Privacy Policy
Last updated: May 2026
1. Who we are
alcaziurobert.ro is the personal website (professional portfolio) of Alcaziu Robert, a natural person residing in Romania, acting as data controller under GDPR. The site sells nothing online and processes no payments. This policy explains what data I collect when you visit the site or contact me, how I use it, and what rights you have under GDPR (EU Regulation 2016/679).
2. What data I may collect
Identification and contact data: name, email address, phone number, and any other information you choose to send me voluntarily. Data from your message: the project type and the optional text you write in the form. Technical and usage data: IP address, session identifiers, browser and device information, pages visited, traffic source, and your consent preferences. Data collected through cookies and similar technologies, to the extent they are enabled according to your choice.
3. Source of data
I normally collect data directly from you, when you fill out the contact form or send me an email. Some technical data is generated automatically by your browser, by the infrastructure running the site (the hosting server), or by third-party providers activated only based on your consent.
4. Purposes and legal basis
To respond to your requests and provide information about my services. Basis: pre-contractual steps at your request and legitimate interest. To operate, secure, and administer the site, including preventing abuse, debugging, and technical monitoring. Basis: legitimate interest. To measure traffic and improve site performance through analytics tools. Basis: your consent, when required. To comply with tax, accounting, or other applicable legal obligations. Basis: legal obligation. For defending or exercising my rights in case of disputes or claims. Basis: legitimate interest. I use Google Analytics for traffic measurement and the Meta Pixel for Facebook/Instagram ad measurement, both strictly based on the consent you give through the cookie banner; without consent, neither loads.
5. If you don't provide data
You have no general legal obligation to provide your data. However, if you don't send me the minimum necessary data (name, email, phone), I won't be able to respond to your request or discuss a potential project.
6. Recipients of data
I may disclose data, strictly to the extent necessary, to providers who help me operate the site: Hosterion (site hosting, servers in Romania) and the email provider used for SMTP on my own domain. If you consent to performance cookies, Google (Google Analytics) also processes aggregated traffic data; if you consent to marketing cookies, Meta Platforms Ireland processes browsing data through the Meta Pixel, plus the name, email, and phone from the contact form in SHA-256 hashed form (Advanced Matching), for advertising measurement — see the Cookie Policy for details. Data may also be disclosed to consultants, accountants, lawyers, public authorities, or courts, if required by law or necessary for defending my rights.
7. International transfers
Hosting and email stay inside the European Union, so contact form data does not leave the European Economic Area. Transfers to the United States occur only for the services you consent to: Google (Google Analytics) and Meta (Meta Pixel). For such transfers I rely on mechanisms recognized by GDPR, such as Standard Contractual Clauses (SCC) or other adequate safeguards provided through Data Processing Agreements (DPA).
8. Data retention
Commercial inquiry and contact form data: up to 24 months from the last relevant interaction, unless a contractual relationship or a longer legal retention obligation arises. Data needed for invoicing or accounting (in case of subsequent collaboration): for the duration required by applicable tax legislation (generally 10 years). Technical data and security logs: for limited periods, proportional to security and maintenance purposes (usually up to 12 months). Cookie preferences: as described in the Cookie Policy or according to browser settings.
9. Your rights
Under GDPR, you have the following rights: right of access to your data, right to rectification, right to erasure, right to restriction of processing, right to object (including to processing based on legitimate interest), right to data portability, right to withdraw your consent at any time without affecting the lawfulness of processing prior to withdrawal, and the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP). To exercise these rights, write to contact@alcaziurobert.ro. I respond within a maximum of 30 days.
11. Data security
I apply reasonable technical and organizational measures to protect data against unauthorized access, loss, alteration, or unpermitted disclosure: TLS-encrypted transmission, hosting with a server-level firewall and DDoS protection, regular backups. However, no online system can guarantee absolute security.
12. Changes
I may periodically update this policy to reflect legislative, operational, or technical changes. The version published on the site is the version applicable on the date of consultation. I encourage you to check it periodically.
13. Contact
For any request related to data protection or exercising your rights, write to contact@alcaziurobert.ro.