Privacy Policy
Last Updated: October 2026
This Privacy Policy explains how I, Florin Șerban, operating through Șerban A. Florin PFA (“I”, “me”, or “my”), collect, use, and protect your personal data when you visit https://guitarmasterpath.com (the “Website”) or book online guitar instruction with me.
I am committed to protecting your personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and applicable Romanian data protection regulations.
1. Data Controller Information
I am the sole data controller responsible for handling your personal data:
- Legal Entity: Șerban A. Florin PFA
- Registration / Tax ID (CUI): 33803022
- EU VAT ID: RO 55026962
- Location: Bucharest, Romania
- Contact Email: florinserban@guitarmasterpath.com
2. Personal Data I Collect
I collect only the personal information strictly necessary to schedule, conduct, invoice, and deliver your private guitar lessons:
- Identity & Contact Data: Your name, email address, and phone number.
- Billing & Transaction Data: Billing address, fiscal details (if purchasing through a company), and records of payments. Note: I never see, collect, or store your credit or debit card details on my server. All payments are processed directly by secure, PCI-compliant payment gateways.
- Communication & Practice Data: Any messages, practice recordings, video clips, or audio files you send me directly via email or WhatsApp for technical feedback.
- Technical & Analytics Data: IP address, browser type, device information, and pages visited, collected automatically through cookies and tracking tags when you navigate the Website.
3. Legal Grounds for Processing Your Data
I process your personal information strictly under the legal bases established by the GDPR:
- Contractual Necessity (Art. 6(1)(b) GDPR): To reserve your lesson slots, send Google Meet links, deliver 1-on-1 coaching, and review your practice assignments.
- Legal Obligation (Art. 6(1)(c) GDPR): To issue fiscal invoices under Romanian tax laws and maintain accounting records for fiscal authorities.
- Legitimate Interests (Art. 6(1)(f) GDPR): To maintain the security and technical health of my website and optimize the learning curriculum.
- Consent (Art. 6(1)(a) GDPR): For optional website analytics cookies, or if you explicitly consent in writing to have a student review or lesson clip displayed on the site.
4. Third-Party Services I Use
I do not sell, rent, or trade your personal information to anyone. I only share necessary data with trusted third-party platforms required to run my teaching practice and website:
- Hosting & Web Infrastructure: Hostinger (secure website and database hosting).
- Payment Processing: Integrated, certified payment gateways (such as Stripe, PayPal, or Netopia) that handle credit card transactions securely.
- Video Lessons: Google LLC (Google Meet) to conduct private online video sessions.
- Student Support & Feedback: Meta Platforms / WhatsApp Ireland Ltd. for optional direct communication and practice critique between sessions.
- Website Analytics: Google Tag Manager and Google Analytics to monitor anonymous traffic trends and site speed.
When services transfer data outside the European Economic Area (EEA), standard contractual clauses approved by the European Commission are used to ensure legal safeguards.
5. Data Retention
I keep your personal data only as long as required for practical and legal purposes:
- Student Profile & Lesson History: Kept while you are actively taking lessons with me and for up to 2 years after your last lesson in case you return or request past materials.
- Invoicing & Fiscal Records: Retained for the mandatory statutory duration required by Romanian tax law (typically 5 to 10 years).
- Direct Messages & Video Submissions: Practice clips and feedback sent via WhatsApp or email are kept on my secured private devices and can be deleted upon request or during routine maintenance.
6. Data Security
I use strict technical and organizational safeguards—such as SSL/TLS encryption across the entire website, secure password protocols, two-factor authentication, and encrypted devices—to protect your personal information against unauthorized access, alteration, or disclosure.
7. Your Legal Rights Under GDPR
Under European data protection law, you have specific rights regarding your personal information:
- Right of Access: You can request a copy of the personal data I store about you.
- Right to Rectification: You can ask me to correct inaccurate or outdated information.
- Right to Erasure (“Right to be Forgotten”): You can ask me to delete your personal data, provided I am not legally required to keep it for tax compliance.
- Right to Restrict Processing: You can request that I limit the processing of your data under specific conditions.
- Right to Data Portability: You can request your data in a structured, standard format.
- Right to Object: You can object to processing based on legitimate interests.
To exercise any of these rights, email me directly at florinserban@guitarmasterpath.com. I will handle and confirm your request within 30 days.
You also have the right to contact the Romanian supervisory authority if you have concerns about how your data is handled:
Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP)
B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, cod poștal 010336, București, România
Website:dataprotection.ro
8. Cookies
My Website uses cookies to deliver core functions, remember user preferences, and collect anonymous traffic stats. You can disable or clear cookies at any time through your web browser settings.
9. Changes to This Policy
I may occasionally update this Privacy Policy to reflect updates in how I deliver lessons or changes in legal regulations. Any revisions will appear on this page with an updated timestamp.
10. Contact
If you have any questions about this Privacy Policy or your personal information, reach out to me directly:
Florin Șerban (Șerban A. Florin PFA)
Email: florinserban@guitarmasterpath.com
Website: https://guitarmasterpath.com
