Privacy policy

1. Who is responsible for your data

cosmindigital.solutions is operated by Cosmin Aparaschivei, an individual. For privacy questions or to exercise your rights, contact contact@cosmindigital.solutions. You can also use +40 749 670 342.

This notice covers visits to the website and conversations initiated by email or WhatsApp. It does not cover processing within a future client project, for which the relevant terms are established separately.

2. The data involved

When you contact us, we receive your name, email address, message and any project details you choose to share. Services of interest and budget are optional. Through WhatsApp, we may also receive your phone number, profile name and the messages you send.

Website hosting infrastructure may process your IP address, request time, requested page, browser and device information and technical errors to deliver pages and maintain security. This technical information is separate from the contents of the brief form.

We do not request sensitive information, identity documents, passwords or payment card details. Please avoid including such information or unnecessary data about other people in your message.

3. How the form works

The form prepares a message locally using a mailto link. The Prepare my email button opens your email application with the information you entered. You can review, edit or discard the message before sending it.

The website has no endpoint that receives the brief, does not store it in a database and does not automatically send the fields to the operator. Your email application or provider may manage a draft according to its own settings. We receive your message when you actually send it.

Required fields allow you to prepare an enquiry we can answer. You can also email us directly. The checkbox acknowledges this notice and your request for a project response; it does not subscribe you to marketing communications.

4. Purposes and legal bases

We use information to respond, clarify your needs and discuss possible collaboration. Steps you request before entering a contract to which you would be a party rely on Article 6(1)(b) GDPR. Professional correspondence, including when you represent an organisation, relies on our legitimate interest in handling incoming enquiries under Article 6(1)(f).

Delivering and protecting the website, preventing abuse and defending rights may also rely on legitimate interests. Where the law requires retention or disclosure, the basis is a legal obligation under Article 6(1)(c). Contact details are not used for newsletters or unsolicited advertising.

5. Local preferences, cookies and measurement

The current version does not integrate Google Analytics, Google Tag Manager, advertising pixels or session recording tools. Website code does not install analytics or advertising cookies.

Your theme choice is stored in your browser's localStorage under the key theme. This is a display preference, not an advertising identifier, and remains until you change it or clear site data. Without a stored choice, the system preference is used. Language is determined by the /ro or /en address.

Animations use screen dimensions, reduced-motion preferences and zoom state locally. Code does not transmit those signals to an analytics service. Page fonts and graphics are served from the website's resources.

6. Recipients and external services

Access is limited to the operator and, where needed, categories of providers supporting hosting, website delivery and security, email or communications. Authorities or professional advisers may receive data when legally required or necessary to defend rights. We do not sell personal data.

The WhatsApp button is an external link, not an embedded widget. Visiting a page does not send data to WhatsApp through this button. Opening the link takes you to WhatsApp, where its privacy policy also applies. Email remains an alternative.

Processing locations for external services depend on the provider and channel used. Transfers outside the European Economic Area for which the operator is responsible require an applicable GDPR mechanism, such as an adequacy decision or standard contractual clauses, as appropriate. You can contact us for information about the recipients and safeguards applicable to your data.

7. Retention

Information entered in the browser is not saved by the website as a brief. Messages you send are kept as needed to resolve your enquiry and continue the discussion. After it ends, further retention is limited to a legal obligation, ongoing collaboration or a justified need to establish, exercise or defend rights.

Retention of technical information depends on operational and security purposes, any incident investigation and the infrastructure configuration. Data no longer needed should be deleted or anonymised. You can remove the theme preference through your browser settings at any time.

8. Your rights

Subject to GDPR conditions, you can request access, correction, erasure or restriction. Portability is available where legal conditions apply. You can object to processing based on legitimate interests on grounds relating to your situation. Where processing relies on consent, you can withdraw it without affecting the lawfulness of earlier processing.

Send requests to contact@cosmindigital.solutions. We respond without undue delay, normally within one month. Complex requests may require up to two additional months, with notice during the first month. If there are reasonable doubts about identity, we may request only information needed to verify it.

You can complain to Romania's ANSPDCP or another competent supervisory authority, including in the country of your habitual residence or workplace. Your right to seek a judicial remedy remains available. This website does not use data for solely automated decisions with legal or similarly significant effects and does not carry out advertising profiling.

9. Security and communication

We limit the information requested to what is needed for the conversation. Data protection requires technical and organisational measures proportionate to risks, including access and incident management. No communication or storage method offers absolute security. Please email us if you identify an issue involving your data.

10. Policy updates

This notice describes the current website. If direct form delivery, measurement, advertising or other processing purposes are introduced, this notice will be updated and, where needed, consent will be requested before activation.