privacy policy

This site is built to collect as little as possible: there are no accounts, no forms, no advertising and no tracking cookies, and the only analytics are privacy-friendly and cookie-free. This policy explains the little personal data that is processed, and your rights under the EU General Data Protection Regulation (Regulation (EU) 2016/679, the "GDPR") and Romanian law.

Who is responsible

The controller of your personal data is Andrei Duna, a private individual in Romania. Contact: andreiduna27@gmail.com. There is no data protection officer, as none is required.

What is processed, and why

When you visit the site

Like every website, the servers that deliver this site receive technical data from your browser so they can send the pages to you: your IP address, the date and time, the page requested, your browser and device type, and the referring page. This data is processed by the hosting provider in its server logs.

purpose

delivering the site, keeping it secure and working, and preventing abuse

legal basis

legitimate interest in running a secure website (Art. 6(1)(f) GDPR)

retention

kept only for the short period set by the hosting provider's log retention; it is not used to identify or profile visitors

Audience statistics

To understand how many people visit the site and where they come from, it uses Altias, a cookie-free analytics service. When you open a page, a small script sends Altias: the page address, the referring page, your country (worked out on its servers from your IP address, which is not stored), a timestamp, and two irreversible hashed identifiers (one for the visitor, reset daily, and one for the session). It does not use cookies or local storage, does not store your IP address, and does not collect device fingerprints, screen size, clicks or advertising identifiers, nor does it follow you across other sites.

purpose

counting visits and understanding which pages and sources matter, to improve the site

legal basis

legitimate interest in understanding and improving the site (Art. 6(1)(f) GDPR)

retention

page view records are kept as long as the site uses the service, and deleted when the site or account is deleted

You can object at any time, and you can also block the script with your browser's tracking protection or a content blocker; the site works the same without it. See Altias's privacy policy.

When you write an email

If you write to andreiduna27@gmail.com, including through the contact or business enquiries links, your name, email address, the content of your message and anything you choose to include are processed.

purpose

reading and replying to your message, and handling any enquiry or proposal it contains

legal basis

legitimate interest in answering messages (Art. 6(1)(f) GDPR) and, for business enquiries, steps taken at your request before a possible agreement (Art. 6(1)(b) GDPR)

retention

as long as needed to deal with your message and any follow-up, then deleted, unless a longer period is required by law

You do not have to write, and giving this data is not a legal or contractual requirement; without it we simply cannot reply.

Who receives the data

• Hosting: Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, United States, which hosts the site and processes the server logs on our behalf, under its data processing addendum. See also its privacy policy.
• Analytics: Altias (altias.vercel.app), which receives the anonymised statistics described above.
• Email: the email service used for the contact address (Google's Gmail), which stores the messages it receives.

Personal data is not sold, rented or shared for marketing, and it is only disclosed to authorities where the law requires it.

Transfers outside the EU

The hosting and email providers are based in the United States, so data may be processed there. These transfers rely on the safeguards the providers offer under the GDPR, such as the EU–US Data Privacy Framework or the European Commission's Standard Contractual Clauses.

Cookies and similar technologies

This site sets no cookies. It uses no advertising or social media trackers and loads no fonts or embedded media from other companies. The one third-party script is the cookie-free Altias analytics script described above.

It stores one small item in your browser's session storage, ad:veil, which remembers that you have already seen the home page's opening animation so it is not shown again during the same visit. It contains no personal data, is never sent anywhere, and is deleted automatically when you close the tab. It is strictly needed for the site to work as you would expect, so no consent banner is required. You can clear it at any time in your browser settings.

Links to social networks, YouTube and other sites only take you there when you click them; once you are on those sites, their own cookie and privacy policies apply.

Your rights

Under the GDPR you have the right to:

• access the personal data held about you and get a copy of it;
• have inaccurate data corrected;
• have your data erased;
• restrict how it is processed;
• object to processing based on legitimate interest;
• receive your data in a portable format, where applicable.

To use any of these rights, write to andreiduna27@gmail.com. You will get an answer within one month. No decision about you is made by automated means or profiling.

You also have the right to complain to a data protection authority. In Romania this is the Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP), B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, 010336 București, Romania, www.dataprotection.ro. You can also complain to the authority in the EU country where you live or work.

Children

The site is not aimed at children and does not knowingly collect data from anyone under 16. If you believe a child has sent personal data, write in and it will be deleted.

Security

The site is served only over an encrypted connection (HTTPS), and access to the email account and hosting is restricted and protected.

Changes to this policy

This policy may be updated, for example if the site gains new features. The date at the top shows the latest version. Significant changes will be made clear on this page.