Privacy policy
Last updated: 13 October 2026
Data controller
The controller of your personal data is Grigore Ardelean PFA, registered at Strada Fântâna Rece nr. 1A, Săliștea de Sus, Maramureș, România, which runs the Aqua Iza swimming school. For any question about data processing, message us on WhatsApp or call +40 753 418 330.
What data we collect
We collect only the data needed to enrol a child and to reply to you: your name and the child's name, the child's age, your phone number, the group and times chosen, and any health or fear-of-water information you share for the safety of the lessons. When you message us on WhatsApp, we receive your phone number and the content of your message.
Purpose of processing
We use the data to form groups, manage enrolments and lesson packages, inform you about the timetable or cancellations and adapt the lessons to the child's needs. We do not sell or rent your data to third parties and we send no marketing messages without your consent.
Legal basis
We process data on the basis of pre-contractual steps and contract performance (enrolment and the lessons), our legitimate interest in running the swimming school, and legal obligations (for example, accounting records). Health information is processed only with your explicit consent, given by sharing it, and only for the safety of the lessons.
Who we share data with
We may share data with providers who help us run the school and this site, acting as our processors: the WhatsApp messaging service (Meta) and the site's hosting provider (Cloudflare). We currently use no analytics or advertising services. We may also disclose data to public authorities where the law requires it.
International transfers
Some providers (for example, WhatsApp/Meta) may process data outside the European Economic Area. In those cases the transfer relies on the safeguards required by the GDPR, such as the European Commission's standard contractual clauses or an adequacy decision.
Data retention
We keep data only as long as necessary for the purposes above or as the law requires, then delete or anonymise it. Contact details of students are kept while they are enrolled and for at most 12 months after their last lesson; accounting documents are kept for the periods Romanian law requires.
Data security
We take reasonable technical and organisational measures to protect your data against unauthorised access, loss or disclosure. Access is limited to the coach and the people who need it to organise the lessons.
Children's data
The lessons are for children, and children's data is given to us by parents or legal guardians. We collect no data directly from children through this site. We publish no photos or videos of children without the parent's written consent.
Cookies
The site uses only essential cookies and the browser's local storage. The details are in the Cookie Policy.
Your rights (GDPR)
You have the right of access, rectification, erasure, restriction, portability and objection regarding your data, as well as the right to withdraw your consent at any time. To exercise these rights, message us on WhatsApp or call +40 753 418 330. We reply within one month and may ask you to confirm your identity. You also have the right to lodge a complaint with the Romanian supervisory authority (ANSPDCP, www.dataprotection.ro).
Changes to this policy
We may update this policy from time to time. The current version is the one published on this page, with the last-updated date above.