal basis: performance of the contract, art. 6(1)(b) GDPR.
• Sending offers, discounts or informational content, legal basis: your consent, art. 6(1)(a) GDPR, revocable at any time.
• Issuing tax documents and keeping accounting records, legal basis: legal obligation, art. 6(1)(c) GDPR.
• Website security and abuse prevention, legal basis: legitimate interest, art. 6(1)(f) GDPR.
• Publishing testimonials or before-and-after photos, legal basis: your explicit, separate and revocable consent. No image or personal story is published without your written agreement.

Data is not sold and is not shared for the marketing purposes of other companies. It may only be accessed by the following categories of recipients, strictly within the purpose:

• the website's and database's hosting and infrastructure provider;
• the messaging service provider used for communication, when you choose to continue the conversation on WhatsApp;
• the accountant and, where applicable, public authorities, based on legal obligations.

Some providers may process data outside the European Economic Area. In this case, transfers are carried out based on the standard contractual clauses approved by the European Commission or an adequacy decision.

• applications that do not turn into a collaboration: a maximum of 12 months from the last interaction;
• active clients' data: for the duration of the collaboration and 3 years after its completion;
• financial and accounting documents: 10 years, in accordance with Accounting Law no. 82/1991;
• data processed based on consent: until consent is withdrawn.

The website uses a minimal number of cookies and local storage technologies, strictly necessary for its operation, for example to remember that an offer has already been shown to you once. These technologies do not require consent, in accordance with Law no. 506/2004.

If analytics or marketing cookies are introduced, they will only be activated after obtaining your consent, through a dedicated banner. You can delete or block cookies at any time from your browser settings.

Under the GDPR, you have the following rights:

• the right to access your data;
• the right to rectification of inaccurate data;
• the right to erasure of data, the right to be forgotten;
• the right to restriction of processing;
• the right to data portability;
• the right to object to processing based on legitimate interest;
• the right to withdraw consent at any time, without affecting prior processing;
• the right not to be subject to a decision based solely on automated processing, including profiling.

You can exercise these rights by email at rizeaionutir@gmail.com. You will receive a response within a maximum of 30 days.

Data is transmitted encrypted via HTTPS and stored in a database with restricted access, protected by row-level security policies. Access is strictly limited to persons who need this information. The form is protected against automated submissions. However, no method of online transmission is 100% secure.

The services are intended exclusively for persons over 18 years of age. We do not intentionally collect data from minors. If a parent or guardian becomes aware of such a situation, they may request the immediate deletion of the data.

If you believe your rights have been violated, you may contact the Romanian National Supervisory Authority for Personal Data Processing, B-dul G-ral. Gheorghe Magheru no. 28-30, sector 1, Bucharest, dataprotection.ro, or the competent courts of law.

This policy may be updated periodically. Any significant change is signaled by updating the date shown at the top of the page. We invite you to review it from time to time.