Last updated: October 2026
Who is responsible
Boroica Marius Persoană Fizică Autorizată, with the registered office at B-dul Bucureștii Noi nr. 136, et. parter, ap. 5, Sector 1, București (CUI 55306512, Reg. Com. F2026037368007), is the data controller for this website. I work from Cluj-Napoca, Romania. Contact: [email protected].
What this site collects
The site itself is a static website. It does not set cookies, does not run third-party analytics and does not build a profile of your visit. The hosting provider may process standard server logs (IP address, user agent, requested URL, timestamp) for security and reliability. Those logs are controlled by the hosting provider and retained for a short period.
If you contact me
When you send an email or use the enquiry form, I receive the details you provide: your name, email address, company, role and the content of your message. I use them only to respond to your enquiry, scope a possible engagement and keep a record of the conversation. The legal basis is your consent, which you give by sending the message, and the legitimate interest of responding to a business enquiry.
The form endpoint processes your submission in memory and does not store it. The enquiry exists only in the notification email and the email provider's send log.
I do not sell your data, do not add you to a newsletter and do not share it with advertising platforms. You can withdraw your consent at any time by emailing me; the withdrawal does not affect processing carried out before it.
Processors, recipients and transfers
The people and companies that may see your data are limited to the ones needed to run this site and answer you:
- Cloudflare serves the static pages and runs the contact form endpoint. It sees the request, including your IP address, for security and abuse prevention.
- Brevo (France) sends the notification email and processes the details you submitted.
- Google hosts the inbox where enquiries arrive.
They act on my instructions under a data processing agreement. Cloudflare and Google may process data outside the European Economic Area; those transfers are covered by their Standard Contractual Clauses and the EU–US Data Privacy Framework where applicable. Brevo processes the email data within the EU.
To stop abuse, the form endpoint keeps short-lived counters: requests per IP address, and duplicate submissions, both keyed by salted hashes. The raw IP and the message are not stored, the hashes cannot be reversed without the server secret, and the counters expire within 24 hours (10 minutes for duplicates).
What you do not have to give me
You are not obliged to provide any personal data. If you choose not to, I cannot answer an enquiry or prepare a proposal, but nothing else changes.
How long I keep it
Enquiry emails are kept for as long as needed to respond and, if an engagement starts, for the duration of the project and the period required for accounting and legal records. If no engagement starts, I delete the enquiry within 12 months unless you ask me to keep it for a later conversation.
Your rights
Under the GDPR you can ask for access to your personal data, correction, deletion, restriction, portability or objection, and you can withdraw consent at any time. You also have the right to lodge a complaint with the Romanian data protection authority (ANSPDCP). To exercise a right, email [email protected].
There is no automated decision-making and no profiling on this site or in how I handle enquiries.
Cookies
This site does not set cookies. It does not use Google Analytics, Meta Pixel or any other third-party tracking script. Fonts are self-hosted, so no font provider receives your IP address.
Security
The site is served over HTTPS. Emails and project files are handled with care, and sensitive project data is shared under NDA or inside your own environment when required.
Changes
If the data practices change, this page will be updated and the date at the top will change. This note is a plain-language description, not legal advice.