Privacy Policy

Last updated: 6 October 2026

This Privacy Policy explains how personal data is handled when you visit mihaidumitrescu.com or contact me through the website.

The website is operated by Soft Rock SRL, a company registered in Romania, CUI 37643919.

For privacy-related questions or requests, you can contact:

mihai@mihaidumitrescu.com

1. Information you provide

If you contact me through the website form or by email, I may receive information such as your name, email address, company or agency name, website address, the type of help you are looking for, and any information you choose to include in your message.

Please avoid sending sensitive personal information unless it is genuinely necessary for your request.

2. Why this information is used

Information submitted through the website is used to respond to enquiries, discuss potential projects, provide requested information, prepare or perform services, maintain business correspondence, and protect the website against spam, abuse and security threats.

Depending on the circumstances, the legal basis for processing may be taking steps at your request before entering into a contract, performing a contract, complying with a legal obligation, or the legitimate interests of Soft Rock SRL in communicating with potential clients and protecting its website and services.

The contact form is not used to subscribe visitors to marketing communications.

3. Contact form

The website uses Contact Form 7 to provide its contact form.

In the current configuration, Contact Form 7 sends the information you submit by email. Form submissions are not intentionally stored in a separate website database.

Emails and related correspondence may be retained for as long as reasonably necessary to deal with the enquiry and any resulting business relationship. Enquiries that do not lead to an ongoing business relationship are normally deleted when they are no longer useful, while correspondence relevant to contracts, invoices, legal obligations or disputes may need to be retained for longer periods required by law or legitimate business needs.

4. Spam and security protection

The contact form uses technical measures designed to reduce automated spam.

The website uses Cloudflare Turnstile, a security service provided by Cloudflare, to distinguish legitimate visitors from automated traffic. Turnstile processes technical signals from the browser and network for security purposes.

Information processed through Turnstile is subject to Cloudflare's privacy practices and its Turnstile Privacy Addendum:

https://www.cloudflare.com/privacypolicy/
https://www.cloudflare.com/turnstile-privacy-policy/

Turnstile is used for website security and spam prevention, not for advertising or behavioural profiling.

5. Technical information and server logs

Like most websites, the hosting infrastructure may automatically process technical information when a visitor connects to the site. This can include IP address, browser and device information, requested URLs, timestamps and technical error or security information.

This information is used to operate the website, diagnose technical problems, prevent abuse and maintain security.

Server and security logs are kept only for as long as reasonably necessary for these purposes and may be automatically deleted or rotated according to the hosting and infrastructure configuration.

6. Cookies and similar technologies

The website does not currently intentionally use analytics, advertising or behavioural tracking cookies.

Strictly necessary technical cookies or similar technologies may be used where required for WordPress functionality, website security or spam protection.

If analytics, advertising or other non-essential tracking technologies are introduced in the future, this Privacy Policy and any required cookie-consent mechanism will be updated before those technologies are used.

7. Who may receive personal data

Personal data is not sold.

Where necessary to operate the website or provide services, data may be processed by service providers involved in website hosting and infrastructure, email delivery, website security and spam protection.

Cloudflare may process technical information when Turnstile is used. Some service providers may process information outside the European Economic Area. Where applicable, such transfers are subject to the safeguards provided by applicable data-protection law and the service provider's contractual and privacy arrangements.

Information may also be disclosed where required by law or by a competent public authority.

8. Your rights

Under applicable data-protection law, you may have the right to request access to your personal data, correction of inaccurate information, deletion of data, restriction of processing, data portability where applicable, and to object to processing based on legitimate interests.

Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect processing that was lawful before consent was withdrawn.

Requests can be sent to:

mihai@mihaidumitrescu.com

You also have the right to lodge a complaint with the Romanian supervisory authority, Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP):

https://www.dataprotection.ro/

9. Security

Reasonable technical and organisational measures are used to protect personal information against unauthorised access, loss, misuse or alteration.

No internet transmission or storage system can guarantee absolute security, but access to personal data is limited to what is reasonably necessary to operate the website and provide the requested services.

10. Automated decision-making

The website does not use personal data for automated decision-making or profiling that produces legal or similarly significant effects.

Automated anti-spam and security systems may assess technical signals solely to determine whether a request appears to originate from legitimate traffic or an automated system.

11. Changes to this Privacy Policy

This Privacy Policy may be updated when the website, services or data-processing practices change.

The current version and its latest revision date will always be published on this page.