Privacy Policy

Who is responsible

The controller is Murarum Web Development SRL, registered in Romania, registered office Str. Letea 13, Sc. A, Ap. 23, Cam. 1, 600121 Bacău, Romania, Trade Register no. J04/1714/2017, VAT ID RO38380420. For any privacy question, write to office@murarum.ro.

What we collect

• Messages you send us by email or phone: your name, contact details and whatever you choose to tell us.
• What you send through the contact form: name, work email, company, role, what you want to improve, timeline, your consent, plus the language of the page and which service page you came from. The form sends it to us as an email through Resend, only so we can reply to your message. Resend does not use it for anything else, and the website itself does not store it.
• On the contact page only: Cloudflare Turnstile checks that the form is sent by a person, not a bot. It looks at technical signals from your browser (such as IP address and browser characteristics) for that check alone; usually you see nothing, sometimes a single click.
• Technical server logs kept by our hosting provider, Hetzner Online GmbH (Germany): IP address, date and time, requested page and browser type, used to keep the site secure and running.
• Cloudflare Web Analytics, on every page: anonymous, aggregate statistics (page views, load times, referring site, country, device type). It sets no cookies, does not track you across sites and does not build a profile of you; we use it, on the basis of our legitimate interest, to see how fast the site loads and which pages are read.
• Only if you accept analytics cookies: usage data collected by Google Analytics 4, such as pages visited, time on page, approximate location (country or city), device and browser, and how you arrived at the site.

We do not use advertising cookies, and we do not buy or sell personal data.

Why we use it, and on what legal basis

• To reply to your enquiry and prepare a possible collaboration: steps taken at your request before a contract (GDPR Article 6(1)(b)).
• To keep the website secure and working, including the bot check on the contact form: our legitimate interest (Article 6(1)(f)).
• To keep accounting and tax records once we work together: legal obligation (Article 6(1)(c)).
• To measure how the website is used, with Google Analytics 4 loaded through Google Tag Manager: your consent (Article 6(1)(a)), which you can withdraw at any time from Cookie settings at the bottom of every page.

How long we keep it

Enquiries that do not lead to a collaboration are deleted after 24 months. Contract and invoicing records are kept for the period Romanian law requires. Server logs are kept for 14 days. Google Analytics data is kept for 14 months, then deleted automatically.

Who processes it for us

Our hosting provider, Hetzner Online GmbH (Germany), our email provider (Google Workspace, provided by Google Ireland Limited), Resend (Plus Five Five, Inc.), which delivers contact form messages to our inbox, Cloudflare, Inc. for the Turnstile bot check on the contact page and for Cloudflare Web Analytics, and, only with your consent, Google Ireland Limited for Google Tag Manager and Google Analytics. They process data only on our instructions. Where a provider transfers data outside the European Economic Area, for example Google to the United States, the transfer relies on the EU-US Data Privacy Framework adequacy decision or the European Commission's standard contractual clauses.

Your rights

You can ask to access, correct or delete your data, to restrict or object to its processing, and to receive it in a portable format. Where processing relies on consent, you can withdraw it at any time. Write to us and we answer within one month.

You can also complain to the Romanian data protection authority, ANSPDCP. dataprotection.ro

Cookies

Without your consent, the website sets no cookies. Your cookie choice is stored in your browser's local storage, and so are your light or dark theme, if you pick one in the footer, and whether you closed the suggestion to read the site in Romanian. None of these leaves your browser.

If you accept analytics cookies, Google Tag Manager loads Google Analytics 4, which sets two cookies: _ga and _ga_<ID>. They tell visits apart so we can see which pages are read and which links, buttons and forms are used. We never send your name, email address or anything you type to Google. Google keeps these cookies for up to 2 years, and the data in Google Analytics is kept for 14 months. The legal basis is your consent (GDPR Article 6(1)(a)).

If you reject, neither Google Tag Manager nor Google Analytics is loaded and nothing is sent to Google. Your choice is kept for 12 months, then we ask again. You can change it at any time from Cookie settings at the bottom of every page; withdrawing consent stops Google Analytics and deletes its cookies.

Security

The site is served only over HTTPS, with security headers that block framing and content sniffing. Access to enquiries is limited to the people who answer them.

Changes

When this policy changes, the date at the top changes with it. Material changes are published before they take effect.

Contact

Murarum Web Development SRL, office@murarum.ro, +40 761 339 149.