Privacy Policy

Data controller

GUWAPY S.R.L., with registered office at Str. Bucovina nr. 9, Bl. O2, Sc. A, Et. 2, Ap. 3, Sector 3, București, România, CUI 54686170, registered with the Trade Register under no. J2026031681003.

Contact for privacy matters: stefan@guwapi.com or +40 734 211 542.

What data we collect

Contact inquiries: name, email address, and message content when you submit the contact form.

Technical data: IP address, browser type, device information, and access logs may be processed by our hosting provider for security and service delivery.

Why we process data

To respond to project inquiries and communicate with prospective or existing clients (contractual steps or legitimate interest).

To operate and secure the website (legitimate interest).

To comply with legal obligations where applicable.

Legal basis

Processing is based on GDPR Art. 6(1)(b) (steps prior to entering a contract), Art. 6(1)(f) (legitimate interests in operating and securing our website and business communications), and Art. 6(1)(c) (legal obligations where required).

Data retention

Contact messages are kept for as long as needed to handle your inquiry and any resulting business relationship, then deleted or anonymized unless a longer retention period is required by law.

Server logs are retained for a limited period consistent with security and operational needs.

Processors and transfers

The contact form is processed by Web3Forms (web3forms.com), a third-party service that receives the name, email, and message you submit and delivers it to our inbox. Web3Forms processes this data according to its own privacy policy.

The website is hosted on Vercel, who may process technical data (such as access logs) on our behalf.

Where data is processed outside the EEA, we ensure adequate safeguards as required by GDPR.

Cookies

This website does not use cookies for analytics, advertising, or cross-site tracking. See our Cookie Policy for details.

Your rights

You have the right to access, rectify, erase, restrict, or object to processing, and to data portability where applicable.

You may withdraw consent at any time where processing is consent-based, without affecting prior lawful processing.

You may lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP).

Changes

We may update this policy when our practices or legal requirements change. The latest version will always be published on this page with an updated date.