Privacy Policy
Privacy Policy
Last updated: 11.07.2026
This Privacy Policy explains how Carmen Grăjdeanu ("I," "me," "my practice") collects, uses, and protects personal data through the website carmengrajdeanu.com.
This policy covers the website - how the site itself handles visitor data. It's separate from the Informed Consent document, which covers the terms of our relationship and how I handle client information once we begin working together.
Who is responsible for your data
Carmen Grăjdeanu, represented by C.I. Grăjdeanu
Contact: info@carmengrajdeanu.com
What information is collected, and why
1. Contact form
If you use the contact form on this website, then the information you provide - typically your name, email address, and message - are sent to my email address (linked to my Squarespace account) and are also stored within Squarespace's Forms panel; I don't export or download this data elsewhere.
Legal basis: taking steps at your request prior to entering into an agreement, or my legitimate interest in responding to your inquiry (Art. 6(1)(b) or (f) GDPR).
Retention: I keep contact form submissions for as long as needed to respond to your inquiry and for a reasonable period afterward, then manually delete them.
2. Newsletter signup
If you sign up for my newsletter, I collect your name and email address to send you updates. This is managed through Squarespace's built-in email tools, and your information is stored there (never downloaded or exported).
Legal basis: consent (Art. 6(1)(a) GDPR).
Retention: Your details remain collected in Squarespace email tool until you unsubscribe or withdraw consent. Every email I send includes an unsubscribe option.
3. Booking a call via Calendly
When you click the link on this website to book an introductory call, you're taken to Calendly, a third-party scheduling service. There, you provide your name, email address, and anything else you choose to share with me before the call. This information is collected and processed by Calendly on my behalf so I can prepare for and conduct the call with you.
Legal basis: taking steps at your request prior to entering into an agreement (Art. 6(1)(b) GDPR).
Retention: I keep booking details for as long as needed to arrange and follow up on the call, and in line with my record-keeping obligations if we go on to work together.
Calendly's own privacy practices are described in their Privacy Notice.
4. Website analytics
This website uses Squarespace, which places analytics cookies (with your consent via the cookie banner) to understand general visitor behavior — such as which pages are viewed and how visitors found the site. This data is aggregated and not used to identify you personally.
Legal basis: consent (Art. 6(1)(a) GDPR).
See the Cookie Policy for details on specific cookies used.
5. Social media links
This website links out to my social media profiles. No personal data is collected by this website through these links; if you interact with those platforms, their own privacy policies apply.
Where your data is processed
This website is hosted by Squarespace, Inc., a US-based company. Calendly, Inc. is also US-based. Both rely on Standard Contractual Clauses to safeguard personal data transferred outside the European Economic Area, as required under GDPR. You can find more detail in Squarespace's Privacy Policy and Calendly's Privacy Notice.
Your rights
Under the GDPR, you have the right to:
Access the personal data I hold about you
Correct inaccurate data
Request deletion of your data
Restrict or object to certain processing
Request a copy of your data in a portable format
Withdraw consent at any time (for anything based on consent, such as analytics cookies)
To exercise any of these rights, contact me at info@carmengrajdeanu.com. You also have the right to lodge a complaint with the Dutch Data Protection Authority or your local supervisory authority.
Security
I take reasonable technical and organizational measures to protect personal data, and rely on the security measures provided by Squarespace and Calendly for data processed through their platforms.
Changes to this policy
I may update this Privacy Policy from time to time. The date at the top shows when it was last revised.
Contact
Questions about this policy can be sent to info@carmengrajdeanu.com.