Privacy policy

Last updated: 2026-08-24

This document explains what personal data we process, for what purpose, on what legal basis and what rights you have. It is written to be read, not to discourage you.

1. Who the data controller is

The controller of the personal data processed through this website is TechCraft, with its registered office at Bulevardul Cetății nr. 57, Timișoara, Timiș county, Romania.

For any question about the processing of your data you can write to the email address in the contact section of this website.

2. What data we collect through this website

This website is fully static. It contains no contact forms, it has no server that receives and stores visitor data, and it creates no user accounts.

As a result, simply browsing the site does not cause us to collect or store any personal data about you.

Personal data reaches us only if you initiate contact, through one of the methods offered:

• Email — we receive your email address, your display name and the content of the message you send.
• WhatsApp — we receive your phone number, your profile name and the content of the conversation.
• Phone — we receive the number you call from and whatever information you tell us.

3. Data collected automatically by the hosting provider

The provider hosting this website records, as any web server does, the technical data required for operation and security: IP address, browser type and version, operating system, date and time of access, the pages requested and the referring page.

These technical logs are managed by the hosting provider as a processor, are used exclusively for the operation and security of the service, and are not correlated by us with your identity.

4. Cookies

This website does not use cookies — not for tracking, not for advertising, not for analytics. That is why there is no consent banner: there is nothing to ask your consent for. We don’t embed maps, videos or social media widgets, and the fonts load from this same domain rather than from an external provider, precisely because those bring third-party cookies with them.

If we ever add a tool that uses cookies, we will put the consent banner the law requires in place before switching it on, and update this page.

5. Purposes and legal bases for processing

6. How long we keep the data

• Correspondence that does not lead to a contract: a maximum of 12 months from the last exchange of messages.
• Project correspondence and documents: for the duration of the contract and 3 years after it ends, for any claims or warranty matters.
• Financial and accounting documents: 10 years, as required by Romanian tax legislation.
• Technical server logs: according to the hosting provider’s policy, generally between 7 and 30 days.

7. Who we share the data with

We do not sell, rent or trade personal data with anyone.

Strictly for the purposes above, the data may be accessed by the following categories of recipients:

• The website hosting provider and the email service provider.
• Meta Platforms Ireland Ltd., if you choose to contact us over WhatsApp — the conversation is also subject to WhatsApp’s own privacy policy.
• Our accountant and, where necessary, our legal adviser, for financial and contractual documents.
• Public authorities, where there is a legal obligation to provide information.

Some of these providers may process data outside the European Economic Area. In those cases the transfer is based on the standard contractual clauses approved by the European Commission or on an adequacy decision.

8. Your rights

Under the GDPR you have the following rights:

• Right of access — to find out whether we process data about you and to receive a copy.
• Right to rectification — to have inaccurate or incomplete data corrected.
• Right to erasure — to have the data deleted, where we have no legal obligation to keep it.
• Right to restriction of processing — in the situations set out in the regulation.
• Right to data portability — to receive your data in a structured, commonly used format.
• Right to object — to object to processing based on our legitimate interest.
• Right not to be subject to automated decision-making — we make no automated decisions with legal effect on you.

You can exercise any of these rights by writing to us by email. We respond within 30 days of receiving the request at the latest.

If you are not satisfied with the response, you have the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP), B-dul G-ral. Gheorghe Magheru 28-30, Bucharest, or at www.dataprotection.ro.

9. Data security

The site is served exclusively over HTTPS. Correspondence is stored in accounts protected by unique passwords and two-factor authentication. Access to client project data is limited to the people directly involved in the project.

No system is absolutely secure, but we apply measures appropriate to the volume and type of data processed.

10. Children’s data

Our services are aimed exclusively at companies and professionals. We do not knowingly collect data about anyone under 16. If you become aware that a minor has sent us personal data, write to us and we will delete it.

11. Changes to this policy

If we change the way we process data — for example if we add a contact form or a traffic analytics tool — we update this page and change the date shown at the top of the document.