Privacy Policy

This document explains, in plain terms, what happens to personal data when you visit this website or get in touch with Waciho Duzavo. It is written to comply with Regulation (EU) 2016/679 (the General Data Protection Regulation, commonly called GDPR) and with Romanian Law No. 190/2018 on measures implementing that regulation.

Waciho Duzavo, operating from Strada Nerva Traian 27-33, Bucharest, Romania, acts as the data controller for information collected through this site. That means we decide why and how your personal data is processed, and we are responsible for doing so lawfully.

Personal data reaches us mainly through the contact form on this site. When you submit that form, your name, company name, email address, phone number and message content are prepared for transmission via your own email client, since the form uses a direct mailto submission rather than a server-side database. This means that, technically, we only receive this information once you actually send the resulting email, and it is stored in our email inbox rather than a separate database.

We also use cookies, small text files placed on your device, for two purposes: keeping the site functional, and, only with your consent, understanding in aggregate how pages are used. Further detail on this sits in our separate cookies policy, but the legal basis for using non-essential cookies is your consent, given through the cookie preferences link at the bottom left of every page.

Where you have given consent for analytics cookies, we may see aggregated, non-identifying statistics about page visits. We do not sell personal data, and we do not share contact form content with third parties except where required by Romanian law or where a specific service provider, such as an email hosting provider, processes it strictly on our behalf as a data processor.

Personal data submitted through the contact form is retained only as long as reasonably necessary to respond to your enquiry and, where relevant, to keep a record of any resulting engagement, generally not exceeding three years from the last contact, unless a longer retention period is required for accounting or legal purposes under Romanian law.

You have a number of rights under GDPR regarding your personal data. These include the right to request access to data we hold about you, the right to request correction of inaccurate data, the right to request deletion in certain circumstances, the right to restrict or object to processing, and the right to data portability where technically applicable. To exercise any of these rights, write to [email protected], and we will respond within the timeframes required by law.

If you believe your data protection rights have not been respected, you may lodge a complaint with the Romanian supervisory authority, the National Supervisory Authority for Personal Data Processing (ANSPDCP), or with the supervisory authority of your usual place of residence within the EU.

This site does not knowingly collect personal data from anyone under the age of sixteen. If you believe a minor has submitted personal data through this site, please contact us so it can be removed.

We may update this policy from time to time, for example to reflect a change in how the contact form works or a change in applicable law. The date at the top of this page reflects the most recent revision.