Privacy Policy

Last updated: March 20, 2026

Protecting your personal data is important to us. This policy describes how we collect, use, and protect your data, in accordance with the General Data Protection Regulation (GDPR – EU Regulation 2016/679) and applicable national legislation.

1. Data Controller

The personal data controller is Daniel Horobeanu, based in Romania. To exercise your rights or for questions regarding data processing, you can contact us through the contact form available on the site.

2. Data Collected

Through the contact form, we collect the following data: your name, email address, the message sent, and your IP address (for anti-spam protection). We do not collect sensitive data and do not use tracking or analytics tools.

3. Purpose of Processing

Data is processed exclusively to: (a) respond to your messages and inquiries, (b) protect against spam and abuse.

4. Legal Basis

Data processing is based on: your explicit consent (Art. 6(1)(a) GDPR) – given by checking the consent box when submitting the form, and our legitimate interest (Art. 6(1)(f) GDPR) – for anti-spam protection through IP address collection.

5. Recipients and Sub-processors

Your data may be shared with: Resend (email delivery service) and the hosting provider. We do not sell, rent, or transfer your data to third parties for marketing purposes.

6. Retention Period

Contact form data is retained for the duration necessary to fulfill the purpose for which it was collected. You can request deletion at any time.

7. Your Rights

Under GDPR, you have the following rights: right of access to your data, right to rectification of inaccurate data, right to erasure ("right to be forgotten"), right to restriction of processing, right to data portability, right to object to processing, right to lodge a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP) – www.dataprotection.ro.

8. Data Security

We implement appropriate technical and organizational measures to protect your data against unauthorized access, loss, or accidental destruction.

9. Automated Decisions

We do not use automated decision-making processes or profiling based on your personal data.