Privacy policy
Last updated: [date of publication]
This policy explains what personal data STRATA collects through its website and when you contact us, why we use it, and the rights you have under the EU General Data Protection Regulation (GDPR, Regulation (EU) 2016/679) and Romanian Law no. 190/2018.
1. Who we are
STRATA is the trading name of TĂBÎRCĂ VLAD-MIHAI PERSOANĂ FIZICĂ AUTORIZATĂ, an authorised natural person (PFA) registered with the Romanian Trade Register under number [F40/…/…], tax identification number (CUI) […], with its registered office at [street address], Bucharest, Romania. This PFA is the controller of your personal data.
For anything related to this policy or your data, contact us at [privacy email, e.g. hello@yourdomain.com]. We have not appointed a Data Protection Officer, as we are not required to; the email above reaches the person responsible for data protection.
2. What data we collect
We only collect what you choose to send us, plus the minimum technical data needed to run the website.
| Source | Data | When |
|---|---|---|
| Contact form | Name, email address, the service you are interested in, your message and anything you include in it | When you submit the form |
| Email and phone | Your name, contact details and the content of your messages | When you write to or call us |
| Your public profile name and the messages you send us | When you interact with our LinkedIn page | |
| Client work | Names, job titles, business contact details of client staff | When we work together on a project |
| Website hosting | IP address, browser type, pages requested, date and time | Automatically, on every visit |
We do not ask for special categories of data (such as health or political views). Please do not include them in your messages.
3. Why we use it and our legal basis
| Purpose | Legal basis (GDPR Art. 6) |
|---|---|
| Replying to your enquiry and preparing a quote | Steps taken at your request before entering into a contract (6(1)(b)) |
| Delivering a project and managing our client relationship | Performance of a contract (6(1)(b)) |
| Invoicing, accounting and tax records | Legal obligation (6(1)(c)) |
| Keeping the website secure and working | Our legitimate interest in running a safe website (6(1)(f)) |
| Occasional follow-up with existing clients about similar services | Our legitimate interest (6(1)(f)); you can object at any time |
We do not sell your data, use it for automated decision-making or profiling, or add you to a newsletter without your explicit consent.
4. Who we share it with
We share data only with service providers that help us run STRATA, under contracts that require them to protect it (data processing agreements), and with authorities when the law requires it.
| Provider | What they do | Location |
|---|---|---|
| [Website host, e.g. Netlify / Cloudflare Pages] | Hosts the website and keeps server logs | [EU / USA] |
| [Form service, e.g. Formspree] | Delivers contact-form messages to our inbox | [EU / USA] |
| [Email provider, e.g. Google Workspace] | Our business email | [EU / USA] |
| [Accountant / accounting software] | Invoicing and bookkeeping | Romania |
| Runs our company page; LinkedIn is a separate controller for data on its platform | Ireland / USA |
Where a provider stores data outside the European Economic Area, the transfer is covered by the EU–US Data Privacy Framework or by the European Commission’s Standard Contractual Clauses.
5. How long we keep it, security and cookies
| Data | Kept for |
|---|---|
| Enquiries that don’t lead to a project | 12 months after our last exchange |
| Client contact and project correspondence | The length of the collaboration plus 3 years, the general limitation period for claims in Romania |
| Invoices and accounting records | As long as Romanian accounting and tax law requires (currently 5 to 10 years, depending on the document) |
| Website server logs | [30 days, or as set by the hosting provider] |
We protect data with access limited to the people who need it, strong passwords with two-factor authentication on our accounts, and encrypted (HTTPS) connections to the website.
Cookies. The website does not use analytics, advertising or tracking cookies, and fonts are served from our own website rather than from third parties. If we add analytics or any non-essential cookies later, we will ask for your consent first and update this policy.
6. Your rights
Under the GDPR you can ask us to:
- give you a copy of the personal data we hold about you (access);
- correct data that is wrong or incomplete (rectification);
- delete your data when we no longer need it or have no legal basis to keep it (erasure);
- limit how we use it while a question is being resolved (restriction);
- send it to you or another company in a common format (portability);
- stop using it for purposes based on our legitimate interest, including follow-up messages (objection).
Write to [privacy email] to use any of these rights. We reply within one month, free of charge, and may ask you to confirm your identity first.
If you think we have handled your data unlawfully, you can complain to the Romanian supervisory authority, ANSPDCP (Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal), at dataprotection.ro. We would appreciate the chance to fix it with you first.
7. Changes to this policy
We will update this page when our services, providers or the law change, and show the date of the latest version at the top.