Privacy policy

Last updated: 2 November 2026

This policy explains what personal data we process when you visit the site or contact us, why we process it and what rights you have under Regulation (EU) 2016/679 (the “GDPR”).

1. Data controller

• PANAIT ALEXANDRU-ȘTEFĂNEL PERSOANĂ FIZICĂ AUTORIZATĂ (Romanian sole trader)
• Tax ID (CUI): 49401455
• Email: alexpanait23@yahoo.com
• Phone / WhatsApp: +40 733 119 220

2. What data we process

Data you send us. The site has no forms and doesn't ask you to create an account. If you contact us by email or WhatsApp, we process the data you choose to send: your name, email address, phone number, company name and the content of your message, including any attached files.

Technical data. When you visit the site, our hosting provider, Cloudflare, automatically processes technical data such as your IP address, browser and device type, the page you visit and the date and time of the visit. This is needed to show you the site and to protect it from attacks. We don't use traffic analytics, marketing pixels or personalised advertising.

3. Why we process data and on what legal basis

• To reply to you and prepare a quote or collaboration: Art. 6(1)(b) GDPR (steps taken at your request before a contract) and, where relevant, Art. 6(1)(f) (our legitimate interest in replying to messages we receive).
• To carry out a collaboration, if you become a client: Art. 6(1)(b) GDPR (performance of a contract).
• To meet our legal obligations in accounting and tax, such as issuing and keeping invoices: Art. 6(1)(c) GDPR.
• To keep the site secure: Art. 6(1)(f) GDPR (our legitimate interest in keeping the site safe).

4. Who we share data with

We don't sell or rent your data. It may reach, only as far as needed:

• Cloudflare, Inc.: hosting and security of the site;
• the communication services you choose to contact us with, such as your email provider or WhatsApp (Meta);
• our accountant, banks and public authorities (for example the Romanian tax authority, ANAF), when the law requires it or when needed for a collaboration.

5. Transfers outside the European Economic Area

Some of the providers above, such as Cloudflare or Meta, may process data outside the EEA, including in the United States. In these cases, the transfer relies on the safeguards set out in the GDPR, such as the EU–US Data Privacy Framework or the standard contractual clauses approved by the European Commission.

6. How long we keep data

• Messages that don't lead to a collaboration: as long as needed to reply, then for no more than 2 years.
• Data related to a collaboration: for the length of the collaboration and then as long as needed for possible claims.
• Accounting and tax documents: for the period required by law.
• Technical data processed by Cloudflare: according to Cloudflare's policies, usually for a short time.

7. Your rights

Under the GDPR, you have the right to:

• find out whether we process data about you and get a copy of it (access);
• ask us to correct wrong or incomplete data (rectification);
• ask us to delete your data (“right to be forgotten”), within the limits of the law;
• ask us to restrict the processing;
• receive your data in a structured format and send it to another controller (portability);
• object to processing based on our legitimate interest;
• file a complaint with the Romanian data protection authority (ANSPDCP), www.dataprotection.ro.

To use any of these rights, write to us at alexpanait23@yahoo.com. We reply within one month of receiving your request.

8. Automated decisions and children

We don't make decisions based only on automated processing and we don't do profiling. The site isn't aimed at children under 16 and we don't knowingly collect data about them.

9. Security

The site is served only over a secure connection (HTTPS). We take reasonable steps to protect the data we receive against unauthorised access, loss or change.

10. Changes

We may update this policy when the way the site works or the law changes. The version in force is the one published on this page.