Privacy Policy

This website is operated by LAZĂR MIHAI-NARCIS PFA, acting as data controller under GDPR.

1. Data we collect

We collect only the minimum necessary personal data:

• Name
• Email address
• Message content
• Project or business details voluntarily provided
• Technical data (IP address, browser type) via analytics tools

2. Purpose of data processing

• Responding to inquiries
• Providing services and project communication
• Business relationship management
• Website analytics and improvement

3. Legal basis (GDPR)

We process personal data based on:

• Consent – when you submit forms or contact us
• Contract – when processing is required for service delivery
• Legitimate interest – improving services and communication
• Legal obligation – when required by law

4. Data storage & retention

Personal data is stored only as long as necessary:

• Contact inquiries: up to 12 months
• Client/project data: up to 5 years (legal/accounting obligations)
• Analytics data: according to provider settings (e.g. Google Analytics)

5. Data sharing

We do not sell personal data. Data may be shared only with:

• Hosting providers
• Email service providers
• Analytics providers (Google, Meta, etc.)

Some providers may process data outside the EU (e.g. USA) under Standard Contractual Clauses (SCC).

6. Your GDPR rights

• Right of access
• Right to rectification
• Right to erasure (“right to be forgotten”)
• Right to restrict processing
• Right to data portability
• Right to object
• Right to withdraw consent at any time
• Right to lodge a complaint with ANSPDCP (Romania)

7. Cookies & tracking

This website may use cookies for:

• Essential website functionality
• Analytics (e.g. Google Analytics)
• Performance and improvement

Non-essential cookies are only used with user consent via cookie banner.

8. Data security

We implement appropriate technical and organizational measures such as HTTPS encryption and restricted access to personal data.

9. Data subject requests

You may contact us at contact@infranetix.ro for any GDPR-related request. We respond within 30 days as required by law.

10. Contact

Data controller: