Privacy & cookie policy

Who we are

This site (saftoiudigital.com) is run by Saftoiu Digital SRL, registered in Romania, tax ID 52652759, trade register no. J2025076880002, registered office Str. Munteniei nr. 28, sat Zilișteanca, comuna Poșta Câlnău, jud. Buzău, România. We are the controller of the personal data described below.

For anything related to your data, write to contact@saftoiudigital.com.

What we collect and why

• Contact form and email. When you send a brief or write to contact@saftoiudigital.com, we receive your name, email address and whatever you include in the message. We use them only to reply and, if we end up working together, to prepare an offer and a contract. Legal basis: steps taken at your request before entering a contract, and our legitimate interest in answering messages (GDPR art. 6(1)(b) and (f)).
• Analytics, only with your consent. If you accept analytics cookies, Google Analytics 4 (loaded through Google Tag Manager) records which pages you visit, how you got here, your approximate location (country/city), device and browser. We use this only to see how the site is used and improve it. Legal basis: your consent (GDPR art. 6(1)(a) and Romanian Law 506/2004). Until you accept, Google Analytics does not run.
• Technical data. Like any website, the hosting provider processes your IP address and basic request data to deliver the pages and protect the site from abuse. Legal basis: our legitimate interest in running a secure site (GDPR art. 6(1)(f)).

We do not sell your data, do not use it for advertising, and do not make automated decisions about you.

Cookies

A cookie is a small file your browser stores for a site. We use one strictly necessary cookie, set without consent, and analytics cookies, set only if you accept them in the banner.

You can change or withdraw your choice at any time from the "Cookie settings" link at the bottom of every page. You can also delete cookies from your browser settings.

Who else processes your data

We use a few providers that process data on our behalf, only for the purposes above:

• Cloudflare, Inc. — hosting, content delivery, security, and forwarding of emails sent to our address.
• Web3Forms — delivers the contact form submissions to our inbox.
• Google — Google Analytics and Google Tag Manager (only with your consent), and Gmail, where our emails are kept.
• Brevo (Sendinblue SAS, France) — sends the emails we write from our address.

Transfers outside the EU

Some of these providers are based in, or use servers in, the United States. Transfers rely on the EU–US Data Privacy Framework where the provider is certified, or on the European Commission’s Standard Contractual Clauses.

How long we keep it

• Messages that do not lead to a project: up to 2 years after our last exchange.
• Messages and documents linked to a contract: for as long as Romanian accounting and tax law requires.
• Google Analytics data: 14 months, after which Google deletes it automatically.
• The consent cookie: 180 days, then you are asked again.

Your rights

You have the right to access your data, have it corrected or deleted, restrict or object to its processing, receive it in a portable format, and withdraw your consent at any time (this does not affect processing done before). To use any of these rights, email us; we reply within one month.

You can also complain to the Romanian data protection authority: Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP), B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, Bucharest, www.dataprotection.ro.

Changes

If we change this policy, we update the date at the top. If the change affects cookies, the banner asks for your consent again.