Privacy policy
Last updated: 16 September 2026
Who we are
This site is operated by Ungureanu Rareș Ștefan PFA, tax ID (CUI) 46000092, registered in Romania. For anything about your data, write to [email protected].
What we collect
- What you send us. Through the enquiry form: your name, email address, company, the services you are interested in, your budget range and your message. By email: whatever you choose to write. We only have it if you choose to send it.
- Technical data. IP address, browser type, the page you came from and the time of your visit. This is logged automatically by our infrastructure provider, in security logs, to protect the site.
- Traffic statistics. We use Cloudflare Web Analytics to count visits and see which pages are read. It sets no cookies, stores nothing on your device and does not follow you across sites.
We do not collect special categories of data, and we make no automated decisions that affect you.
If you write to us about working together
Through the work-with-us form you send us your name, email address, a link to your work, and optionally where you are, how you would like to work and a CV. We keep it for 12 months so we can contact you when a project matches what you do, and we use it for nothing else. It is stored in our mailbox, not in a database, and it is not shared with anyone. Write to us at any time and we delete it sooner. Basis: your consent, which you give by ticking the box on that page.
Why we use it, and on what basis
- To answer you and discuss a possible project. Basis: steps taken at your request before entering a contract, and our legitimate interest in replying to people who write to us.
- To keep the site safe and working. Basis: our legitimate interest in preventing abuse and attacks.
- To meet legal obligations, mainly accounting and tax ones, if you become a client. Basis: legal obligation.
How long we keep it
Messages and the related correspondence: 12 months after our last exchange, if it does not become a working relationship. Accounting records: the periods required by law. Technical logs: our infrastructure provider’s retention period.
Who else sees it
We do not sell or rent your data. It may be processed, strictly to provide their service to us, by:
- Cloudflare, Inc. — hosting and delivery of this site, and its visit statistics.
- Resend, Inc. — delivers the messages sent through the enquiry form to our inbox.
- Resend — delivers what the forms send to our mailbox.
- Our email provider — the mailbox we read and reply from.
- Our accountant and, on request and within the limits of the law, public authorities.
Transfers outside the European Union
Some of the providers above may process data outside the European Economic Area. Where that happens, the transfer relies on the European Commission’s standard contractual clauses or another mechanism provided for by the GDPR.
Your rights
You have the right of access to your data, and the rights to rectification, erasure, restriction of processing, portability and objection, as well as the right to withdraw consent where processing is based on it. Write to [email protected] and we will reply within one month.
If our answer does not satisfy you, you can complain to the Romanian Data Protection Authority (ANSPDCP), dataprotection.ro.
Security
The site is served over HTTPS only. Access to the messages we receive is limited to the people on our team who need them.
Changes
If we change this policy, we update the date above. The version published here is the one in force.