1. Controller and contact
Alexandra Durbaca is responsible for personal data processed through this website. Privacy questions or requests may be sent to alexandra@alexandradurbaca.com.
2. Information collected
Depending on how you use the website, we may collect your name, business email, phone number, company, role, countries, organisation profile, risk and insurance information, claims or incident context, messages and consent records. We also process security data such as a keyed IP hash, user-agent information, request time and technical logs. Optional analytics data is collected only after consent.
3. Why information is used
Information is used to respond to enquiries; conduct a preliminary risk or insurance review; retain lead and consent records; communicate with you; protect the website; prevent abuse; meet legal duties; improve the service where you consent to analytics; and establish, exercise or defend legal claims.
4. Legal bases
Depending on the context, processing may be necessary to take steps at your request before a contract, for our legitimate interests in operating a secure professional service, to comply with law, or on the basis of consent. You may withdraw consent for optional cookies at any time.
5. Sharing and international transfers
Information may be shared where relevant and lawful with professional advisers, insurers, brokers, underwriting agencies, risk specialists, technology and hosting providers, email providers and public authorities. We share only what is reasonably necessary and use appropriate safeguards for cross-border transfers where required.
6. Retention
Enquiries and advisory request records are retained only as long as needed for the purpose collected, professional follow-up, security, legal obligations and dispute management. Routine records are reviewed periodically. Security and rate-limit data is retained for shorter operational periods.
7. Your rights
Subject to applicable law, you may request access, correction, deletion, restriction, portability or objection; withdraw consent; and complain to the competent data-protection authority. We may need to verify your identity before acting and may retain information where law requires it.
8. Security
The website uses access controls, CSRF protection, rate limits, password hashing, secure sessions, security headers, restricted storage and audit-oriented administration. No internet service is risk-free; please use the forms only for information relevant to the enquiry.
9. Automated decisions and children
The website does not make solely automated decisions producing legal or similarly significant effects. It is intended for business users and is not directed to children.
10. Changes
This policy may be updated when processing practices, services or law change. The current version and effective date will remain available on this page.