Privacy policy

This policy explains what personal data I collect through this website, why, and what your rights are. I keep it simple: I only collect what I need to reply to you and to connect you with opportunities, and I never sell your data.

Who is responsible for your data

The data controller is Online Image OÜ, Ahtri tn 12, 15551 Tallinn, Estonia, registry code 17019601, represented by Andreea Rusu. You can reach me at info@andreea-rusu.com.

What I collect, and why

I only collect what you type into the forms on this website:

• “Reach out” form (Work with me): your role, what you need help with, your name, email, the name of your space and its website. I use it to reply to your request and prepare a proposal. Legal basis: steps you ask for before a possible contract (GDPR art. 6(1)(b)).
• Free workbook form: your name, email and role. I use it to give you the workbook and, if you agree, send you related resources. Legal basis: your consent (art. 6(1)(a)).
• Join the community (creators and community builders): your name, email, whether you join as a creator or community builder, a link to your social profile, website or portfolio, and what you tell me about yourself. I use it to give you access to the opportunities directory and to email you about new opportunities. Legal basis: your consent, which you give by ticking the box (art. 6(1)(a)).
• Contact form: your name, email and message. I use it to answer you. Legal basis: my legitimate interest in replying to messages (art. 6(1)(f)).

When you visit the website, the hosting provider automatically processes technical data such as your IP address and browser type, to deliver the pages and keep the site secure. To count visits, the website uses Cloudflare Web Analytics, a privacy-friendly tool that uses no cookies and does not track individual visitors. The website uses no advertising tools.

Who processes the data for me

• Netlify, Inc. (United States) hosts the website and stores form submissions.
• Google Ireland Ltd. provides my email (Google Workspace), where form notifications arrive. The website also loads its fonts from Google Fonts, which means your browser connects to Google's servers.
• Cloudflare, Inc. manages the domain name and provides anonymous visitor statistics (Cloudflare Web Analytics).
• MailerLite (UAB MailerLite, Lithuania, EU) sends the workbook and welcome emails. Only your first name and email are shared with it, and only from the workbook and Join the community forms.

Some of these companies are based in the United States. Transfers are protected by the EU–US Data Privacy Framework or the European Commission's Standard Contractual Clauses.

If I connect you with a coliving space, I'll only share your details with them after asking you first.

How long I keep it

I keep messages and requests for as long as needed to handle them, and at most 2 years after our last contact unless we work together (then for as long as accounting law requires). I keep your details in the opportunities community until you ask me to remove you or unsubscribe.

Your rights

You can ask me at any time to see, correct, delete or export your data, to limit how I use it, or to object to it. If you gave consent, you can withdraw it at any time, and it won't affect anything done before. Just write to info@andreea-rusu.com and I'll reply within one month.

You also have the right to complain to a data protection authority, for example the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, aki.ee) or the authority where you live.

Changes

If this policy changes, I'll update this page and the date below.

Last updated: November 2026