Privacy Policy
Website: catalinivana.com · Last updated: June 2026 · Operator: Catalin Ivana, Romania, European Union
This Privacy Policy explains how Catalin Ivana collects, uses, stores, and protects your personal datawhen you visit catalinivana.com or interact with any form or resource on this website. As an operatorbased in the European Union, this policy is written in compliance with the General Data ProtectionRegulation (GDPR - Regulation EU 2016/679).
1. Who Is Responsible for Your Data
The data controller for this website is: Catalin Ivana - Business Automation AdvisorRomania, European Union
Email: hello@catalinivana.com
Website: catalinivana.com
As data controller, I determine why and how your personal data is processed. I do not appoint aformal Data Protection Officer (DPO) as this is not required for individual operators of this scaleunder GDPR Article 37.
2. What Data I Collect and Why
I only collect data that is necessary for a specific, stated purpose. The table below outlines exactlywhat I collect, why, and the legal basis under GDPR.
Data Collected
First name, email address
First name, email address,answers to applicationquestions
Email address (marketingopt-in)
Technical data (IP address,browser type, pages visited)
Purpose
To deliver the free Automation Starter Mapand send occasional advisory content youopted into
To review your application for a freeadvisory session and contact you regardingthe outcome
To send free automation advice, updates,and relevant content where you haveexplicitly opted in
Basic website analytics to understand howthe site is used and improve the visitorexperience
Legal Basis(GDPR)
Consent - Article6(1)(a)
Consent - Article6(1)(a)
Consent - Article6(1)(a)
Legitimate interest - Article 6(1)(f)
I do not collect sensitive personal data (as defined under GDPR Article 9) and I do not makeautomated decisions or use profiling based on your data.
3. How I Collect Your Data
Data is collected through the following mechanisms on this website:
Opt-in forms - when you submit your name and email to download the free Automation StarterMap
Application forms - when you apply for a free advisory session and voluntarily provideinformation about your business and challenges
Cookies and tracking - basic analytics data collected automatically when you visit the site (seeSection 7)
I do not purchase data, receive data from third-party brokers, or collect data from any source otherthan direct interaction with this website.
4. How Long I Keep Your Data
I apply the principle of data minimisation and do not retain personal data longer than necessary:
Email subscribers - retained for as long as you remain an active subscriber. If youunsubscribe, your data is removed from active marketing lists within 30 days. You may requestfull deletion at any time.
Session applicants - application data is retained for 12 months from the date of submission,after which it is deleted unless an ongoing advisory relationship exists.
Technical/analytics data - retained in aggregated, anonymised form only. No individuallyidentifiable technical data is stored beyond 90 days.
5. Who Has Access to Your Data
I do not sell, rent, trade, or share your personal data with third parties for their own commercialpurposes under any circumstances.
Your data may be processed by the following third-party service providers acting as data processorson my behalf:
Systeme.io - website, funnel, and email platform where contact data and form submissions arestored. Systeme.io operates under its own Privacy Policy and GDPR compliance framework.
Google Workspace - professional email service used to communicate with applicants andsubscribers. Google's data processing terms apply.
Stripe (future Phase 2 only) - payment processing for paid advisory sessions. No payment datais stored by me directly.
All third-party processors I work with are required to handle your data in accordance with GDPR. Ido not transfer your data outside the European Economic Area (EEA) without appropriate safeguardsin place.
6. Your Rights Under GDPR
As a data subject under GDPR, you have the following rights, which I am committed to honouringwithout undue delay and within 30 days of a valid request:
Right of access (Article 15) - you can request a copy of the personal data I hold about you
Right to rectification (Article 16) - you can ask me to correct inaccurate or incomplete data
Right to erasure (Article 17) - you can ask me to delete your personal data ("right to beforgotten")
Right to restriction of processing (Article 18) - you can ask me to limit how I use yourdata in certain circumstances
Right to data portability (Article 20) - you can request your data in a structured, machine-readable format
Right to object (Article 21) - you can object to processing based on legitimate interest,including direct marketing
Right to withdraw consent - where processing is based on consent, you can withdraw it atany time without affecting the lawfulness of prior processing
To exercise any of these rights, contact me at: hello@catalinivana.com
If you believe your data rights have been violated, you also have the right to lodge a complaint withthe Romanian national data protection authority:
Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal(ANSPDCP)
Website: www.dataprotection.ro
7. Cookies
This website uses cookies - small text files stored on your device - for the following purposes:
Essential cookies - required for the website to function correctly. These cannot be disabled.
Analytics cookies - used to understand how visitors interact with the site (pages visited, timeon page, referral source). This data is aggregated and not linked to individual identities.
No advertising or tracking cookies from third-party ad networks are used on this website.
You can control or disable cookies through your browser settings at any time. Note that disablingessential cookies may affect the functionality of certain features such as forms.
8. Data Security
I take reasonable technical and organisational measures to protect your personal data againstunauthorised access, loss, or misuse. These include:
Use of reputable, GDPR-compliant third-party platforms with their own security infrastructure
Access to contact data limited to myself only - no team members or third parties haveunsupervised access
HTTPS encryption on all pages of this website
No method of data transmission over the internet is 100% secure. While I take these precautionsseriously, I cannot guarantee absolute security and accept no liability for breaches caused by factorsoutside my reasonable control.
9. Children's Privacy
This website is not directed at children under the age of 16. I do not knowingly collect personal datafrom children. If you believe a child has submitted data through this website, please contact meimmediately at hello@catalinivana.com and I will delete it promptly.
10. Changes to This Privacy Policy
I may update this Privacy Policy from time to time to reflect changes in my practices, technology, orlegal requirements. The date of the most recent revision is shown at the top of this page. Continued
use of this website after any update constitutes acceptance of the revised policy. For significantchanges, I will make reasonable efforts to notify active subscribers by email.
11. Contact
For any questions, requests, or concerns relating to this Privacy Policy or the handling of yourpersonal data, please contact me at:
Catalin Ivana