Privacy Policy

This policy describes how we process the personal data collected through the adumitru.ro website, in accordance with Regulation (EU) 2016/679 (“GDPR”) and Romanian Law no. 190/2018 implementing it.

By using the website and submitting the contact form, you confirm that you have read and understood this policy.

01Data controller

The controller of your personal data is ADUMITRU MEDIA NETWORK S.R.L., a Romanian company registered with the Trade Register under no. J03/2321/2022, Tax ID 46708049, with its registered office at Pasaj Scărilor nr. 2, Bl. 18, Sc. D, Et. 3, Ap. 12, Pitești, jud. Argeș, 110231, România, registered since 24 august 2022 (the “Controller”, “we”).

Legal representative and administrator: Alexandru Dumitru.

For any request regarding your personal data you can contact us at contact@adumitru.ro.

02Categories of data processed

Data you provide via the contact form: name, email address, project type, estimated budget (optional) and the content of your message.

Data collected automatically, strictly necessary for operation and security: IP address, technical data generated by the Cloudflare Turnstile anti-bot mechanism and basic server logs.

Language preference, stored in a functional cookie (NEXT_LOCALE), solely to remember your RO/EN choice.

We do not collect special categories of data (health, political opinions, etc.) and do not request such information through the form.

03Purposes and legal bases

Communicating with you, sending quotes and managing a possible collaboration — basis: your consent, art. 6(1)(a) GDPR, and pre-contractual steps at your request, art. 6(1)(b).

Protecting the website against spam and abusive automated access — basis: the Controller's legitimate interest, art. 6(1)(f).

Compliance with our legal obligations, where applicable — basis: art. 6(1)(c).

04Recipients and processors

Resend, Inc. — transactional email provider, used to deliver the form messages.

Cloudflare, Inc. — provider of the Turnstile service used to prevent automated submissions and, where applicable, infrastructure/CDN services.

These providers act as processors and handle data only on our instructions. We do not sell, rent or disclose your data for third-party marketing.

05Transfers outside the EEA

Some of our providers may process data on servers located outside the European Economic Area (e.g. in the United States). Such transfers rely on the Standard Contractual Clauses approved by the European Commission or other appropriate safeguards under art. 46 GDPR.

06Retention period

We keep received messages for as long as necessary to handle your request and run a possible collaboration, and afterwards for a reasonable period for record-keeping and the establishment or defence of legal claims. Once these periods expire, data is deleted or anonymised.

07Data security

We apply appropriate technical and organisational measures to protect data against unauthorised access, loss or disclosure, including encrypted transmission (HTTPS) and restricted access to form data.

08Your rights

Under the GDPR you have the right of access, rectification, erasure (“right to be forgotten”), restriction of processing, data portability and objection, as well as the right to withdraw your consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

You can exercise these rights by sending a request to contact@adumitru.ro. We will respond within one month of receiving your request.

You also have the right to lodge a complaint with the Romanian Data Protection Authority (ANSPDCP), B-dul G-ral Gheorghe Magheru no. 28-30, Bucharest — www.dataprotection.ro.

09Automated decisions and minors

We do not take decisions based solely on automated processing that produce legal effects on you, and we do not carry out profiling.

The website is not directed to children under 16 and we do not knowingly collect their data.

10Online payments and orders

When you buy a service package we process the data needed to perform the contract (Art. 6(1)(b) GDPR) and to meet our tax obligations (Art. 6(1)(c)): name, email, phone, billing address, company name and tax ID (if provided), the package purchased, the amount paid and the project details you send us.

Payments are processed by Stripe Payments Europe Ltd., acting as an independent controller for payment data. We never receive or store your full card details. Orders are kept in our content management system (Sanity) with restricted access.

Order data is retained for the period required by Romanian accounting and tax law (currently 10 years for supporting documents) and then deleted.

11Financing through TBI Bank

If you choose to pay in instalments, we send TBI Bank EAD Sofia – Bucharest Branch the data needed to start the financing application: first and last name, email, phone, address and order details (package, amount). The legal basis is taking steps at your request before entering into a contract (Art. 6(1)(b) GDPR).

TBI Bank processes this data, and any other data requested directly in the credit application, as an independent controller under its own privacy policy. We only receive the status of the application from TBI (approved, under review or rejected).

12Cookies

We use a single functional cookie for the language preference. Cloudflare Turnstile may set strictly necessary cookies to distinguish human users from bots. We do not use advertising or behavioural tracking cookies.

13Changes to this policy

We may update this policy from time to time to reflect legal or operational changes. The applicable version and the date of the last update are shown at the top of this page.