Privacy on caeandros.com

Last updated: 19 July 2026

1. Who controls your personal data

The data controller is:

Cezar Andronache, operating publicly under the author name Cae Andros, Romania

For questions about this Privacy Policy or requests concerning your personal data, contact:

[email protected]

2. Personal data collected

Newsletter subscriptions

When you subscribe to the Cae Andros reader newsletter, the following information may be collected:

• your email address;
• your first name, when provided;
• your selected reading or content interests, when provided;
• your preferred language, when provided;
• the page or source through which you subscribed;
• the date, time, and version of the consent you provided;
• your subscription and confirmation status; and
• limited technical and security information needed to operate and protect the form.

A double opt-in process is used. Your subscription becomes active only after you confirm it through the confirmation email.

Contact enquiries

When you use the contact form, the following information may be collected:

• your name;
• your email address;
• the subject or category of your enquiry;
• the contents of your message; and
• limited technical and security information needed to prevent spam and abuse.

Please do not include sensitive personal data or confidential information unless it is necessary for your enquiry.

Technical information

When you access the website, hosting and security providers may process limited technical information such as:

• IP address;
• browser and device information;
• request timestamps;
• security signals; and
• information required to deliver the website and protect it against malicious activity.

3. How personal data is used

Personal data may be used to:

• manage newsletter subscriptions;
• send book news, publication announcements, release information, and occasional reader material;
• maintain consent and unsubscribe records;
• respond to enquiries submitted through the contact form or by email;
• manage correspondence connected with rights, press, reviews, partnerships, or professional opportunities;
• protect the website and its forms against spam, bots, fraud, and misuse;
• troubleshoot technical problems; and
• comply with applicable legal obligations or establish, exercise, or defend legal claims.

Contact-form details are not automatically added to the newsletter list. Newsletter messages are sent only to people who have separately subscribed and confirmed their subscription.

4. Legal bases for processing

Consent

Newsletter subscriptions and marketing emails are processed on the basis of your consent.

You may withdraw your consent at any time by using the unsubscribe link included in each newsletter or by contacting [email protected].

Withdrawal of consent does not affect processing that took place before the withdrawal.

Legitimate interests

Certain data may be processed where necessary for legitimate interests, including:

• responding to general correspondence;
• operating and securing the website;
• preventing spam, fraud, and abuse;
• maintaining accurate unsubscribe and suppression records; and
• managing legitimate professional or publishing-related communications.

These interests are considered against your rights and reasonable expectations.

Steps requested before a possible agreement

Where your enquiry concerns a possible agreement, licence, collaboration, rights transaction, service, or other professional arrangement, your information may be processed to take steps requested by you before entering into that arrangement.

Legal obligations and legal claims

Information may also be processed where necessary to comply with applicable law or to establish, exercise, or defend legal claims.

5. Service providers

The website uses carefully selected service providers that process information only as necessary to provide their services.

Cloudflare

Cloudflare is used for website hosting, content delivery, security, DNS services, website traffic measurement, and form protection through Cloudflare Turnstile.

Turnstile may process technical and security signals to distinguish legitimate visitors from automated or malicious traffic.

Brevo

Brevo is used to:

• manage newsletter subscriptions;
• maintain the newsletter contact list;
• send confirmation, welcome, and newsletter emails;
• maintain unsubscribe and suppression records; and
• send website contact notifications and automated receipt acknowledgements.

Email services

Email correspondence sent to Cae Andros domain addresses may be processed through the email service used to receive, store, and reply to messages.

These providers may act as processors or, for certain processing activities, as independent controllers under their own privacy terms.

Personal data is not sold.

6. International data transfers

Some service providers or their subcontractors may process information outside Romania or the European Economic Area.

Where required, providers use recognised safeguards for international transfers, such as adequacy decisions, Standard Contractual Clauses, or other mechanisms permitted under applicable data-protection law.

7. How long information is retained

Newsletter information

Newsletter information is retained while your subscription remains active.

When you unsubscribe, your active newsletter profile will no longer be used for marketing. Limited information may remain on a suppression list so that your unsubscribe request continues to be respected and you are not accidentally resubscribed.

Contact messages

Contact messages are normally retained only for as long as reasonably necessary to respond to and manage the enquiry.

Messages connected with an ongoing professional, contractual, rights, tax, accounting, or legal matter may be retained for longer where necessary for that purpose or where required by law.

Technical, analytics, and security information

Technical, analytics, and security records are retained only for the period needed to measure website performance, operate, troubleshoot, and protect the website, subject to the retention practices of the relevant service providers.

Data may be aggregated, anonymised, or deleted when it is no longer required.

8. Your data-protection rights

Subject to the conditions and exceptions provided by applicable law, you may have the right to:

• request access to your personal data;
• request correction of inaccurate or incomplete data;
• request deletion of your data;
• request restriction of processing;
• receive certain data in a portable format;
• object to processing based on legitimate interests;
• withdraw consent at any time; and
• lodge a complaint with a data-protection authority.

Requests may be sent to:

[email protected]

You may be asked to provide information necessary to verify your identity before a request is completed.

Requests will normally be answered within one month, as required by applicable data-protection law. That period may be extended where permitted for complex or numerous requests.

You may also lodge a complaint with the Romanian supervisory authority:

Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal — ANSPDCP

You may also contact the competent supervisory authority in the EU or EEA country where you live, work, or believe an infringement occurred.

9. Cookies, security technologies, and analytics

The website does not use advertising pixels, behavioural advertising, or cross-site advertising trackers.

Cloudflare and Cloudflare Turnstile may use necessary technical mechanisms to deliver and secure the website and to distinguish legitimate visitors from automated or malicious traffic.

The website uses Cloudflare Web Analytics to obtain aggregated information about website traffic, referral sources, browser and device categories, visitor countries, and page performance.

According to Cloudflare, Cloudflare Web Analytics is designed to provide privacy-focused website measurement without tracking individual visitors across websites or building advertising profiles.

The website does not currently use non-essential advertising or behavioural-tracking cookies.

If optional analytics, advertising technologies, or other non-essential cookies are introduced later, this Privacy Policy will be updated and, where legally required, those technologies will not be activated before the visitor provides consent.

10. Newsletter communications

Every marketing newsletter includes an unsubscribe link.

Unsubscribing stops future marketing messages, although essential messages concerning the administration of your request or subscription may still be sent where necessary.

Transactional messages, such as subscription-confirmation emails or contact-form acknowledgements, are not marketing subscriptions.

11. Children’s privacy

The website and newsletter are not specifically directed to children under the age of 16, and personal data from children under 16 is not knowingly collected through the newsletter.

A parent or legal guardian who believes that a child has submitted personal information may contact [email protected] to request its deletion.

12. External links

The website may contain links to third-party platforms, retailers, or websites, including book retailers.

Those third parties process information under their own privacy policies. This Privacy Policy does not govern third-party websites or services reached through external links.

13. Security

Reasonable technical and organisational measures are used to protect personal data against accidental loss, unauthorised access, misuse, alteration, or disclosure.

However, no internet transmission or storage system can be guaranteed to be completely secure.

14. Changes to this policy

This Privacy Policy may be updated when the website, forms, newsletter services, service providers, analytics, publishing activities, or applicable legal requirements change.

The latest version will always be published on this page, together with its most recent update date.

15. Contact

For privacy questions or requests concerning your personal data:

[email protected]