Privacy Policy
This page explains how personal data is handled when you visit mariacristinailiescu.com or write to me. The site is a portfolio: it has no forms, no advertising and no user accounts, and its visit statistics are anonymous and cookie-free, so very little data is involved.
Data controller
Maria Cristina Iliescu, Italy. Email: hello@mariacristinailiescu.com.
What data is processed
- Technical data. When you open a page, your browser sends some information to the server that delivers the site: IP address, browser and device type, date and time, the page requested. This is needed to show you the site and to protect it from attacks. It is processed by the hosting provider and is not used to identify you or to build a profile.
- Data you send me. If you write to me by email, I receive your address, your name if you include it, and whatever you write in the message.
- Visit statistics. Cloudflare Web Analytics counts visits and measures how fast pages load (page viewed, referring site, browser, country, loading times). It uses no cookies, does not store IP addresses and does not identify or follow you.
Why, and on what legal basis
- Delivering the site and keeping it secure: legitimate interest (Art. 6(1)(f) GDPR).
- Anonymous visit statistics, to see which pages are viewed and keep the site fast: legitimate interest (Art. 6(1)(f) GDPR).
- Answering your message and, if we work together, managing the project: your request and the steps before a contract (Art. 6(1)(b) GDPR).
Your data is not sold, not used for marketing and not subject to automated decisions or profiling.
Who handles the data
- Cloudflare, Inc. hosts and delivers the site (hosting, network and DNS) and provides the anonymous visit statistics. Cloudflare privacy policy.
- Google Ireland Ltd provides the email service (Google Workspace). Google privacy policy.
Both may process data outside the European Union, including in the United States. They take part in the EU-U.S. Data Privacy Framework and use the Standard Contractual Clauses approved by the European Commission.
How long data is kept
- Technical data: only for the short time the hosting provider needs it for delivery and security, according to its own policy.
- Emails: for as long as needed to answer and to follow any project that comes from it. If a job is invoiced, the data required by tax law is kept for the period the law requires (in Italy, 10 years).
Links to other sites
The site links to my LinkedIn and Instagram profiles. Nothing from those platforms is loaded on this site: they only receive data if you click the link and open their page, and from then on their own privacy policies apply.
Your rights
Under the GDPR you can ask to access your data, correct it, delete it, limit its use, object to its use, or receive a copy of it. Just write to hello@mariacristinailiescu.com.
You can also lodge a complaint with a data protection authority: in Italy the Garante per la protezione dei dati personali, or the authority of the country where you live.
Changes
If the site changes in a way that affects your data, this page will be updated first. The date at the top shows the latest version.