This page explains what personal data we collect from you when you sign up for a course on learning.viantoproperties.ro, why we collect it, how we use it, and what your rights are under the EU General Data Protection Regulation (GDPR) and Romanian Law 190/2018.
1. What data we collect
When you fill in the access form for a course, we ask you for:
- Name - so we can address the email to you
- Email address - to send you the access link and (rarely) follow-up about the course
- Professional role - to understand who is interested in this content
- Use case (optional) - what you would use the course for
- Willingness to pay band - to help us decide whether to build similar paid material in the future
We also automatically collect:
- IP address and browser user agent - for basic security, abuse prevention and audit logging
- Access token cookie (named
vianto_learning_token) - so your browser remembers you for 1 year and you do not need to re-enter the form on this device - Analytics - we use Google Analytics 4 to count pageviews and understand which modules people read. GA4 is configured with IP anonymization and stores data on Google servers
2. Legal basis
We process your data based on your explicit consent (Art. 6(1)(a) GDPR), which you give by ticking the checkbox in the form. You can withdraw consent at any time by emailing us (see section 7).
3. How we use your data
- To send you the access link to the course material
- To grant your browser persistent access via the cookie
- To occasionally reach out for feedback on the course you signed up for, or to let you know about new courses on similar topics
- To aggregate willingness-to-pay and role data for product decisions (always in anonymous, aggregated form when shared externally)
4. Who has access to your data
Your data is stored on a MySQL database hosted at our European cPanel provider. The only person with direct access is Antal Steflea (antal.steflea@vianto.ro). We use the following processors to deliver the service:
- Microsoft 365 (EU) - to send the access email from antal.steflea@vianto.ro
- Google Analytics 4 (Google Ireland Ltd) - for anonymous pageview statistics
- Telegram (Telegram FZ-LLC) - we receive an internal notification when you sign up (your name, email and role)
We do not sell your data and we do not share it with third parties for marketing purposes.
5. How long we keep it
We keep your data for as long as you have an active interest in our courses, and for a maximum of 2 years after your last interaction. You can request deletion at any time and we will delete your record within 30 days.
6. International transfers
Most processing happens within the EU. Some processors (Google Analytics, Telegram) may transfer data outside the EU under Standard Contractual Clauses or equivalent safeguards.
7. Your rights
Under GDPR, you have the right to:
- Access the data we hold about you
- Correct inaccurate data
- Request deletion (right to be forgotten)
- Restrict processing
- Receive your data in a portable format
- Withdraw consent at any time
- Lodge a complaint with the Romanian Data Protection Authority (ANSPDCP, www.dataprotection.ro)
To exercise any of these rights, email us at antal.steflea@vianto.ro with the subject line "GDPR request". We will respond within 30 days.
8. Cookies
We use a single first-party cookie:
vianto_learning_token- HttpOnly, Secure, SameSite=Lax, expires after 1 year. Holds your unique access token so you do not have to fill in the form again on this device. You can delete it any time from your browser settings.
Google Analytics may set its own cookies (_ga, _ga_*). You can opt out of GA4 globally by installing the Google Analytics Opt-out add-on.
9. Changes to this policy
If we make material changes, we will notify you by email. Minor edits will only be reflected in the "Last updated" date at the top.
Questions about this policy? Email antal.steflea@vianto.ro.