Privacy Policy.

Who is responsible for your data

The data controller for personal information collected through this website and through the Mavienta consulting practice is:

The practice processes personal data in compliance with Regulation (EU) 2016/679 (General Data Protection Regulation — GDPR) and applicable Romanian data protection legislation.

Categories of personal data

Mavienta collects the following categories of personal data depending on how you interact with the practice:

• Contact information: name, email address, telephone number — provided when you submit an enquiry via the website contact form or contact the practice directly.
• Consultation records: dietary intake documents, session notes, eating plan documents, and revision records — collected as part of the consulting service and retained in the Mavienta archive.
• Usage data: anonymised website interaction data collected via cookies, including pages visited and session duration. See the Cookie Policy for full details.
• Technical data: IP address, browser type, device type — collected automatically by server logs and analytics tools.

Why we are permitted to use your data

Mavienta relies on the following legal bases under GDPR Article 6:

• Contractual necessity (Art. 6(1)(b)): processing required to perform the consulting service you have requested, including maintaining the consultation archive.
• Legitimate interests (Art. 6(1)(f)): website analytics and operational data used to maintain and improve the practice's digital presence, where these interests are not overridden by your rights.
• Consent (Art. 6(1)(a)): where you have provided explicit consent, for example by accepting non-essential cookies through the cookie banner displayed on this website.

Purposes of processing

Personal data collected by Mavienta is used for the following purposes:

• Responding to enquiries submitted through the website contact form.
• Scheduling and conducting dietary consultation sessions.
• Maintaining the consultation archive, including session notes, eating plans, and revision records.
• Sending follow-up documentation related to consultations you have attended.
• Anonymised website analytics used to understand how the site is used and where improvements can be made.

Mavienta does not use personal data for automated decision-making or profiling.

How long we keep your data

Mavienta retains personal data for the following periods:

• Consultation records: retained for a minimum of five years from the date of the most recent session, in line with standard professional record-keeping practice.
• Contact enquiries: retained for up to two years from the date of your enquiry, or until the purpose for which the data was collected has been fulfilled.
• Analytics and usage data: anonymised data is retained for up to 24 months. Non-anonymised technical data is retained for up to 90 days.

Rights under GDPR

Under applicable EU data protection law, you hold the following rights with respect to your personal data:

• Right of access: you may request a copy of the personal data held about you.
• Right to rectification: you may request correction of inaccurate data.
• Right to erasure: you may request deletion of your data, subject to retention obligations arising from the consulting service.
• Right to restriction: you may request that processing of your data be restricted in certain circumstances.
• Right to data portability: where processing is based on consent or contract, you may request your data in a structured, machine-readable format.
• Right to object: you may object to processing based on legitimate interests.
• Right to withdraw consent: where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, write to [email protected]. Requests are handled within 30 days. You also hold the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) at www.dataprotection.ro.

Who else may access your data

Mavienta does not sell or commercially transfer personal data to third parties. Data may be shared in the following limited circumstances:

• Service providers: hosting and website infrastructure providers operating under data processing agreements that restrict their use of data to service delivery only.
• Legal obligations: where disclosure is required by Romanian law or by order of a competent authority.

Policy updates

This privacy policy is reviewed and updated periodically. The revision date at the top of the document reflects the most recent update. Continued use of the Mavienta website following a policy update constitutes acknowledgement of the revised terms. For questions about this policy, write to [email protected].