Privacy Policy

Under the General Data Protection Regulation (GDPR) and Romanian Law 190/2018, I am the data controller responsible for your personal information collected through this website.

My name is Alexandru Mihalascu. I design and build web products independently from Bucharest, Romania, and I am the sole operator of this website. You can reach me at alexmihalascu@gmail.com or by phone/WhatsApp at +40 752 571 265.

I only collect the information that is necessary to reply to messages, plan a project, or improve the experience of this site.

Contact form submissions are stored securely in Firebase (Cloud Firestore) and in my email inbox. I review enquiries every quarter and delete messages that are older than 18 months unless we are actively collaborating or I am legally required to keep them. Google Analytics data is automatically deleted after 26 months. You can request deletion of your contact data at any time by emailing alexmihalascu@gmail.com.

Under GDPR, these services act as data processors, processing data on my behalf under data processing agreements (DPAs):

I implement appropriate technical and organizational measures to protect your personal data:

Under GDPR (General Data Protection Regulation) and Romanian Law 190/2018, you have the following rights:

You have the right to lodge a complaint with the Romanian Data Protection Authority (Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal):

Some services I use (Firebase, Google Analytics) may transfer your data to servers outside the European Economic Area (EEA). These providers comply with GDPR requirements:

Essential cookies keep the site running, and a single analytics cookie is optional. Visit the Cookies Policy to review every entry and manage your preferences through the consent banner.

Email is the fastest way to reach me: alexmihalascu@gmail.com. If you prefer, send a message through the contact page or call/WhatsApp +40 752 571 265.

This website is not intended for children under 16 years of age. I do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided personal data, please contact me immediately and I will delete it.

In the unlikely event of a data breach that affects your personal information, I will notify you and the Romanian Data Protection Authority (ANSPDCP) within 72 hours as required by Article 33 and 34 GDPR. The notification will include the nature of the breach, likely consequences, and measures taken to address it.

I do not use automated decision-making or profiling that produces legal effects or similarly significantly affects you. All communications and business decisions are made manually by me (Alexandru Mihalascu).

I review this policy whenever I add new tooling or launch major features. The effective date above reflects the latest revision. Material changes will be announced on the homepage or via email if you have an ongoing project with me.