Privacy Policy.

We respect visitors' privacy and process personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and applicable Romanian law (Law no. 190/2018).

1. Data controller

The controller of personal data is Alexandru Anastasiu (a natural person).

• Contact email: office@alexandruanastasiu.com
• Correspondence address (professional): Transilvania University, Faculty of Music, Brașov, Romania

2. What data we collect

• Data submitted through the contact form: name, email address, message subject and content.
• Newsletter data (if you subscribe): your email address.
• Technical data: information collected automatically by the hosting server (IP address, browser type, access logs) and through strictly necessary cookies — see the Cookie Policy.

We do not intentionally collect special categories of data (sensitive data) and we do not use profiling or automated decisions with legal effects.

3. Purposes and legal basis for processing

• Responding to enquiries (contact form) — basis: our legitimate interest in communicating with people who contact us (Art. 6(1)(f)) and/or steps prior to a possible collaboration.
• Sending the newsletter — basis: your consent (Art. 6(1)(a)), which you may withdraw at any time.
• Operation and security of the site — basis: our legitimate interest in keeping the site secure and functional (Art. 6(1)(f)).

4. How long we keep data

Messages sent through the form are kept for as long as necessary to respond and for any subsequent collaboration, then deleted. Newsletter data is kept until you unsubscribe. Technical logs are kept for limited periods, in line with the hosting provider's practices.

5. Who we share data with

We do not sell or rent personal data. We may disclose it only to:

• providers who help us operate the site (web hosting, email services), processing data on our behalf under contract;
• public authorities, where required by law.

Transfers to third parties: the site loads web fonts via the Google Fonts service; when pages are displayed, your IP address may be transmitted to Google's servers. These services may involve transfers outside the European Economic Area, subject to the safeguards provided by the GDPR.

6. Your rights

As a data subject, you have the following rights under the GDPR:

• the right of access to your data;
• the right to rectification of inaccurate data;
• the right to erasure ("the right to be forgotten");
• the right to restriction of processing;
• the right to data portability;
• the right to object to processing based on legitimate interest;
• the right to withdraw consent at any time (for example, for the newsletter).

To exercise these rights, write to us at office@alexandruanastasiu.com. You also have the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) — dataprotection.ro.

7. Data security

We apply reasonable technical and organisational measures to protect data against unauthorised access, loss or disclosure.

8. Children

The site is not directed at children and we do not knowingly collect data from anyone under the age of 16.

9. Changes to this policy

We may update this policy. The version in force is the one published on this page, with the date of the latest update shown above.

10. Contact

For any question about data processing: office@alexandruanastasiu.com.