Privacy Policy

raulandrei.com is operated by ZIOSRENT S.R.L., VAT/CUI 48080934, Trade Register no. J2023001944122, Romania (the "Controller"). Under Regulation (EU) 2016/679 ("GDPR"), ZIOSRENT S.R.L. is the data controller.

For any request about your data, write to gdpr@raulandrei.com.

a) Contact form. Name, email, phone (optional) and message, to reply and arrange bookings. Basis: steps at your request (Art. 6(1)(b)) and legitimate interest (Art. 6(1)(f)).

b) Newsletter. Your email, based on consent (Art. 6(1)(a)), which you can withdraw anytime.

c) Technical security data. IP address and minimal technical data for anti-spam protection (Cloudflare), on legitimate interest (Art. 6(1)(f)).

We do not process special categories of data (Art. 9) or make automated decisions (Art. 22).

We do not sell your data. We use (Art. 28 GDPR): Supabase (database, stored in the EU - AWS Stockholm, Sweden), Brevo (email, France), Cloudflare (hosting and anti-spam; US transfers under the EU-US Data Privacy Framework, Art. 45-46), Google Ireland Ltd. / Google LLC (Google Analytics - usage statistics, only if you accept analytics cookies; US transfers under the EU-US Data Privacy Framework, Art. 45).

• Contact messages: until resolved and up to 3 years.
• Newsletter email: until you unsubscribe.
• Technical data: short-term, per the providers.

Under Art. 15-21 GDPR: access, rectification, erasure, restriction, portability and objection. Write to gdpr@raulandrei.com; we reply within one month (Art. 12(3)). You may lodge a complaint with the Romanian DPA (ANSPDCP), www.dataprotection.ro (Art. 77).

We use two categories of cookies:

• Strictly necessary (Cloudflare Turnstile security; admin session) - exempt from consent under Art. 4 of Romanian Law 506/2004.
• Analytics - Google Analytics (_ga, _gid cookies), for statistics on how the site is used. These are set only after you click "Accept" in the banner (Art. 6(1)(a) GDPR). IP addresses are anonymized.

On your first visit we show a banner with equally visible and accessible "Accept" and "Decline" options. If you decline, analytics cookies are never loaded. You can change your choice anytime via "Cookie settings" in the footer - withdrawing is as easy as giving consent (Art. 7(3) GDPR), and on withdrawal we delete the analytics cookies.

We apply appropriate measures (Art. 32): HTTPS/TLS, restricted access, database-level rules and providers with contractual guarantees.

This is a translation for convenience. In case of any discrepancy, the Romanian version prevails.