1. Who we are
The data controller is EST PONTEM S.R.L., registered in Str. Principală nr. 159, sat Ștefan cel Mare, com. Ștefan cel Mare, jud. Vaslui, România, Company ID (CUI) 46219646, Trade Register no. J37/460/2022 (“EST PONTEM”, “we”). For any question about your data, email us at bogdan@estpontem.ro.
2. What data we collect and why
2.1. Contact form
We collect your name, email and, optionally, company, website, service of interest, estimated budget and your message, to reply and prepare a proposal.
- Legal basis: steps taken at your request prior to entering a contract (Art. 6(1)(b) GDPR) and the consent you give by ticking the box in the form.
2.2. Booking a call
We collect your name, email, chosen time and, optionally, company, service and topic. We automatically create a Google Calendar invite with a Google Meet link and send you a confirmation email.
- Legal basis: Art. 6(1)(b) GDPR (pre-contractual steps at your request).
2.3. Analytics data (only with your consent)
If you accept analytics cookies, we use Google Analytics 4 and PostHog to understand how the site is used: pages visited, visit duration, device type, traffic source, interactions (e.g. using the ROI calculator) and, for PostHog, session recordings in which form fields are masked. IP addresses are anonymized or truncated.
- Legal basis: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time via “Cookie settings” in the site footer.
2.4. Technical and security data
Our hosting provider automatically logs technical data (IP address, browser type, date and time of access) to run the site and protect it from abuse.
- Legal basis: our legitimate interest in keeping the site secure (Art. 6(1)(f) GDPR).
2.5. ROI calculator
Values entered in the ROI calculator are processed only in your browser and are never sent to us.
3. Who we share data with
We never sell or rent your data. We only share it with providers that help us run the site, acting as processors:
| Provider | Purpose | Location / safeguards |
|---|---|---|
| Vercel Inc. | Website hosting | EU / US, Standard Contractual Clauses (SCC), EU-US Data Privacy Framework |
| Google (Workspace, Sheets, Calendar, Meet) | Managing messages and bookings | EU / US, SCC, Data Privacy Framework |
| Resend | Sending confirmation emails | EU / US, SCC |
| Google Analytics 4 | Traffic statistics (consent only) | EU / US, SCC, Data Privacy Framework |
| PostHog | Product analytics (consent only) | EU server (Frankfurt) |
We may disclose data to public authorities only when required by law.
4. How long we keep data
- Contact messages and bookings: up to 24 months after the last interaction, unless you become a client.
- Client data: for the duration of the contract and afterwards for the period required by accounting law.
- Analytics data: up to 14 months (Google Analytics) and 12 months (PostHog).
- Server technical logs: usually up to 30 days.
5. Your rights
Under the GDPR you have the right to:
- access your data;
- rectify inaccurate data;
- erasure (“right to be forgotten”);
- restrict processing;
- data portability;
- object to processing based on legitimate interest;
- withdraw consent at any time, without affecting the lawfulness of prior processing;
- not be subject to a decision based solely on automated processing.
To exercise your rights, email bogdan@estpontem.ro. We reply within one month. You may also lodge a complaint with the Romanian supervisory authority (ANSPDCP), 28-30 G-ral. Gheorghe Magheru Blvd., Sector 1, Bucharest, www.dataprotection.ro, or with the authority in your country of residence.
6. Security
We use encrypted connections (HTTPS), need-to-know access to data and providers that follow recognized security standards.
7. Minors
The site is aimed at businesses and professionals. We do not knowingly collect data from anyone under 16.
8. Changes
We may update this policy. The current version is always available on this page, with its last updated date. See also our Cookie Policy.