Privacy Policy

1. Who is responsible for your data

This site, corneliusmota.com, is operated by S.C. VIZENIO S.R.L., a company registered in Romania (the "data controller" under the GDPR). For anything privacy-related, write to [YOUR CONTACT EMAIL].

2. What I collect, and why

• Newsletter. If you subscribe, your email address is processed by Substack to deliver the newsletter. Legal basis: your consent, which you can withdraw anytime by unsubscribing (one click in every email).
• Applications and intake forms. If you apply for an engagement, the information you submit is processed via Tally to assess fit and deliver the service. Legal basis: steps prior to entering a contract, then the contract itself.
• Payments. Payments are processed by Stripe. I never see or store your full card details; I receive confirmation of payment, your name, and email. Legal basis: performance of a contract and legal (accounting) obligations.
• Client work. Materials you share during an engagement (documents, links, business information) are used solely to deliver that engagement. Legal basis: the contract.
• Direct contact. If you email or message me, I keep the correspondence for as long as needed to handle it. Legal basis: legitimate interest in responding.
• Technical logs. The site is served via Cloudflare, which processes IP addresses and request data for security and delivery. No advertising or cross-site tracking cookies are set by me.

3. Who processes data on my behalf

Substack (newsletter), Stripe (payments), Tally (forms), Cloudflare (hosting and security), and Google Workspace (email and documents). Some of these providers are based in the United States; transfers rely on the EU-approved safeguards those providers maintain (such as the EU-US Data Privacy Framework or Standard Contractual Clauses).

4. AI tools

Parts of my work use AI tools under human direction and review. Client materials are handled within professional tools configured not to train public models on your data, and are never published or shared.

5. How long I keep data

Newsletter data: until you unsubscribe. Application data: up to 12 months after the conversation ends, unless we work together. Client and invoicing records: as long as Romanian accounting and tax law requires. Correspondence: as long as reasonably needed.

6. Your rights

Under the GDPR you can request access, correction, deletion, restriction, portability, or object to processing, and you can withdraw consent at any time. Write to [YOUR CONTACT EMAIL] and I'll respond within a month. You also have the right to lodge a complaint with the Romanian supervisory authority (ANSPDCP, dataprotection.ro) or your local authority.

7. Changes

If this policy changes materially, the effective date above changes with it, and significant changes will be flagged to newsletter subscribers.

This page is written in plain language on purpose. It is provided for transparency and does not constitute legal advice to you.