EN
DE
RO# Privacy Policy
Last updated: 02.06.2026
This Privacy Policy explains how personal data is collected, used and protected when you visit [emanuelpostolachi.com] or contact me through the contact form, email or other channels listed on this website.
This is a personal and professional website. At the moment, visitors cannot create public user accounts, cannot log in as website users, cannot purchase products or services directly through the website, and no online payments are processed through this page. The main purpose of the website is to present my work, projects, services and informational content.
## 1. Data controller
The data controller is:
**[Emanuel Postolachi / insert legal business name if applicable]**
Email: [insert email address]
Address: [insert address only if you want to publish a physical or professional address]
Website: [emanuelpostolachi.com]
If you have questions about this Privacy Policy or about how your personal data is processed, you can contact me using the email address above.
## 2. What data may be collected
Depending on how you use the website, the following categories of data may be processed:
### Data collected automatically when visiting the website
When you access the website, the server and technical services used to operate the website may automatically record certain technical information, such as:
* IP address;
* date and time of access;
* pages visited;
* browser type and version;
* operating system;
* referring page, if available;
* technical data required for security, diagnostics and proper website operation.
This data is used for website operation, security, error detection, abuse prevention and technical server administration.
### Data sent through the contact form or by email
If you contact me through the contact form, email or another channel listed on the website, the following data may be processed:
* name;
* email address;
* phone number, if voluntarily provided;
* company or organisation, if relevant;
* message content;
* any other information you choose to include in your message.
This data is used to read your message, respond to your request, continue the conversation and, where applicable, discuss a potential collaboration.
### Newsletter data, if enabled in the future
At the moment, the website may not have an active newsletter. If a newsletter or subscription feature is enabled in the future, the following data may be collected:
* email address;
* name, if requested by the form;
* language preference;
* subscription date;
* consent confirmation;
* technical data related to subscription and unsubscribe actions.
Newsletter data will only be used to send updates, articles, resources, news or information related to my professional activity. Subscription will be based on your consent, and you will be able to unsubscribe at any time.
### Comments on the website
At the moment, the website may not allow public comments. If comments are enabled for articles or pages in the future, the following data may be collected:
* name;
* email address;
* website, if voluntarily provided;
* IP address;
* user-agent/browser;
* comment content.
This data may be used for publishing the comment, moderation, spam filtering and abuse prevention.
## 3. Purposes of processing
Personal data may be processed for the following purposes:
* technical operation of the website;
* correct display of multilingual content;
* security of the website and server;
* prevention of spam, attacks, unauthorised login attempts and other abuse;
* responding to messages sent through the contact form or by email;
* professional communication;
* management of received requests;
* sending newsletters, if this feature is enabled and if you have given your consent;
* improving website content and structure;
* complying with legal obligations, where applicable.
## 4. Legal bases for processing
Processing may rely on one or more of the following legal bases:
* **legitimate interest**, for website operation, server security, abuse prevention, technical administration and responding to ordinary requests;
* **consent**, for newsletters, optional cookies, analytics or marketing tools, if enabled;
* **steps prior to entering into a contract**, if you contact me for an offer, collaboration, project or service;
* **legal obligation**, if certain data must be retained or disclosed under applicable law.
## 5. Where the data is stored
The website is hosted on technical infrastructure administered within the European Union, currently on a server/VPS located in Germany or through EU-based hosting services. Website data, files, the WordPress database, technical messages and server logs may be stored on this infrastructure.
For security, performance and protection against abusive traffic, the website may use DNS, CDN, firewall or proxy services such as Cloudflare. In this case, certain technical data, including IP addresses and HTTP request metadata, may be processed by these services for content delivery and website protection.
If external services are used in the future for newsletters, forms, analytics, backups or automations, this Privacy Policy will be updated to reflect those services.
## 6. Who may access the data
Data may be accessible, to the extent necessary, to the following categories of recipients:
* the website administrator;
* the hosting/server provider;
* DNS, CDN, firewall or security providers;
* email service providers;
* newsletter service providers, if this feature is enabled;
* technical service providers used for maintenance, backup or security;
* public authorities, only where there is a legal obligation.
I do not sell personal data to third parties.
## 7. Transfers outside the European Union
As a general approach, I aim to use services hosted in the European Union or services that provide appropriate safeguards for data protection.
However, certain external services, such as security services, CDN, email, analytics, newsletter tools or embedded content platforms, may involve transfers of data to countries outside the European Union. In such cases, transfers must rely on appropriate legal mechanisms, such as adequacy decisions, standard contractual clauses or other safeguards provided by applicable law.
## 8. Retention period
Data is kept only for as long as necessary for the purposes for which it was collected.
As a general indication:
* technical server logs may be retained for a limited period necessary for security, diagnostics and administration;
* messages received through the contact form or by email may be retained for as long as necessary to manage the conversation, collaboration or professional history;
* newsletter data is retained until you unsubscribe or withdraw your consent;
* data related to commercial requests or collaborations may be retained for as long as necessary for discussions, offers, record-keeping and possible legal obligations;
* backups may temporarily contain data and may be retained according to the technical backup cycle.
## 9. Cookies and similar technologies
The website may use cookies and similar technologies for technical operation, security, language preferences and, if enabled in the future, analytics or marketing.
### Strictly necessary or functional cookies
These are used for website operation and do not require separate consent to the extent that they are strictly necessary.
Examples:
* technical WordPress cookies for website administration;
* security cookies;
* language preference cookies, such as the Polylang `pll_language` cookie, which stores the visitor’s selected language.
### Analytics or marketing cookies
At the moment, the website may not use active analytics or marketing tracking. If tools such as Google Analytics, Meta Pixel, LinkedIn Insight Tag or similar technologies are enabled in the future, they will be used in accordance with applicable legal requirements, usually based on your consent.
### Embedded content from other websites
Pages or articles on this website may include embedded content, such as videos, maps, social media posts, images or other external elements. Embedded content from other websites behaves as if you visited those websites directly. These websites may collect data about you, use cookies, include additional tracking and monitor your interaction with that embedded content.
## 10. Data security
I use reasonable technical and organisational measures to protect the website and the data processed, including:
* protected administrative access;
* updates of the platform and plugins, where possible;
* secure HTTPS connection;
* firewall, DNS/CDN protection or other security mechanisms;
* technical backups;
* access limitation;
* monitoring of errors and suspicious activity.
No method of online transmission or storage is completely risk-free, but I aim to reduce risks through appropriate technical measures.
## 11. Your rights
Under applicable data protection law, you have the following rights:
* the right to access your data;
* the right to rectify inaccurate data;
* the right to erase data, under certain conditions;
* the right to restrict processing;
* the right to object to certain processing activities;
* the right to data portability, where applicable;
* the right to withdraw consent, where processing is based on consent;
* the right to lodge a complaint with the competent supervisory authority.
To exercise these rights, you can contact me at: [insert email address].
## 12. Supervisory authority
If you are located in Romania or believe that the processing of your data falls under the jurisdiction of the Romanian authority, you may contact:
**The National Supervisory Authority for Personal Data Processing**
Website: dataprotection.ro
You may also contact the data protection authority in your country of residence within the European Union.
## 13. Newsletter and future communications
If a newsletter is introduced in the future, subscription will be voluntary. You will not be automatically subscribed simply because you sent a message through the contact form or by email. Newsletter data will be processed separately from regular contact conversations, and each newsletter message will include an unsubscribe option.
## 14. Changes to this policy
This Privacy Policy may be updated periodically, depending on technical, legal or website usage changes. The updated version will be published on this page together with the date of the latest update.