Privacy Policy

Crenza is a dietary guidance practice registered in Bucharest, Romania. This Privacy Policy applies to all visitors and enquirers who interact with the website at crenza.info and with the practice by email, telephone, or in-person consultation.

1. Data Controller

The data controller for personal information collected through this website is:

Crenza
Strada Hristo Botev nr. 84
Sector 3, 030236 Bucharest, Romania
Email: [email protected]
Telephone: +40 21 467 0935

2. Data We Collect

Crenza collects only the personal data necessary to respond to enquiries and administer consultation programmes. The categories of data collected include:

• Contact data: name, email address, and telephone number submitted via the enquiry form or provided during a consultation booking.
• Enquiry content: the content of messages submitted through the contact form, including programme preferences and questions directed to the specialist.
• Consultation records: food intake logs, dietary notes, activity records, and revision documents produced during and after consultation sessions, provided by the client.
• Usage data: anonymised browsing data collected via cookies (see Section 7). This data does not identify individual visitors.

Crenza does not collect sensitive personal data beyond what a client voluntarily provides in the context of a dietary guidance consultation. We do not request or store data relating to identity documents, payment instruments, or health conditions beyond the food and activity context of the consultation programme.

3. Purpose and Legal Basis

Personal data submitted through this website is processed for the following purposes:

• Responding to enquiries — legal basis: legitimate interest (Article 6(1)(f) GDPR). The practice has a legitimate interest in responding to consultation enquiries submitted voluntarily by visitors.
• Administering consultation programmes — legal basis: performance of a contract (Article 6(1)(b) GDPR). Once a consultation programme is agreed, processing of the client's intake and revision records is necessary to deliver the agreed service.
• Improving the website — legal basis: consent (Article 6(1)(a) GDPR). Anonymised usage data collected via analytics cookies is processed only where the visitor has given their consent through the cookie consent banner.

We do not use personal data for automated profiling or for any marketing purpose unrelated to a specific consultation enquiry.

4. Data Retention

Contact enquiry data (name, email, message content) is retained for 24 months from the date of submission, or for the duration of any active consultation programme, whichever is longer. At the close of this period, enquiry records are deleted from the practice's correspondence system.

Consultation programme records — intake logs, food-choice maps, revision archives — are retained for five years from the close of the programme, in accordance with Romanian commercial record-keeping requirements. Clients may request early deletion of consultation records by contacting the practice directly; deletion requests are processed within 30 calendar days.

Anonymised usage data collected via analytics cookies is retained for 13 months from the date of collection.

5. Third Parties

Crenza does not sell, rent, or share personal data with third parties for commercial purposes. Personal data may be shared in the following limited circumstances:

• Service providers: the practice uses third-party email and calendar services to manage consultation scheduling. These providers process data as data processors under written agreements that require them to comply with GDPR.
• Legal obligations: data may be disclosed to Romanian regulatory or judicial authorities where required by law.

Where third-party analytics cookies are used (with visitor consent), those providers — including Google Analytics — process anonymised usage data under their own published privacy terms. Crenza configures analytics tools to anonymise IP addresses and disable data sharing with advertising networks.

6. Your Rights

Under GDPR, visitors and clients have the following rights regarding their personal data:

• Right of access — to request a copy of the personal data held about you.
• Right to rectification — to request correction of inaccurate data.
• Right to erasure — to request deletion of personal data where there is no overriding legal basis for retention.
• Right to restriction — to request that processing be restricted while a dispute is resolved.
• Right to data portability — to receive personal data in a structured, machine-readable format.
• Right to object — to object to processing carried out on the basis of legitimate interest.
• Right to withdraw consent — where processing is based on consent, consent may be withdrawn at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact the practice at [email protected]. Requests are acknowledged within 5 working days and processed within 30 calendar days. Where a request cannot be fulfilled, a written explanation will be provided.

You also have the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) at www.dataprotection.ro.

7. Cookies

This website uses cookies to support core functionality and, where consent is given, to collect anonymised usage data for site improvement purposes. A detailed description of the cookies in use and the options available to manage them is set out in the Cookie Policy.

Cookie preferences can be reviewed and updated at any time using the Cookie Settings link in the footer of every page.

8. Contact and Policy Updates

Questions, requests, and complaints relating to this Privacy Policy should be directed to:

Crenza
Strada Hristo Botev nr. 84
Sector 3, 030236 Bucharest, Romania
Email: [email protected]
Telephone: +40 21 467 0935
Monday — Friday, 09:00 – 18:00

This policy was last revised in January 2026. Crenza reserves the right to update this policy to reflect changes in practice operations or applicable law. Material changes will be notified via a prominent notice on the homepage. Continued use of the website following such notice constitutes acceptance of the updated policy.