Privacy Policy

Last updated: February 11, 2025

Protecting your personal data is a priority for us. This privacy policy explains what data we collect, why we collect it, how we use it, and what your rights are, in accordance with the General Data Protection Regulation (GDPR — EU Regulation 2016/679) and applicable national legislation (Law no. 190/2018).

1. Definition of terms

• Personal data — any information relating to an identified or identifiable natural person (name, email, IP address, etc.)
• Data subject — the natural person whose personal data is processed (you, the website user)
• Data controller — the natural or legal person who determines the purposes and means of processing personal data
• Processing — any operation performed on personal data (collection, storage, use, transmission, deletion, etc.)
• Consent — freely given, specific, informed, and unambiguous agreement of the data subject for data processing
• Third party — any natural or legal person other than the data subject, the controller, or the controller’s processors

2. Who we are

The controller of your personal data is:

• PFA Alexandra Barbu (Authorized Natural Person)
• CPR Code: 05550
• Tax ID (CUI): [TO BE COMPLETED]
• Address: Str. Zemes nr. 1A, Bl. M29B, Sc. A, Bucharest, Sector 3, Romania
• Email: [email protected]
• Phone: +40 770 200 834
• Website: alexandrabarbu.ro

3. Intellectual property

The content of alexandrabarbu.ro (texts, images, graphics, structure, design) is protected by copyright and belongs to PFA Alexandra Barbu, unless otherwise stated. Reproduction, distribution, or use of the content without prior written consent is prohibited.

4. What information we collect and why

4.1. Contact form

When you send us a message through the contact form, we collect:

• Name — to address you personally
• Email address — to reply to you
• Your message — to understand and respond to your request

Legal basis: your consent (Art. 6(1)(a) GDPR), expressed by completing and submitting the form.

Processing: Data is transmitted via Google Apps Script (a Google LLC service) and stored in order to respond to your request.

4.2. Bookings via Cal.com

When you schedule a consultation through the Cal.com widget integrated on the website, Cal.com collects:

• Name
• Email address
• Appointment date and time

Legal basis: performance of a contract or pre-contractual measures (Art. 6(1)(b) GDPR).

Processing: Data is managed by Cal.com Inc. in accordance with their privacy policy.

4.3. ADHD self-assessment test

The ADHD self-assessment test available on the website operates entirely in your browser (client-side). The answers to the 35 questions:

• Are NOT transmitted to any server
• Are NOT stored in any database
• Are NOT accessible to us or any third party

The result is calculated locally in your browser and is lost when you close the page. We do not collect any personal data through this test.

4.4. Google Search Console (active)

Google Search Console is a tool for monitoring website visibility in the Google search engine. Through this service, Google collects and provides us with:

• Search queries that lead users to the website
• Indexed URLs of the website
• Search performance (click-through rate — CTR, average position, number of impressions)
• Device type used (desktop, mobile, tablet)
• Country from which results are accessed

Purpose: Monitoring website visibility in Google search and optimizing content to be easier to find.

Legal basis: our legitimate interest (Art. 6(1)(f) GDPR) in understanding how the website is discovered through searches.

Note: This data is aggregated and does not directly identify individual users.

4.5. Google Analytics (planned)

Google Analytics is a web analytics service planned for activation on this website. When activated, it will collect:

• IP address (anonymized)
• Pages visited and session duration
• Traffic source (direct, organic, social media)
• Browser type and operating system
• Screen resolution
• Approximate geographic location (city/country)
• Browsing behavior (page visit order, bounce rate)

Purpose: Understanding how users interact with the website to improve content and browsing experience.

Legal basis: your consent (Art. 6(1)(a) GDPR), which will be requested before activating analytics cookies.

Google Analytics cookies:

Opt-out: You can disable Google Analytics by installing the Google Analytics Opt-out Browser Add-on.

4.6. Google reCAPTCHA v3 (active)

The contact form is protected by Google reCAPTCHA v3, a service that distinguishes human users from automated programs (bots). This service collects:

• Page interactions (mouse movements, typing patterns)
• IP address
• Browser and device information
• Existing Google cookies

Purpose: Protecting the contact form against spam and automated abuse.

Legal basis: our legitimate interest (Art. 6(1)(f) GDPR) in protecting the website against abusive use.

Note: reCAPTCHA v3 operates invisibly, without requiring any interaction on your part.

4.7. Automatically collected technical information

When you access the website, hosting servers automatically collect certain technical information:

• IP address
• Browser type and version
• Operating system
• Date and time of access
• Pages visited

Purpose: Ensuring proper operation and security of the website.

Legal basis: our legitimate interest (Art. 6(1)(f) GDPR) in maintaining website security and functionality.

5. Cookies and local storage

5.1. Technical cookies

• reCAPTCHA v3: Sets cookies necessary for anti-spam protection (including _GRECAPTCHA and other associated Google cookies). These are essential for the contact form to function.

5.2. Analytics cookies (planned)

When Google Analytics is activated, the following cookies will be set:

These cookies will be activated only with your consent.

5.3. Cal.com cookies

The Cal.com booking widget may set its own cookies necessary for the booking service to function. These cookies are managed by Cal.com in accordance with their privacy policy.

5.4. Local storage (localStorage)

The website uses localStorage (local browser storage) for:

• preferredLanguage — saves your language preference (Romanian/English) to display the website in your preferred language on future visits
• cookie-consent — saves the fact that you have seen and accepted the information banner

Note: localStorage is not a cookie. Data is stored exclusively in your browser, on your device, and is not transmitted to any server. You can delete this data at any time from your browser settings.

5.5. How to disable cookies

You can control and delete cookies from your browser settings:

• Chrome: Settings → Privacy and security → Cookies
• Firefox: Settings → Privacy & Security → Cookies and Site Data
• Safari: Preferences → Privacy → Manage Website Data
• Edge: Settings → Cookies and site permissions

Warning: Disabling cookies may affect the functionality of some website elements (for example, the anti-spam protection on the contact form).

6. Embedded content and external resources

The website loads resources from the following external providers. When your browser requests these resources, the provider may automatically receive your IP address, browser type, and other standard technical information:

6.1. Cal.com (booking widget)

The booking widget loads resources from Cal.com servers to display the availability calendar and process appointments.

6.2. CDNs (Content Delivery Networks)

The website uses JavaScript libraries loaded from:

• jsDelivr (jsdelivr.net) — for GSAP (animations) and Alpine.js (interactivity) libraries
• CloudFlare (cdnjs.cloudflare.com) — for the Tone.js library (audio, used in the ADHD test)
• Tailwind CSS (cdn.tailwindcss.com) — for styling (used on certain pages)

6.3. Google Fonts (ADHD test pages only)

The ADHD self-assessment test pages load the Patrick Hand and Nunito fonts from Google Fonts servers (fonts.googleapis.com). When you access these pages, Google may receive your IP address and browser information.

Note: The main website fonts (Playfair Display, DM Sans) are self-hosted and do not involve any data transfer to third parties.

7. Google services

The website uses several Google services. All are provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). Google privacy policy: policies.google.com/privacy.

7.1. Google Search Console (active)

• What data: Search queries, indexed URLs, performance (CTR, position, impressions), device type, country
• Why: Monitoring website visibility in Google and optimizing content
• Aggregated data: Does not directly identify individual users

7.2. Google Analytics (planned — to be activated)

• What data: Anonymized IP, pages visited, session duration, traffic source, browser, operating system, approximate location, browsing behavior
• Why: Understanding user behavior to improve the website
• Cookies: _ga (2 years), _ga_<ID> (2 years), _gid (24 hours)
• Opt-out: Google Analytics Opt-out Browser Add-on

7.3. Google reCAPTCHA v3 (active)

• What data: Page interactions, IP address, browser information, Google cookies
• Why: Anti-spam and anti-bot protection for the contact form
• Operation: Invisible, without user interaction

7.4. Google Apps Script (active)

• What data: Name, email, and message submitted through the contact form
• Why: Processing and delivering messages received through the contact form
• Note: Data transits Google servers for delivery

8. Other third-party services

8.1. Cal.com (bookings)

• Provider: Cal.com Inc.
• What data: Name, email, appointment date/time
• Why: Facilitating online booking for consultations
• Privacy policy: cal.com/privacy

8.2. jsDelivr (CDN)

• Provider: jsDelivr (open-source CDN service)
• What data: IP address, user-agent (automatically transmitted when loading libraries)
• Why: Fast delivery of JavaScript libraries used on the website
• Privacy policy: jsdelivr.com/terms/privacy-policy-jsdelivr-net

8.3. CloudFlare (CDN)

• Provider: Cloudflare Inc.
• What data: IP address, user-agent (automatically transmitted when loading libraries)
• Why: Delivery of the Tone.js audio library used in the ADHD test
• Privacy policy: cloudflare.com/privacypolicy

9. How we use the information

We use collected data exclusively for:

• Responding to your requests — processing messages received through the contact form
• Providing services — managing consultation bookings
• Improving the website — understanding how the website is used to improve content and browsing experience
• Website security — protection against spam, abuse, and unauthorized access

We do NOT sell, rent, or share your personal data with third parties for marketing purposes.

10. Who we share data with

Your data may be accessed by:

Data transfers outside the EU/EEA: Some of our providers (Google, Cal.com, Cloudflare) are headquartered in the United States of America. Data transfers are carried out on the basis of Standard Contractual Clauses (SCC) approved by the European Commission and/or the EU-U.S. Data Privacy Framework, which ensure an adequate level of personal data protection.

11. How long we keep data

12. Your rights

In accordance with GDPR, you have the following rights:

• Right of access (Art. 15) — you may request confirmation of your data processing and a copy of your data
• Right to rectification (Art. 16) — you may request correction of inaccurate data or completion of incomplete data
• Right to erasure (Art. 17) — you may request deletion of your personal data (“right to be forgotten”)
• Right to restriction of processing (Art. 18) — you may request limitation of data processing under certain conditions
• Right to data portability (Art. 20) — you may request to receive your data in a structured, commonly used, and machine-readable format
• Right to object (Art. 21) — you may object to processing based on legitimate interest
• Right to withdraw consent — at any time, without affecting the lawfulness of prior processing

To exercise any of these rights, you may contact us at:

• Email: [email protected]
• Phone: +40 770 200 834

We will respond to your request within a maximum of 30 days from receipt.

Right to lodge a complaint

If you are not satisfied with how we process your data, you have the right to lodge a complaint with:

National Supervisory Authority for Personal Data Processing (ANSPDCP)

• Address: B-dul G-ral Gheorghe Magheru nr. 28-30, Sector 1, postal code 010336, Bucharest, Romania
• Phone: +40 318 059 211
• Email: [email protected]
• Website: dataprotection.ro

13. Limitation of liability

alexandrabarbu.ro may contain links to third-party websites. We are not responsible for the privacy policies or content of these external websites. We recommend that you read the privacy policy of each website you visit.

Information provided on the website (including ADHD self-assessment test results) is for informational purposes only and does not constitute medical diagnosis or therapeutic recommendation. Professional evaluation is required for diagnosis and treatment.

14. Changes to the privacy policy

We reserve the right to update this privacy policy. Any changes will be published on this page, with the date at the beginning of the document updated accordingly.

We recommend that you periodically check this page to stay informed of any changes. Continued use of the website after changes are published constitutes acceptance of the new privacy policy.

15. Contact

For any questions or requests regarding your personal data:

• PFA Alexandra Barbu
• Email: [email protected]
• Phone: +40 770 200 834
• Address: Str. Zemes nr. 1A, Bl. M29B, Sc. A, Bucharest, Sector 3, Romania

For data protection complaints:

• ANSPDCP — dataprotection.ro — [email protected] — +40 318 059 211