70% Off ONLINE PHOTOGRAPHY COURSE | See course here

Privacy Policy

The confidentiality of your data is important to us. This policy explains what personal data we collect, for what purposes, on what legal basis, to whom we disclose it, and what your rights are, in accordance with Regulation (EU) 2016/679 (GDPR) and applicable national legislation.

1. Data Controller

The controller who decides the purposes and means of processing your data is:

  • HANACADEMY SRL
  • Registered office: Florești, str. Valea Gârbăului, no. 59B, apt. 1, Cluj county, Romania
  • Registered with the National Trade Register Office under no. 1339848/03
  • Tax identification code (CUI): 51622954
  • Email: acnailsacademy@gmail.com
  • Phone: +40 755 301 633

For any request regarding your personal data, you can contact us at the email address above.

2. What data we collect

Depending on how you interact with the Site, we may process the following categories of data:

  • Identification and contact data: name, surname, email address, phone number, delivery and billing address.
  • Account data: username, password (stored encrypted), order history.
  • Order and payment data: purchased products/services, order value, transaction date. Bank card data is processed exclusively by the payment processor and is not stored by us.
  • Course data: the course you enrolled in, any information necessary for organization (e.g., inclusion in a communication group).
  • Browsing data: IP address, device and browser type, pages visited, via cookies and similar technologies (see Cookie Policy).
  • Communication data: messages sent via the contact form, email or social networks.

3. Purposes and legal bases of processing

Purpose Legal basis (GDPR)
Processing orders, delivering products and providing courses Contract performance (art. 6 para. 1 lit. b)
Creating and managing the user account Contract performance (art. 6 para. 1 lit. b)
Issuing invoices and fulfilling tax and accounting obligations Legal obligation (art. 6 para. 1 lit. c)
Responding to requests, complaints and contact messages Legitimate interest / contract performance (art. 6 para. 1 lit. f / b)
Sending marketing communications (newsletter) Consent (art. 6 para. 1 lit. a)
Statistics and marketing cookies Consent (art. 6 para. 1 lit. a)
Fraud prevention and Site security Legitimate interest (art. 6 para. 1 lit. f)

4. To whom we disclose the data

We may disclose your data, strictly for the purposes mentioned above, to:

  • Courier service providers, for the delivery of physical products;
  • Payment processors, for secure collection of order values;
  • IT, web hosting and maintenance service providers, who manage the Site's infrastructure;
  • Email marketing and communication service providers, if you have subscribed to the newsletter or are included in a course group;
  • Accountants and auditors, for fulfilling financial-accounting obligations;
  • Public authorities, when required by law.

These recipients process data as authorized persons, based on contracts that impose confidentiality and security obligations on them.

5. Transfer of data outside the EU/EEA

Some tools we use (e.g., social media platforms, analytics or email services) may involve data transfers to countries outside the European Economic Area. These transfers are carried out only with adequate safeguards, in accordance with GDPR (e.g., standard contractual clauses adopted by the European Commission).

6. How long we keep the data

We only keep the data for as long as necessary for the purposes for which it was collected:

  • data related to orders and invoices – for the period required by tax and accounting legislation (generally 10 years);
  • account data – for the duration of your account's existence;
  • marketing data – until consent is withdrawn;
  • browsing data/cookies – for the periods specified in the Cookie Policy.

7. Your rights

As a data subject, you have the following rights under GDPR:

  • right of access to your data;
  • right to rectification  of inaccurate or incomplete data;
  • right to erasure ("right to be forgotten"), under the conditions of the law;
  • right to restriction of processing;
  • right to data portability;
  • right to object to processing, including to marketing;
  • right to withdraw your consent at any time, without affecting the legality of previous processing;
  • right not to be subject to an automated decision, including profiling, with significant effects.

You can exercise these rights by sending a request to acnailsacademy@gmail.com. We will respond within one month at the latest from receiving the request.

8. Complaint to the supervisory authority

If you believe that the processing of your data violates the legislation, you have the right to file a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP):

  • B-dul G-ral. Gheorghe Magheru no. 28-30, Sector 1, Bucharest
  • Email: anspdcp@dataprotection.ro
  • Web: www.dataprotection.ro

9. Data security

We apply appropriate technical and organizational measures to protect your data against unauthorized access, loss, destruction or disclosure. However, no data transmission over the internet can be 100% guaranteed; we encourage you to protect your authentication data and not disclose it to third parties.

10. Cookies

The Site uses cookies and similar technologies. For details on the types of cookies, purposes and how you can manage your preferences, please consult the Cookie Policy available on the Site.

11. Minors

The Site and our services are intended for persons aged at least 18 years. We do not knowingly collect data of minors under 16 years of age without the consent of the holder of parental responsibility.

12. Policy changes

We may periodically update this Privacy Policy. The current version is the one published on the Site, with the date of the last update indicated at the beginning. We encourage you to consult it regularly.

For any questions regarding the processing of your data, you can contact us at acnailsacademy@gmail.com or at +40 755 301 633.