Legal
Privacy Policy
Last updated:
Who we are
The controller of your personal data is Kolanovschi Consulting Services, București, România (“we”). You can reach us at contact@kcshub.com or +40 741 023 808.
What we process and why
Contact form enquiries — name, company, email, phone and your message, to respond and prepare a proposal. Legal basis: steps prior to a contract and our legitimate interest in answering enquiries (Art. 6(1)(b) and (f) GDPR).
Course package orders — name, email, billing details and order details, to deliver the digital product, issue the invoice and meet tax obligations. Legal basis: performance of a contract and legal obligations (Art. 6(1)(b) and (c) GDPR).
Free guide — first name (optional) and email, to send you the guide you asked for (Art. 6(1)(b) GDPR). Only if you tick the separate box, we also send a short series of emails with tips and offers (consent, Art. 6(1)(a) GDPR); unsubscribe with one click from any email.
Reviews — the rating, text and name you choose, published on the site only with your agreement. Only people with an order can leave a review; reviews from people who received the course for free are labelled as such.
Technical data — server logs (e.g. IP address) kept briefly for security. Legal basis: legitimate interest.
Ad measurement (Meta Pixel) — only if you choose “Accept all” in the cookie banner: pages visited, checkout starts and purchases (value and product, never card details) are sent to Meta Platforms Ireland Ltd. so we can measure our Facebook and Instagram ads and show them to interested people. Legal basis: consent (Art. 6(1)(a) GDPR and Art. 4(5) of Romanian Law 506/2004). You can withdraw consent at any time from “Cookie settings” in the site footer.
Cookies and local storage: one cookie that remembers your language, your cookie choice, a strictly necessary authentication cookie for the administration area and, only with your consent, the Meta Pixel cookies.
Who receives your data
We use carefully selected providers that process data on our behalf: our hosting and email provider (Hostinger), the card payment processor (Stripe, when you pay by card — we never see your card details), Meta (only with your consent, for ad measurement) and our bank, for bank-transfer payments. Some providers may transfer data outside the EEA under standard contractual clauses or adequacy decisions. We never sell your data.
How long we keep it
Contact enquiries — up to 2 years after our last communication. Order and invoicing data — for the statutory accounting retention periods (currently 5 years, longer for certain documents).
Your rights
You have the right to access, rectify, erase, restrict, port and object to the processing of your data, and to withdraw consent. Write to us any time at contact@kcshub.com. You may also lodge a complaint with the Romanian data protection authority, ANSPDCP (www.dataprotection.ro).
Security
We use encrypted connections (HTTPS), restricted access to data and providers with high security standards. Download links are personal and expire automatically.