Legal
Privacy policy
Who processes your data
Data Controller: Tanászi Norbert PFA (registered office: Miercurea Nirajului, Romania, CUI: 45697146, Reg. Com.: F2022000218265, e-mail: info@physiogalaxy.com, phone: +40 740 208 990).
What data I collect
The name, email address, phone number, age, and gender (the latter two being optional) provided in the contact form, as well as your answers related to your inquiry, such as your sport, injury history, or the nature of your symptoms.
Some of this information qualifies as health data, which is why I process it strictly based on your explicit consent (Art. 9(2)(a) GDPR), provided prior to submitting the form.
As technical data, I store your browser identifier and an irreversible cryptographic hash of your IP address, solely for fraud prevention and filtering unsolicited messages (legitimate interest, Art. 6(1)(f) GDPR). The actual IP address is never retained.
Why I process it
To facilitate communication, respond to your inquiry, and prepare a personalized training or rehabilitation program. The preliminary questions ensure that my very first response is concrete and professionally grounded (pre-contractual steps at your request, Art. 6(1)(b) GDPR).
Who I share it with
No one. Your data is never sold, shared with third parties for marketing purposes, or used for profiling.
To operate the website, I exclusively rely on trusted technical infrastructure providers acting as data processors:
- Hosting and infrastructure
- Netlify, Inc. (under EU-US Data Privacy Framework)
- Database provider
- Neon, Inc. (secure cloud server environment)
- Email service
- Google Workspace
- Traffic analytics
- Umami Software, Inc.
Cookies
The website does not use tracking or advertising cookies. It places a single functional cookie that remembers your preferred interface language — therefore, no cookie consent banner is required.
Website traffic is measured using privacy-friendly, cookie-less analytics (Umami): I only see aggregated statistics, such as page views and general device types. It does not identify individual visitors, does not store IP addresses, and does not track you across other websites.
What rights you have
Under the GDPR, you have the following rights:
- Right of access
- you can request information on what personal data is processed and how.
- Right to rectification
- you can request prompt correction of inaccurate or outdated information.
- Right to erasure
- you can request the permanent deletion of your data.
- Right to restriction of processing
- you can request that the processing of your data be restricted in case of dispute.
- Right to data portability
- you can request to receive your provided personal data in a structured, commonly used, machine-readable format.
- Right to withdraw consent
- you can withdraw your consent at any time without giving any reason.
To exercise any of these rights, email info@physiogalaxy.com. Your request will be fulfilled within 30 days.
How long I keep it
- Inquiries
- if no contract or coaching engagement is established following your inquiry, your submitted data will be permanently deleted within 6 months.
- Active clients
- data is retained for the duration of the professional collaboration and up to the applicable statutory limitation period for liability.
- Billing details
- in case an invoice is issued, accounting and fiscal records are retained for the mandatory period required by applicable tax law.
Where to file a complaint
If you believe your personal data is not processed in accordance with legal regulations, please contact me first at info@physiogalaxy.com so we can resolve the matter promptly.
You also have the right to lodge a formal complaint with the competent supervisory authority:
- Supervisory authority
- Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP)
- Address
- B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, București, Postal code 010336, Romania
- Website
- https://www.dataprotection.ro