Privacy Policy

1. Introduction

Beldova (“we”, “us”, “the practice”) is a nutritional consultation practice registered in Romania, operating from Bulevardul Dacia nr. 58, Sector 1, 010413 Bucharest, Romania. This Privacy Policy describes how we collect, use, store, and protect personal information submitted through the website at beldova.info and through the consultation process.

We process personal data in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation — GDPR), the Romanian national data protection legislation, and the guidance of the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP).

2. Data Controller

The data controller for personal information processed through this website and through consultation services is:

3. Personal Data We Collect

We collect personal data only where necessary to provide the consultation service or to communicate with enquirers. The categories of data collected are:

• Contact data: name, email address, and phone number submitted through the contact form or provided during enquiry.
• Consultation data: dietary intake information, food preferences, activity level, weight history, and lifestyle context submitted through the intake form or provided during sessions.
• Usage data: anonymised website usage data collected through cookies, including pages visited, session duration, and device type. See the Cookie Policy for detail.
• Communication data: content of emails, messages, and enquiries sent to the practice.

4. Legal Basis for Processing

We process personal data on the following legal bases under GDPR Article 6:

• Contract performance (Art. 6(1)(b)): processing of consultation data is necessary to provide the nutritional consultation service requested.
• Legitimate interests (Art. 6(1)(f)): processing of contact and communication data to respond to enquiries and maintain consultation records.
• Consent (Art. 6(1)(a)): processing of non-essential cookies where consent has been given through the cookie banner.

5. How We Use Personal Data

Personal data collected through the website and consultation process is used for the following purposes:

• Responding to enquiries and scheduling consultation sessions.
• Producing and delivering intake assessments, eating plans, and revision documents.
• Maintaining the consultation archive for the duration of the retention period.
• Improving the website and consultation service using anonymised usage analytics.
• Complying with applicable legal and regulatory obligations.

We do not sell, rent, or otherwise share personal data with third parties for marketing purposes.

6. Data Retention

Consultation records are retained for five years from the close of the programme. Contact and communication data is retained for three years from the date of last contact. Anonymised usage data collected through analytics cookies is retained for up to 26 months.

After the retention period expires, personal data is securely deleted or anonymised. Returning clients who begin a new programme within the retention window will have their previous records available as a starting point for the new engagement.

7. Data Subject Rights

Under the GDPR, individuals whose personal data we hold have the following rights:

• Right of access: to request a copy of the personal data we hold about you.
• Right to rectification: to request correction of inaccurate or incomplete personal data.
• Right to erasure: to request deletion of personal data, subject to retention obligations.
• Right to restrict processing: to request that processing be limited in certain circumstances.
• Right to data portability: to receive personal data in a structured, machine-readable format.
• Right to object: to object to processing based on legitimate interests.
• Right to withdraw consent: where processing is based on consent, to withdraw that consent at any time.

To exercise any of these rights, contact us at [email protected]. Requests are addressed within 30 days of receipt. Where an extension is needed, we notify the requester within the initial 30-day period.

8. Third-Party Services

The website uses the following third-party services which may collect anonymised usage data:

• Google Fonts: font files are loaded from Google servers. Google may process request metadata. No personal consultation data is shared with Google.
• Google Maps: the contact page embeds a Google Maps iframe. Use of this embed is subject to Google's privacy policy. No personal data entered into the contact form is shared with Google.
• CDN providers: third-party CDN libraries (FontAwesome, Swiper, GSAP, etc.) are loaded from external servers. These CDNs may log request metadata for operational purposes.

9. Security

Personal data submitted through the website is transmitted over HTTPS. Consultation records are stored on password-protected systems with access restricted to the practice principal. No consultation record is shared externally without the client's explicit instruction. We review data security practices annually and update procedures where improvements are identified.

10. Supervisory Authority

You have the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) if you believe your personal data rights have not been upheld. Contact details and complaint procedures are available at the ANSPDCP website: dataprotection.ro.

11. Updates to This Policy

This Privacy Policy is reviewed and updated annually, or sooner if there are material changes to our data processing practices or applicable law. The revision date at the top of the document indicates when the current version was last amended. Continued use of the website after a policy update constitutes acknowledgement of the revised policy.