We take your data privacy seriously. This document explains what data we collect, why, how we use it, and what rights you have.
1. Data controller
The controller of personal data is The Web Design Company, registered at Str. Izvorului Nr. 2, Ocna Șugatag, Maramureș, Romania. You can contact us at hello@thewebdesigncompany.ro.
2. What data we collect
Via contact form: name, email, phone (optional), message. Collected only if you actively contact us.
Analytics (cookies): anonymized IP, page visited, time on page, device type, country. Collected via Google Analytics 4 with consent.
Newsletter: email address, subscription date. Only if you subscribe explicitly.
3. Why we collect
- Respond to your messages and provide requested quotes
- Improve our site based on real behavior
- Send you the newsletter if you subscribed
- Comply with legal obligations (tax, accounting)
4. Legal basis
We process your data on the following bases:
- Consent (for newsletter, analytics cookies)
- Contract (for active clients)
- Legitimate interest (site security, anti-spam)
- Legal obligation (invoices, accounting)
5. How long we keep data
- Contact form messages: 2 years
- Analytics data: 14 months
- Newsletter: until unsubscribed
- Contract data + invoices: 10 years (legal requirement)
6. Who we share data with
We don't sell data. We only share with processors that help us operate:
- Google (Analytics, Maps) — aggregate data
- Email provider (for newsletter)
- Accounting (for invoices)
- Authorities (if legally required)
7. Your rights (GDPR)
Under GDPR, you have the right to:
- Access data we hold about you
- Correct inaccurate data
- Request deletion of your data
- Restrict processing
- Transfer your data (portability)
- Object to processing based on legitimate interest
- Withdraw consent at any time
- Lodge a complaint with the DPA (for Romania, ANSPDCP: www.dataprotection.ro)
For any request, write to hello@thewebdesigncompany.ro. We respond within 30 days.
8. Security
Data is stored on secure servers, with in-transit encryption (HTTPS) and restricted access. However, no online transmission method is 100% secure, so we cannot guarantee absolute security.
9. Changes
We may update this policy. Changes are published on this page with a new last-updated date.