Privacy Policy

Who is responsible for your data

The data controller for personal information collected through this website and through the consultation process is Trivane, a nutrition practice registered in Romania, with correspondence address at Strada Sfanta Vineri nr. 142, Sector 3, 030203 Bucharest, Romania.

For any enquiry relating to the processing of personal data, contact the practice at: [email protected] or by post to the address above.

What personal data Trivane collects

Trivane collects personal data in the following contexts:

• —Contact form submissions: name, email address, and any information voluntarily included in the message field. Enquiry type selection is also recorded.
• —Consultation intake documents: food diary records, dietary notes, and written session summaries submitted or created during the consultation process. These are held in the client archive and are separate from website data.
• —Website usage data: anonymised analytics data including pages visited, session duration, and referring URL, collected via cookie-based tools where consent has been granted.
• —Email correspondence: content of emails sent to [email protected] and the associated metadata (sender address, timestamp).

Why Trivane processes your data

Trivane processes personal data under the following legal bases, in accordance with Regulation (EU) 2016/679 (the General Data Protection Regulation) and applicable Romanian data-protection law:

• —Contract performance (Article 6(1)(b) GDPR): processing necessary to schedule and carry out consultation sessions and to provide dietary guidance services.
• —Consent (Article 6(1)(a) GDPR): where you have provided explicit consent, for example for analytics cookies or for receiving written communications.
• —Legitimate interests (Article 6(1)(f) GDPR): for maintaining the consultation archive, for responding to enquiries, and for the secure operation of the website.

How long data is kept

Contact form data is retained for twelve months from the date of submission, or for as long as necessary to respond to and resolve the enquiry. Consultation archive documents — food diaries, session notes, seasonal plans, and revision records — are retained for a minimum of five years from the date of the last consultation, unless the client requests earlier deletion.

Website analytics data held via cookie-based tools is retained in accordance with the retention periods specified in the Trivane Cookie Policy. Email correspondence is retained for twelve months from the last communication, after which it is deleted unless it forms part of an ongoing client relationship or a legal obligation requires longer retention.

Sharing and third-party processors

Trivane does not sell personal data to third parties. Data may be shared with the following categories of processor under appropriate data-processing agreements:

• —Hosting and infrastructure providers responsible for operating the website server and email systems.
• —Analytics tools where cookie consent has been granted, operating under standard contractual clauses where applicable.
• —Legal and regulatory authorities where disclosure is required by applicable Romanian or EU law.

All third-party processors are required to maintain appropriate technical and organisational measures to protect personal data and are prohibited from using it for their own purposes.

Rights under the GDPR

As a data subject under the GDPR, you have the following rights in relation to personal data Trivane holds about you:

• —Right of access — to receive a copy of the personal data held about you.
• —Right to rectification — to have inaccurate or incomplete data corrected.
• —Right to erasure — to request deletion of personal data where the legal basis for holding it no longer applies.
• —Right to restrict processing — to request that processing is suspended pending a review of accuracy or legal basis.
• —Right to data portability — to receive data provided under a contract in a structured, machine-readable format.
• —Right to object — to object to processing carried out on the basis of legitimate interests.
• —Right to withdraw consent — where processing is based on consent, to withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, submit a written request to [email protected]. Requests will be responded to within 30 days. If you consider that your rights have not been respected, you may lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP), Bulevardul Gheorghe Magheru 28-30, Sector 1, Bucharest.