Aledonir
Legal

Privacy Policy

Last updated: January 2026 — Revision 02

01 — Overview

Who We Are and What This Policy Covers

Aledonir is a dietary guidance and food planning practice operating from Strada Mihai Eminescu nr. 73, Sector 2, 020071 Bucharest, Romania. The practice operates as a registered business under Romanian commercial law. Our principal contact for data-related enquiries is [email protected].

This Privacy Policy describes the types of personal data collected when you use this website or engage with our consultation services, the purposes for which that data is processed, the legal basis for processing, and the rights available to you under the General Data Protection Regulation (GDPR) and applicable Romanian data protection legislation.

By using this website or submitting personal data through our contact form, you acknowledge that you have read and understood this policy. If you have questions about any part of this document, contact us at [email protected] before submitting any personal data.

02 — Data Collected

What Personal Data We Collect

Aledonir collects personal data through the following channels:

Contact Form

When you submit the contact form on this website, we collect: full name, email address, selected consultation type, and the content of your message. This data is used solely to respond to your enquiry and, where applicable, to schedule a consultation.

Consultation Records

During and following consultations, we collect dietary history, food preference information, physical activity records, and programme documentation. This data is stored in our client archive system with revision codes and dated entries. It is used exclusively to deliver and manage your dietary programme.

Website Analytics

This website may collect anonymised usage data, including page views, session duration, and approximate geographic region. This data is collected through cookie-based analytics tools and does not identify individuals. See the Cookie Policy for full details.

Direct Correspondence

Personal data included in emails or telephone calls made directly to Aledonir is recorded only to the extent necessary to handle the communication. Phone call records are not made without consent.

03 — Legal Basis

Legal Basis for Processing

Aledonir processes personal data on the following legal bases as defined under GDPR Article 6:

  • Contract performance (Art. 6(1)(b)): Processing of consultation and programme data is necessary to deliver the dietary guidance service you have engaged with.
  • Legitimate interests (Art. 6(1)(f)): Website analytics and general correspondence records are processed on the basis of Aledonir's legitimate interest in operating and improving its services, where this interest is not overridden by your rights.
  • Consent (Art. 6(1)(a)): Where non-essential cookies are used, processing is conditional on your explicit consent given via the cookie consent mechanism on this website.
04 — Retention

How Long We Retain Your Data

Aledonir retains personal data for the following periods:

Consultation Archives

Client consultation records and programme documentation are retained for a minimum of five years following the close of an active programme, in line with standard professional practice retention requirements for dietary records.

Contact Form Submissions

Enquiries not resulting in a programme are retained for 12 months, after which the data is securely deleted unless you have agreed otherwise in writing.

Analytics Data

Anonymised website analytics data is retained for up to 26 months, in line with standard analytics platform retention settings.

05 — Your Rights

Your Data Protection Rights

Under GDPR, you hold the following rights with respect to personal data held by Aledonir:

Right of Access

You may request a copy of the personal data Aledonir holds about you at any time. Requests are processed within 30 days.

Right to Rectification

If any data held about you is inaccurate or incomplete, you may request a correction. Corrections are applied within 14 working days of a verified request.

Right to Erasure

You may request deletion of your personal data where the processing no longer serves a legitimate purpose or legal obligation. Requests are assessed on a case-by-case basis.

Right to Portability

Where data is processed by automated means on the basis of consent or contract, you may request a structured, machine-readable copy for transfer to another service provider.

Right to Object

You may object to processing based on legitimate interests. Aledonir will cease processing unless compelling legitimate grounds can be demonstrated.

Right to Complain

If you believe your data has been processed unlawfully, you may file a complaint with the Autoritatea Nationala de Supraveghere a Prelucrarii Datelor cu Caracter Personal (ANSPDCP), the Romanian data protection supervisory authority.

To exercise any of the above rights, contact Aledonir by email at [email protected] or by post to Strada Mihai Eminescu nr. 73, Sector 2, 020071 Bucharest, Romania. Include your full name and a description of your request. Identity verification may be required before any data is shared or modified.

06 — Third Parties & International Transfers

Data Sharing and Transfers

Aledonir does not sell, rent, or trade personal data with third parties for commercial purposes. Personal data may be shared with the following categories of third-party service providers only where necessary to deliver the service:

  • Website hosting and infrastructure providers, who process data on Aledonir's behalf under data processing agreements.
  • Analytics platforms, processing anonymised usage data only.
  • Regulatory authorities and public bodies, where disclosure is required by applicable law.

Where service providers process data outside the European Economic Area, Aledonir ensures appropriate safeguards are in place — including Standard Contractual Clauses or adequacy decisions — before any transfer occurs.

07 — Security

Data Security Measures

Aledonir implements technical and organisational measures to protect personal data against unauthorised access, loss, alteration, or disclosure. These measures include:

  • HTTPS encryption for all data transmitted via this website.
  • Access controls limiting client archive access to the principal nutritionist and authorised staff only.
  • Regular review of data storage and handling procedures.

In the event of a personal data breach that poses a risk to individuals' rights and freedoms, Aledonir will notify the ANSPDCP within 72 hours of becoming aware of the breach, and will notify affected individuals without undue delay where required.

08 — Policy Updates

Changes to This Policy

This Privacy Policy may be updated periodically to reflect changes in applicable law, data processing practices, or service delivery. The revision date at the top of this page indicates when the policy was last amended.

Significant changes will be communicated to active clients by email. Continued use of the website or services following a policy update constitutes acknowledgement of the revised terms. For questions about this policy, contact [email protected].