Legal notice
Privacy notice
This notice explains what personal data we process on this website, for what purpose and on what legal basis, with whom we share it, how long we keep it, and what rights you have.
1. Data controller
The data controller is Dr. Kolumbán Rita (registered in Gyergyószentmiklós, Romania). For any questions about data processing you can reach us at:
To be completed (Rita): the controller's exact legal form (private individual / sole trader) and registration or tax number.
2. What data we process
We only process the data you provide when filling in a form and — with your consent — the technical data needed to measure traffic anonymously.
Forms
- Workshop enquiry: your name, email address, message, the selected workshop, the time of submission, and your browser's technical identifier (user agent).
- Book pre-order / notification: your email address, the book concerned, the time of submission, and your browser's user-agent data.
- Publication download: your email address, the name of the downloaded file, the time of submission, and your browser's user-agent data.
Website statistics (Google Analytics 4)
If you consent, Google Analytics 4 measures traffic anonymously: the pages visited, approximate location (country/city level), device and browser type, and a random visitor identifier. Google Analytics does not store your IP address — it uses it only transiently to determine location, then discards it.
Functional data stored in your browser
The website stores your cookie consent (amh_consent) in your browser's local storage so we don't have to ask again, and — for convenience — the email address you previously entered in a form, so you don't have to type it again as a returning visitor. This data stays on your device.
3. Purpose and legal basis
- Getting in touch and replying to your enquiry (workshop form): steps prior to entering into a contract, and our legitimate interest in replying — GDPR Article 6(1)(b) and (f).
- Book pre-order / notification: a pre-contractual step taken at your request — GDPR Article 6(1)(b).
- Publication download and keeping a record of downloaders: your consent — GDPR Article 6(1)(a).
- Website statistics (analytics cookies): your consent — GDPR Article 6(1)(a). Consent can be withdrawn at any time (see below).
4. Cookies and storage
We only place analytics cookies after your consent. Before consent, Google Consent Mode may at most send a cookieless, identifier-free measurement signal to Google. The functional local storage described above works without consent.
| Name | Purpose | Provider | Lifetime |
|---|---|---|---|
| _ga | Distinguishing visitors (statistics) | 2 years | |
| _ga_0HB8502NK8 | Maintaining session state (statistics) | 2 years | |
| amh_consent | Storing your cookie consent | this website | until cleared (local storage) |
5. Processors and third parties
To run the website we use Google services: Google Analytics for statistics, and Firebase (Firestore, Hosting) to store form data and serve the site. Within the EEA the service provider is Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland), with Google LLC (USA) acting as a sub-processor. When you submit a form, the technical connection means your browser's IP address is transmitted to Google, regardless of your analytics consent.
6. International data transfers
Processing by Google may involve transfers to the United States. Transfers take place with appropriate safeguards: Google is a certified participant in the EU–US Data Privacy Framework and also applies the Standard Contractual Clauses adopted by the European Commission.
7. Retention period
- We keep the data you provide in forms until your matter is handled or until you request its deletion.
- We keep Google Analytics statistical data for the retention period configured in GA4.
To be completed (Rita): concrete retention periods — e.g. form data 12 months; GA4 retention 2 or 14 months.
8. Your rights
In relation to your data you have the following rights: access, rectification, erasure, restriction of processing, data portability, objection, and withdrawal of consent at any time. Withdrawing consent does not affect the lawfulness of processing before the withdrawal. We will respond to your request within one month at the latest. To exercise your rights, write to kolumbanrita01@gmail.com.
You can withdraw or change your analytics consent at any time here:
9. Supervisory authority
If you believe that the processing of your data infringes the law, you may lodge a complaint with a supervisory authority. As the data controller is established in Romania, the competent authority is the ANSPDCP (Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal, Bd. G-ral. Gheorghe Magheru 28–30, Bucharest, Romania — www.dataprotection.ro). If you live elsewhere, you may also contact your own country's data-protection authority (in Hungary, for example, the NAIH).
10. Other information
We do not use automated decision-making or profiling. We do not knowingly collect data about children through the website's forms. We may update this notice from time to time; the version in force is always published on this page.
Contact