Privacy policy

Data controller

The data controller is Popovici Alexis — Legal entity (PFA) in course of registration with the Romanian National Trade Register Office (ONRC). For inquiries or to exercise your data protection rights, please contact us via the website contact form.

Data we process

• Inquiry data: name, company, email, telephone, selected services and message.
• Subsequent correspondence and information needed to prepare a proposal.
• Technical data strictly needed for security and operation, such as IP address, timestamps and error logs retained for a limited period.

Purposes and legal bases

• Responding to inquiries and pre-contractual steps — Article 6(1)(b) GDPR.
• Website security, abuse prevention and defence of rights — legitimate interests, Article 6(1)(f) GDPR.
• Compliance with tax, accounting or legal duties — Article 6(1)(c) GDPR.
• Marketing communications only if introduced later and supported by a lawful basis.

Recipients and transfers

Data may be accessed by authorised staff and providers supporting hosting, email, security or technical services under confidentiality obligations. We do not sell personal data.

For transfers outside the EEA, we will use an appropriate legal mechanism and supplementary safeguards where required.

Retention

• Inquiries not leading to a collaboration: up to 12 months after the last response, unless longer retention is needed to defend a claim.
• Contractual, tax and accounting data: for the period required by applicable law.
• Technical security logs: up to [30/90] days, except where an incident is being investigated.

Your rights

Subject to the GDPR, you may request access, rectification, erasure, restriction, objection, portability and withdrawal of consent. You may complain to the Romanian supervisory authority — dataprotection.ro.

We generally respond within one month and may request reasonable information to verify identity.

Required data and automated decisions

Required fields are necessary for us to respond. We do not use inquiry data for solely automated decisions producing legal or similarly significant effects.

Security and updates

We apply reasonable technical and organisational safeguards. No online transmission is entirely risk-free.

This policy may be updated when our services or legal requirements change.