Privacy Policy
This policy describes how Cantora collects, stores, uses, and safeguards personal data submitted through this website and through the consultation enquiry process.
Who is responsible for your data
The data controller for personal data collected through this website is Cantora, operating from Strada Olimpului nr. 56, Sector 4, 040344 Bucharest, Romania. The practice can be contacted at [email protected] or by telephone at +40 21 483 0169 during business hours (Monday to Friday, 09:00–18:00).
All data handling described in this policy is conducted in accordance with Regulation (EU) 2016/679 (the General Data Protection Regulation, GDPR) and applicable Romanian data protection legislation.
What data is collected and how
Contact form data. When a visitor submits the consultation enquiry form on this website, the following data is collected: full name, email address, the selected subject category, and the message content. This data is used solely to respond to the enquiry and, where applicable, to schedule a consultation session.
Usage and analytics data. This website may collect anonymised usage data — including pages visited, time on site, browser type, and approximate geographic region — for the purpose of understanding how the site is used and improving its content. This data does not identify individual visitors.
Cookie data. Cookies are used as described in the separate Cookie Policy. Visitors may manage their cookie preferences at any time via the Cookie Settings link in the site footer.
Consultation intake records. When an individual enters the consultation process, a food intake log and a written intake report are produced and retained as part of the practice's documentation archive. These records are held securely, used only for the purpose of the consultation engagement, and are not shared with third parties.
Why Cantora processes personal data
Personal data submitted via the contact form is processed on the basis of the legitimate interest of responding to an enquiry initiated by the individual (Article 6(1)(f) GDPR), or, where a consultation agreement is entered into, on the basis of the performance of that agreement (Article 6(1)(b) GDPR).
Consultation intake records are retained on the basis of the consultation agreement between the individual and Cantora, and to fulfil the practice's obligation to maintain accurate and complete documentation records.
Analytical and cookie data is processed on the basis of consent, as collected via the cookie banner. Visitors may withdraw consent at any time by adjusting their cookie preferences via the Cookie Settings option in the footer.
How long data is kept
Contact form enquiries that do not proceed to a consultation engagement are retained for a period of 12 months following the last correspondence, after which they are deleted from Cantora's records.
Consultation intake records — including the food intake log, written intake report, seasonal plan, and revision notes — are retained for the duration of the consultation engagement and for a period of three years following the last active session, after which they are securely destroyed.
Anonymised analytical data has no fixed retention limit, as it does not constitute personal data under GDPR.
Who has access to your data
Cantora does not sell, rent, or otherwise disclose personal data to third parties for commercial purposes. Personal data submitted via the contact form or through the consultation process is accessed only by the Cantora practice staff directly involved in responding to or managing the enquiry or engagement.
The website may use third-party service providers — such as web hosting, analytics, or email delivery services — that process data on Cantora's behalf as data processors under GDPR. These providers are contractually bound to process data only for the purposes defined by Cantora and in accordance with applicable data protection requirements.
Cantora may share personal data if required to do so by applicable Romanian or EU law, or in response to a lawful request from a competent authority.
Rights under GDPR
Under GDPR, individuals whose personal data is held by Cantora have the following rights:
- Right of access — to request a copy of the personal data held about you.
- Right to rectification — to request correction of inaccurate or incomplete data.
- Right to erasure — to request deletion of personal data where it is no longer necessary for the purpose for which it was collected, subject to applicable retention obligations.
- Right to restriction of processing — to request that processing be restricted in certain circumstances.
- Right to data portability — to receive personal data in a structured, commonly used format.
- Right to object — to object to processing based on legitimate interests.
- Right to withdraw consent — where processing is based on consent, to withdraw that consent at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, contact Cantora by email at [email protected] or by post at Strada Olimpului nr. 56, Sector 4, 040344 Bucharest, Romania. Requests will be acknowledged within five working days and resolved within 30 calendar days.
If you have a concern about the way Cantora handles your personal data, you have the right to lodge a complaint with the Romanian data protection supervisory authority, Autoritatea Nationala de Supraveghere a Prelucrarii Datelor cu Caracter Personal (ANSPDCP), at www.dataprotection.ro.
This privacy policy was last revised in January 2026. Cantora reserves the right to update this policy to reflect changes in applicable law or in the data processing activities of the practice. The current version is published at cantora.info/privacy-policy.