Privacy Policy (GDPR)

What data we process

• Contact data (if you contact us): name (optional), email, phone (optional), message.
• Technical data: IP, browser, device, pages visited, security logs.
• Preferences (e.g., language) and cookies, based on your settings.
• Support/donations (if you choose): transaction identifiers confirmed by the payment processor.

Purposes and legal bases

• Communication: we respond to requests/messages. (legal basis: legitimate interest or steps at your request)
• Operation & security: anti-abuse protection, technical logs, maintenance. (legal basis: legitimate interest)
• Analytics: we measure site usage. (legal basis: consent (cookie banner))
• Support/donations: we process your support request and keep minimal records. (legal basis: performance of transaction/legal obligations as applicable)

Recipients and processors

Data may be accessed strictly as necessary by hosting, maintenance, email providers, analytics services (if you consent) and payment processors (if you use donations).

Transfers outside EU/EEA

If we use services outside the EU/EEA, we apply appropriate safeguards (e.g., standard contractual clauses) where applicable.

Retention periods

• Contact messages: until resolved + justified archiving (e.g., 12–24 months).
• Security logs: limited period (e.g., 30–180 days).
• Donation/support records: as required by applicable legal obligations, if records exist.

Your rights

You have the right to access, rectification, erasure, restriction, objection, portability (where applicable), and withdrawal of consent for consent-based processing.

Exercise rights: [email@domeniu.ro]

Complaints

If you believe your rights were violated, you may lodge a complaint with the Romanian DPA (ANSPDCP).
www.dataprotection.ro

Security

We apply reasonable technical and organizational measures (access control, updates, backups, monitoring) proportionate to risks.

Changes

We may update this policy. The current version is published with the last updated date.