Privacy Policy

The data controller is Paraschiv Cristian Vasile PFA, a sole trader registered in Romania under fiscal code RO46731270, VAT number RO46791752. Enquiries about this policy or about your personal data can be sent through the contact form and are answered within 30 days.

This site collects only what is needed to answer enquiries. There is no advertising network, no third-party analytics profiling, and no sale of data to anyone.

• Contact form submissions: your name, e-mail address, optional company name, the enquiry type and budget range you select, and the message you write.
• Technical request data: IP address, browser user agent and timestamps, recorded in server logs for security and abuse prevention.
• Preference data: your chosen language and colour theme, stored locally in your browser and never transmitted to a server for identification.

Contact form data is processed on the basis of your consent and of the steps necessary before entering into a contract (Article 6(1)(a) and 6(1)(b) GDPR), for the sole purpose of replying to and discussing your enquiry.

Server logs are processed on the basis of legitimate interest (Article 6(1)(f) GDPR) in keeping the site available and protecting it from abuse.

Enquiries that do not lead to a project are deleted within 24 months. Where an enquiry becomes a contract, the associated records are kept for as long as Romanian accounting and tax law requires. Server logs are rotated and discarded within 90 days.

Personal data is not sold, rented or traded. It is shared only with the service providers needed to operate the site and correspond with you — specifically the hosting provider and the e-mail delivery provider, each acting as a processor under contract and hosting data within the EU or under an equivalent transfer safeguard.

This site sets no advertising or tracking cookies. A single session cookie is used to keep the contact form secure against cross-site request forgery, and your language and theme preferences are stored in your browser's local storage. None of these are used to profile you, and no consent banner is required for them.

Under the GDPR you may request access to your personal data, its correction or erasure, restriction of processing, a portable copy, and you may object to processing or withdraw consent at any time. Send the request through the contact form and it will be handled within 30 days at no cost.

If you believe your data has been handled unlawfully, you may lodge a complaint with the Romanian supervisory authority, ANSPDCP (dataprotection.ro).

All traffic to this site is encrypted in transit with TLS. Stored enquiries are held on access-controlled infrastructure, backed up, and accessible only to the controller.