Privacy Policy
Last updated: April 17, 2026
Who operates this site
This website (doinatonegari.com) is operated by Doina Tonegari, an integrative nutritionist practicing in Romania (the "operator", "we", "our"). The operator is the data controller for any personal data processed in connection with the site. For any privacy-related question, or to exercise the rights described below, write to guzundoina93@gmail.com.
What data we process
No data you submit directly. This site has no forms, no registration, no user accounts, no newsletter, and no comment system. You can browse the site without giving us any information. Hosting / server logs. Our hosting provider logs technical information necessary to deliver the site: your IP address, browser user-agent, the URL requested, and the timestamp. These logs are used to operate the site, prevent abuse, and troubleshoot errors. Analytics — only if you consent. If you click "Accept" on the cookie banner, we load Vercel Web Analytics and Vercel Speed Insights. They collect aggregated usage and performance data — page views, referrer, device type, approximate location derived from your IP, and Core Web Vitals. They do not set advertising or cross-site tracking cookies, and they do not build a profile of you across websites. Contact via email or WhatsApp. If you write to us through the email or WhatsApp link on the site, your message is transmitted through the respective provider (Google for Gmail, Meta Platforms for WhatsApp) under that provider's own terms. We process the content of your message only to respond to your inquiry.
Legal bases (GDPR Art. 6)
Hosting / server logs: our legitimate interest in operating and securing the site (Art. 6(1)(f)). Analytics: your explicit consent (Art. 6(1)(a)), collected through the cookie banner. You can withdraw consent at any time; withdrawal does not affect processing that took place before it. Inquiries you send us: performance of a pre-contractual step at your request, or our legitimate interest in replying to you (Art. 6(1)(b) or (f)).
Processors and international transfers
We use the following processor: Vercel Inc. (United States) — hosting, Web Analytics, and Speed Insights. Vercel acts as our processor under its published Data Processing Addendum. Transfers of personal data to the United States rely on the EU Standard Contractual Clauses together with Vercel's supplementary technical and organizational measures. If you follow a link to WhatsApp, Instagram, or email the operator, those services process your data as independent controllers under their own privacy policies. We have no control over that processing.
How long we keep data
Hosting / server logs: kept for the default retention period applied by our hosting provider (typically up to 30 days) and then deleted automatically. Analytics data: retained according to Vercel's default retention for Web Analytics and Speed Insights. The data is aggregated and is not joined with identifying information. Emails or WhatsApp messages you send us: kept only as long as needed to answer your inquiry, and in any case no longer than 12 months, unless a longer period is required by law or you explicitly ask us to keep your message.
Your rights under the GDPR
You have the right to: • Access the personal data we hold about you; • Ask us to correct inaccurate data (rectification); • Ask us to delete your data (erasure / right to be forgotten); • Restrict or object to processing based on legitimate interest; • Receive your data in a portable format (data portability); • Withdraw your consent at any time — for analytics, use the cookie preferences link in the footer; analytics stop immediately. To exercise any of these rights, contact guzundoina93@gmail.com. We reply within the GDPR deadline (usually one month). You also have the right to lodge a complaint with the Romanian data-protection authority — Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP), dataprotection.ro.
Cookies and similar technologies
This site does not use advertising, marketing, or cross-site tracking cookies. Essential browser storage (always on). We use your browser's localStorage to remember two things: your cookie-consent choice (so the banner doesn't reappear on every page) and your theme preference (light / dark). These values stay on your device, are not transmitted to us, and do not identify you. Analytics (only after consent). Vercel Web Analytics and Speed Insights are cookie-less. To count unique visits they derive a daily-rotating hash from your IP address and browser user-agent; the raw inputs are not stored and no profile of you is built across sites. Vercel's own position is that these tools do not require a consent banner, but we load them only after you accept, as an additional safeguard. No language cookie. We deliberately do not set a cookie to remember your preferred language — the language is already in the URL, so a cookie would be redundant.
Children's data
This site is aimed at adults. We do not knowingly collect personal data from anyone under the age of 16. If you believe a minor has sent us personal data through a contact link, write to guzundoina93@gmail.com and we will delete it.
Changes to this policy
We may update this policy to reflect changes to the site or to applicable law. The "last updated" date at the top of this page shows the latest revision. If we make material changes, we will flag them visibly on the site for a reasonable period.