Privacy policy

The data controller is HelloAttila (“we”). You can write to us at any time at hello@helloattila.com with any question about your data, or call us on +40 754 616 005. We are based in Odorheiu Secuiesc, Harghita County, Romania.

Booking the free audit. When you book a call through the form on the site, we collect your name, email address, phone number, optional message, the day and time you picked, the language you use the site in, your browser’s time zone and the source of your visit (the site you came from and the link’s utm_ parameters, if any — nothing is stored in your browser for this). We use them to schedule the call, send you the calendar invitation and prepare for the conversation. Legal basis: steps taken at your request before a possible contract (Art. 6(1)(b) GDPR).

The “Send a message” form. If you write to us through the form under the calendar, we collect your name, email address, phone number (optional), message, the page language and the source of your visit. The message reaches our inbox by email so we can reply. Legal basis: the same steps at your request (Art. 6(1)(b) GDPR) or, for questions unrelated to working together, our legitimate interest in replying (Art. 6(1)(f)).

Technical data. Like every website, we receive your IP address and basic details of your browser’s request. We use them for security: we limit the number of bookings and messages per minute from the same address and check, through Cloudflare Turnstile, that the form is not being submitted by a bot. Legal basis: our legitimate interest in keeping the site working and free of abuse (Art. 6(1)(f) GDPR).

Visitor statistics. We count visits with Cloudflare’s statistics (including Cloudflare Web Analytics), without cookies and without identifying you: pages viewed, country, device type, the site you came from and page speed, in aggregate only. Legal basis: our legitimate interest in knowing whether the site works and is useful (Art. 6(1)(f) GDPR).

Correspondence. If you email us, message us on WhatsApp or call us, we use the message and your contact details only to reply.

We collect no data from other sources, we do no profiling and we make no automated decisions that affect you.

Your data is processed by a few providers without which the site and the bookings would not work:

• Google (Google Ireland Ltd.) — your booking becomes an event in our Google Calendar with you as a guest; Google emails you the invitation together with a Google Meet link for the call. Your name, email, phone number and message appear in that event. Google may also process data in the United States, under the EU–US Data Privacy Framework and standard contractual clauses.
• Cloudflare (Cloudflare, Inc.) — hosts the site, runs the booking and the message form, forwards email sent to hello@helloattila.com, and counts visits without cookies. Cloudflare sees your IP address and your requests to the site, uses them for rate limiting and the Turnstile check, and keeps technical logs for a short time (a matter of days).
• Google, Gmail — messages sent through the form and emails to hello@helloattila.com arrive in our Gmail inbox.
• WhatsApp (WhatsApp Ireland Ltd.) — only if you choose to write to us there; the conversation follows WhatsApp’s rules.

The site’s typefaces are hosted on the site itself, so no request goes to Google when a page loads. We do not sell or rent personal data, we do not use it for advertising, and we pass it to no other third party unless the law requires it.

The site connects, through OAuth, only to HelloAttila’s own Google Calendar, to see which slots are taken and to create the booking event. We do not access visitors’ Google accounts and never ask for access to them. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

The site uses no tracking, advertising or analytics cookies. The only thing we save in your browser is the language you chose (in localStorage), so the right version opens next time. Cloudflare Turnstile may use strictly necessary cookies for its bot check; they are not used for tracking.

We keep bookings (calendar events), messages sent through the form and our correspondence for as long as the conversation lasts. If we don’t end up working together, we delete them within 12 months of our last contact; if we do, we keep them for the duration of the work and then for at most 2 years after our last contact, after which we delete them — except for documents the law requires us to keep longer (accounting records, for example). Cloudflare’s technical logs are deleted automatically after a few days, and the per-IP attempt counter after at most a minute. If you want your booking or message deleted sooner, an email is enough.

You have the right to ask for access to your data, to have it corrected or deleted, to restrict its processing, to receive it in a portable format and to object to processing based on legitimate interest. Write to hello@helloattila.com and we will answer within 30 days. If you are not satisfied, you can complain to the supervisory authority in your country; in Romania that is the National Supervisory Authority for Personal Data Processing (ANSPDCP, dataprotection.ro).

The site loads only over HTTPS, access to the calendar and to correspondence is protected by authentication, and the booking and message forms are guarded by rate limiting and a bot check. No method of transmission over the internet is completely secure, however.

The site is aimed at businesses and is not intended for anyone under 16. We do not knowingly collect data about children.

We may update this policy when the site or the law changes. The current version, with its date, is always published here.