This page explains what personal data I receive through www.adrianstefanescu.com, why, how long I keep it and how you can exercise your rights. If anything is unclear, email me at design@adrianstefanescu.com.
Who is responsible for your data
The data controller is Adrian Ștefănescu. For any question about your data, email me at design@adrianstefanescu.com.
In short
The site has no user accounts, no database and no analytics or marketing cookies.
The forms don't send anything to a server: at the end they open your email app with the message ready, and you decide whether to send it.
I don't sell your data, use it for advertising or subscribe you to anything.
What data I receive
- Through the brief form
- the project type, your name and email address (required), plus the optional answers about your company, project, budget and timeline, your phone number and a link.
- Through the short message
- your name, email address and message.
- By email
- anything you write in the message or attach, along with the usual data of any email (sender address, date and time).
Please don't include sensitive data (for example, health data) or other people's personal data unless strictly necessary and you're entitled to share it.
Why I use it
I use your data only to reply to you, ask questions about the project and, if we work together, prepare the proposal and the collaboration.
- Replying and the proposal
- Art. 6(1)(b) GDPR: steps taken at your request before a possible contract.
- Conversation history
- Art. 6(1)(f) GDPR: my legitimate interest in keeping professional correspondence, so I can refer back to it.
I don't make automated decisions about you or profile you. Without a name and an email address I can't reply to you; all other fields are optional.
How the data reaches me
The form doesn't send data to a server. At the end, it opens an email in your email app, and you decide whether to send it. The message goes through your email provider and reaches my inbox.
Until then, your brief answers are kept only in this browser (sessionStorage), so you don't lose them if you reload the page. They are deleted when you send the brief, press “Delete draft” or close the tab.
I don't sell or rent your data. I only share it with an authority if the law requires me to.
How long I keep it
I keep briefs and messages for at most 24 months from receipt, so I can reply to you and come back to the conversation. If we work together, I keep the correspondence about the collaboration for its duration and for as long as legal obligations require afterwards.
You can ask me to delete them earlier at any time.
Your rights
Under Articles 15–21 GDPR, you have the right:
- Of access
- to know whether I hold data about you and to get a copy.
- To rectification
- to have incorrect or incomplete data corrected.
- To erasure
- to have your data deleted when I no longer have a legal reason to keep it.
- To restriction
- to have me stop using the data for a while, for example while we check a correction.
- To data portability
- to receive the data you provided in a structured format.
- To object
- to processing based on my legitimate interest.
For any of these, email me at design@adrianstefanescu.com. I'll reply without undue delay, within one month. Exercising your rights is free.
Complaints
If you believe I'm misusing your data, you can lodge a complaint with the Romanian supervisory authority, Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP), at www.dataprotection.ro. Please email me first: most of the time I can solve the problem directly.
Changes
If I change how I use data (for example, I add a server-based form or an analytics tool), I'll update this page first.