1. Who processes your data

The data controller for radutoma.com is:

  • Company: EMBLEMATIC ADVERTISING S.R.L.
  • Registered office: Str. Pitar Moș nr. 27, Sector 1, București, România
  • VAT / fiscal code: 33730699
  • Trade Register number: J2014003074128
  • EUID: ROONRC.J2014003074128
  • Incorporated: 24.10.2014
  • E-mail: contact@emblematic.ro

For any request concerning your data, write to contact@emblematic.ro. I reply within 30 days at the latest.

2. What data I process

2.1. Data you give me

When you submit the contact form, I receive:

  • the name you fill in;
  • your e-mail address, so I can reply;
  • your phone number, if you choose to add it (optional field);
  • your message and any information you decide to include in it.

I do not ask for sensitive data, and I would ask you not to include health information, political or religious beliefs, banking details or passwords in your message.

2.2. Data collected automatically

Like any website, the server technically logs visits: IP address, browser type, operating system, referring page, date and time. These logs are produced by the hosting provider and serve security and troubleshooting.

Statistics about how the site is used are collected only if you accept analytics cookies in the banner shown on your first visit. If you decline, the analytics tool does not start at all.

2.3. Anti-spam protection

The form uses Google reCAPTCHA v3. The service collects technical information about your device and your interaction with the page and sends it to Google in order to compute a score indicating how likely it is that the submission comes from a human. I never see or store that data; I only receive the score. Google’s Privacy Policy and Terms of Service apply.

3. Why I process this data and on what legal basis

  • To reply to your message and, where relevant, prepare a quote. Basis: Article 6(1)(b) GDPR, pre-contractual steps taken at your request, and Article 6(1)(a), the consent given via the form checkbox.
  • To protect the site from abuse and spam (reCAPTCHA, server logs). Basis: Article 6(1)(f), the legitimate interest in keeping the site functional and secure.
  • To understand how the site is used (traffic analytics). Basis: Article 6(1)(a), your consent given through the banner, which you can withdraw at any time.
  • To comply with legal obligations, should any arise (for example requests from authorities). Basis: Article 6(1)(c).

I make no automated decisions with legal effect on you, and I do not use your data for advertising profiling.

4. How long I keep the data

  • Form messages: at most 3 years from the last exchange, so I can pick up a conversation we started. If you ask me to delete them sooner, I do.
  • Documents from an actual collaboration: for the period required by tax and accounting law (generally 10 years).
  • Server logs: the short period set by the hosting provider, usually a few weeks.
  • Your cookie preference: 6 months, after which you are asked again.

5. Who else has access to the data

I do not sell or rent data to anyone. The following categories of recipients may access it, strictly in order to provide their service:

  • the web hosting provider, whose servers hold the site and the mailbox;
  • Google Ireland Limited, for reCAPTCHA and, only with your consent, for traffic analytics;
  • accounting and, where applicable, legal advisers, once a collaboration becomes effective;
  • public authorities, where the law requires it.

6. Transfers outside the European Economic Area

Google services may involve transferring some data to the United States. Those transfers rely on the standard contractual clauses approved by the European Commission and on the EU-US Data Privacy Framework, which provide appropriate safeguards under Chapter V of the GDPR.

7. Your rights

Under the GDPR you have the right:

  • of access — to learn what data I hold about you and receive a copy;
  • to rectification — to have inaccurate data corrected;
  • to erasure — to have data deleted, where no legal obligation requires me to keep it;
  • to restriction of processing — to have data kept but not used;
  • to portability — to receive your data in a machine-readable format;
  • to object — to processing based on legitimate interest;
  • to withdraw consent at any time, without affecting the lawfulness of processing carried out before the withdrawal.

You exercise any of these by e-mail to contact@emblematic.ro. I may ask you to confirm your identity, so that I do not hand your data to someone else.

8. Where you can complain

If my answer does not satisfy you, you may contact the Romanian National Supervisory Authority for Personal Data Processing, B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, Bucharest, dataprotection.ro. You also have the right to go to court.

9. Data security

The site runs entirely over an encrypted connection (HTTPS). Administrative access is protected by unique passwords and separate authentication for each application. Messages received through the form land in a dedicated mailbox, not in a public database. No system is perfect, but I treat your data with the same care I would want for my own.

10. Children

This site addresses professionals and companies. I do not knowingly collect data from people under 16. If you learn that a child has sent me data through the form, write to me and I will delete it immediately.

11. Changes to this policy

Whenever I add a new tool or change the way I work, I update this document too. The date at the top shows the current version.