Privacy Policy

Privacy Policy

21 June 2025

This Privacy Policy explains how GUWAPY S.R.L., operating the guwAPI website and services, processes personal data in accordance with Regulation (EU) 2016/679 (GDPR) and applicable Romanian law.

Data controller

GUWAPY S.R.L., with registered office at Str. Bucovina nr. 9, Bl. O2, Sc. A, Et. 2, Ap. 3, Sector 3, București, România, CUI 54686170, registered with the Trade Register under no. J2026031681003.

Contact for privacy matters: stefan@guwapi.com or +40 734 211 542.

What data we collect

Contact inquiries: name, email address, company name (optional), and message content when you submit the contact form.

Blog reactions: a browser-generated fingerprint stored locally to allow one reaction per post per browser. This is not used for cross-site tracking.

Technical data: IP address, browser type, device information, and access logs may be processed by our hosting provider for security and service delivery.

Why we process data

To respond to project inquiries and communicate with prospective or existing clients (contractual steps or legitimate interest).

To operate and secure the website (legitimate interest).

To comply with legal obligations where applicable.

Legal basis

Processing is based on GDPR Art. 6(1)(b) — steps prior to entering a contract, Art. 6(1)(f) — legitimate interests in operating and securing our website and business communications, and Art. 6(1)(c) — legal obligations where required.

Data retention

Contact messages are kept for as long as needed to handle your inquiry and any resulting business relationship, then deleted or anonymized unless a longer retention period is required by law.

Server logs are retained for a limited period consistent with security and operational needs.

Processors and transfers

We use trusted service providers (e.g. hosting, database, email infrastructure) who process data on our instructions and under appropriate agreements.

Where data is processed outside the EEA, we ensure adequate safeguards as required by GDPR.

Your rights

You have the right to access, rectify, erase, restrict, or object to processing, and to data portability where applicable.

You may withdraw consent at any time where processing is consent-based, without affecting prior lawful processing.

You may lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP).

Changes

We may update this policy when our practices or legal requirements change. The latest version will always be published on this page with an updated date.

Privacy Policy | guwAPI