NodWeb
en ro

Privacy Policy

Last updated: 23 September 2026

The short version: we collect only what you send us through the contact form or by email, we use it to reply to you and, if we work together, to run your project. We don't sell it, we don't track you, and this site sets no cookies.

Who we are

This site is run by NodWeb, a web design studio in Bucharest, Romania. Under the GDPR, we are the controller of the personal data described here.

Location: Bucharest, Romania
Email: [email protected]
Phone: +40 731 431 633

What we collect

  • When you use the contact form: your name, business name, email address, and the message you write.
  • When you email or call us directly: whatever you choose to include, plus your email address or phone number.
  • When you visit any page: our hosting provider, Cloudflare, briefly processes your IP address and basic request data (browser type, the page requested) to deliver the site and protect it from attacks. We don't use this data to identify you.

We don't use analytics, advertising pixels, or tracking cookies. Fonts are served from our own domain, so loading a page doesn't send your data to Google or any other font service.

Why we use it, and on what legal basis

  • To reply to your enquiry and prepare a quote. This is a step you asked us to take before a possible contract (GDPR Art. 6(1)(b)). That's why the form has no consent checkbox: you're asking us to respond, and we need your details to do that.
  • To deliver the project, invoice it, and keep records if you become a client. Contract (Art. 6(1)(b)) and our legal obligations under Romanian accounting and tax law (Art. 6(1)(c)).
  • To keep the site secure and working (the Cloudflare data above). Our legitimate interest in running a safe website (Art. 6(1)(f)).

We never add you to a newsletter or send you marketing because you filled in the form.

Who else handles your data

We use a small number of providers to run the site and our inbox. They process data only to provide their service to us:

  • Web3Forms receives what you submit through the form and forwards it to our email. It says it doesn't store form submissions; its server logs are deleted periodically. Its servers are in the United States.
  • Google (Gmail) hosts our email, where your message lands and where our conversation continues.
  • Cloudflare hosts this website and handles its network traffic.

We share data with public authorities only where the law requires it. We don't sell or rent personal data to anyone.

Transfers outside the EU

Some of these providers process data in the United States. Google and Cloudflare are certified under the EU–US Data Privacy Framework, which the European Commission recognises as providing adequate protection. Web3Forms is not, so when you choose to send us a message through the form, that transfer relies on it being necessary to handle the request you're making (GDPR Art. 49(1)(b)). If you'd rather not go through Web3Forms, email us directly instead.

How long we keep it

  • Enquiries that don't turn into a project: up to 12 months after our last exchange, then deleted.
  • Client correspondence and project records: for the length of our work together, plus the period Romanian accounting and tax law requires us to keep invoices and contracts.
  • Hosting logs: kept by Cloudflare for short periods under its own policy.

Your rights

You can ask us, at any time and free of charge, to:

  • tell you what data we hold about you and give you a copy (access);
  • correct anything that's wrong (rectification);
  • delete it (erasure), unless the law requires us to keep it;
  • limit how we use it while a question is being resolved (restriction);
  • send it to you or another provider in a common format (portability);
  • stop using it where we rely on legitimate interest (objection).

Write to [email protected] and we'll reply within one month. If you think we've handled your data wrongly, you can complain to the Romanian data protection authority, ANSPDCP (dataprotection.ro), or to the authority in the EU country where you live.

Do you have to give us this data?

No. But without a name and an email address or phone number, we can't reply to you. We don't make any automated decisions or build profiles from what you send.

Sites we build for clients

This policy covers nodweb.org only. On websites we build for clients, each business is responsible for the data its own visitors send, and publishes its own privacy policy.

Changes to this policy

If we change how we handle data, we'll update this page and the date at the top.