TIBERIU GABRIEL
Let's Talk

Privacy Policy

Last Updated: October 6, 2026

This Privacy Policy explains how I, Tiberiu Gabriel, acting as data controller, collect, use and protect personal data when you visit tiberiugabriel.com or tiberiugabriel.ro and when you book a call through the scheduling system available on the website. This policy is issued in accordance with Regulation (EU) 2016/679 (the General Data Protection Regulation, "GDPR") and the applicable Romanian legislation.

1. Data Controller

The controller of your personal data is Tiberiu Gabriel. For any question regarding this policy or the processing of your personal data, you may contact me at contact@tiberiugabriel.com or contact@tiberiugabriel.ro.

2. Personal Data I Collect

2.1 Data collected automatically when you visit the website

  • Usage data: the pages viewed, the links clicked, the time spent on the website and the referring website.
  • Technical data: IP address (anonymised), browser type, device information and operating system.
  • Behavioural data: heatmaps and session recordings (via Microsoft Clarity), collected only with your consent.

2.2 Data you provide when booking a call

When you schedule a call through the booking form, I collect the following data:

  • Identification and contact data: first name, last name and email address.
  • Booking details: the selected call type, the date and time of the call, your time zone, your preferred language and, optionally, the information you choose to provide in the "Notes" field.
  • Payment data, for paid calls only: the payment status and the transaction identifier. Card details are entered directly on the payment page operated by Stripe; I do not receive or store them.
  • Security data: your IP address and an anti-bot verification token, used to protect the form against abuse.

Please do not include sensitive information (such as data concerning health) in the "Notes" field.

3. Purposes and Legal Bases for Processing

  • Scheduling and holding the call: I use your name, email address and booking details to verify your email address, schedule the call, send the confirmation, the video meeting link and any changes, and to contact you in connection with the requested call. Legal basis: taking steps at your request prior to entering into a contract and, for paid calls, the performance of the contract (Art. 6(1)(b) GDPR).
  • Payment processing and accounting, for paid calls: Legal basis: compliance with legal obligations in financial, accounting and tax matters (Art. 6(1)(c) GDPR).
  • Security of the booking system: preventing automated submissions, spam and abuse. Legal basis: my legitimate interest in protecting the website and its users (Art. 6(1)(f) GDPR).
  • Website analytics: Google Analytics and Microsoft Clarity are used only on the basis of the consent you give through the cookie banner (Art. 6(1)(a) GDPR). Essential performance monitoring (Vercel Speed Insights) is based on my legitimate interest in ensuring that the website functions correctly (Art. 6(1)(f) GDPR).

Before submitting the booking form, you are asked to confirm that you have read and agree to this Privacy Policy. Providing your name and email address is necessary in order to book a call; without this information, the booking cannot be completed.

4. Promotional Communications

The data provided through the booking form is not used to send commercial or promotional communications (such as newsletters or offers) without your prior, express and separate consent. Where such consent has been given, you may withdraw it at any time, free of charge, by writing to one of the addresses listed in section 1 or by using the unsubscribe option included in each such message.

5. Recipients of Personal Data

I do not sell, rent or trade your personal data. Your data is disclosed only to the service providers that process it on my behalf, and only to the extent strictly necessary:

  • Supabase: database hosting, on servers located in the European Union.
  • Vercel: website hosting and performance monitoring.
  • Google (Google Calendar and Google Meet): creating the calendar event and the video meeting link; your name and email address are included in the invitation.
  • Resend: sending transactional emails (email verification, booking confirmation and cancellation).
  • Stripe: processing payments for paid calls.
  • Cloudflare (Turnstile): anti-bot verification of the booking form.
  • Upstash: temporary limiting of the number of requests, based on IP address.
  • Google Analytics and Microsoft Clarity: website analytics, only with your consent.

Personal data may also be disclosed to public authorities where this is required by law.

6. International Data Transfers

Some of the providers listed above may process data outside the European Economic Area, including in the United States. In such cases, transfers take place on the basis of the safeguards provided by Chapter V of the GDPR, such as adequacy decisions of the European Commission (including the EU-U.S. Data Privacy Framework, for certified providers) or the Standard Contractual Clauses approved by the European Commission.

7. Data Retention

  • Booking data (first name, last name, email address and booking details) is retained until you request its deletion by email at contact@tiberiugabriel.com or contact@tiberiugabriel.ro. I will act on your request without undue delay and, in any event, within one month of receiving it. Once the request is processed, the data is deleted from my database and calendar; copies held in the technical logs of service providers are deleted in line with their own retention periods.
  • Financial and accounting records relating to paid calls are retained for the periods required by financial, accounting and tax legislation, even after a deletion request, to the extent that such retention is required by law.
  • Security data (the IP address used to limit requests) is retained only temporarily, for a few minutes.
  • Analytics data is retained in accordance with the retention periods set by Google Analytics and Microsoft Clarity.

8. Your Rights

Under the GDPR, you have the following rights:

  • the right of access to your personal data (Art. 15);
  • the right to rectification of inaccurate or incomplete data (Art. 16);
  • the right to erasure of your data (Art. 17);
  • the right to restriction of processing (Art. 18);
  • the right to data portability (Art. 20);
  • the right to object to processing based on legitimate interest (Art. 21);
  • the right to withdraw your consent at any time, without affecting the lawfulness of processing carried out before its withdrawal (Art. 7(3));
  • the right to lodge a complaint with the Romanian supervisory authority, the National Supervisory Authority for Personal Data Processing (ANSPDCP, www.dataprotection.ro), or with the supervisory authority of your Member State of residence (Art. 77).

To exercise these rights, please write to one of the addresses listed in section 1. Requests are handled free of charge. I may ask for additional information where this is necessary to confirm your identity.

Your personal data is not subject to automated decision-making, including profiling, that produces legal effects concerning you.

9. Data Security

I apply appropriate technical and organisational measures to protect your personal data, including encrypted connections (HTTPS), restricted access to data, anti-bot protection and request rate limiting.

10. Changes to This Policy

This policy may be updated periodically to reflect legislative changes or changes in the services offered. The date of the latest update is shown on this page.

11. Contact

For any question regarding this policy or to exercise your rights, please contact me at:

Email: contact@tiberiugabriel.com or contact@tiberiugabriel.ro