Loredana Sandu
Book
HomeAbout

Legal

Privacy policy

This policy explains how the personal data of people who visit this website, send an email or book an appointment is processed, in accordance with the General Data Protection Regulation (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).

1. Data controller

2. What data is processed and why

  • Email. If you write to hello@loredanasandu.com, your name, your email address and the content of your message are processed to answer your inquiry.
  • WhatsApp. If you write on WhatsApp, your phone number, your profile name and the content of your messages are processed to answer your inquiry. WhatsApp is a service of WhatsApp Ireland Limited (Meta), which also processes this data under its own privacy policy.
  • Bookings. If you book a first consultation, your name, your email address, the name of your business, your answers to the booking questions and the date and time you choose are processed to manage the appointment and send you the confirmation and reminders.
  • Visit statistics. To know how many people visit the website and which pages they read, an analytics tool that does not use cookies and does not identify people is used. Only aggregated data is collected.

3. Legal basis

Inquiries and bookings are processed to take steps, at your request, before a possible contract (Article 6(1)(b) GDPR). Visit statistics are based on the legitimate interest in understanding how the website is used and improving it (Article 6(1)(f) GDPR), without identifying anyone.

4. How long data is kept

The data from an inquiry or a booking is kept for as long as needed to handle it and, if no professional relationship follows, for no more than one year after the last contact. If a professional relationship begins, the data is kept for as long as it lasts and, after that, for the periods required by law, for example for tax purposes.

5. Who receives the data

Data is not shared with third parties, except where required by law. To provide the service, the following providers are used. They process data on behalf of the controller, under a data processing agreement:

  • Cal.com, Inc. (United States): booking tool.
  • Google (Google Workspace): email.
  • WhatsApp Ireland Limited (Meta, Ireland): messaging, if you choose to write on WhatsApp.
  • Cloudflare, Inc. (United States): website hosting and cookieless visit statistics.

Cal.com, Google, Cloudflare and Meta may process data outside the European Economic Area. These transfers are based on the EU-U.S. Data Privacy Framework or on the European Commission's standard contractual clauses.

6. Your rights

You can ask for access to your data, its rectification or erasure, the restriction of processing or the portability of your data, and you can object to processing. To do so, write to hello@loredanasandu.com. If you believe that your data is not being processed correctly, you can file a complaint with the Spanish Data Protection Agency (www.aepd.es).

7. Cookies

This website does not use advertising or tracking cookies, and the analytics tool does not use cookies. That is why no cookie notice is shown. If technical cookies are ever used, they will only be the ones that the website needs to work. The Cal.com booking tool may use its own technical cookies, which it needs for the booking to work securely.

8. Changes to this policy

This policy may change to adapt to changes in the law or in the website. The current version is always the one on this page.

Last updated: October 2026