Privacy Policy
1. Introduction
Dan Stativa ("we", "our", "us") operates danstativa.dev. This Privacy Policy explains how we collect, use and protect your personal data in accordance with the General Data Protection Regulation (GDPR) and the ePrivacy Directive.
2. Data Controller
Dan Stativa
Email: [email protected]
Website: https://danstativa.dev
3. Data We Collect
3.1 Information You Provide
- Contact forms: Name, email address, phone number (optional), service interest and message content.
- Service inquiries: Project details you share voluntarily.
3.2 Automatically Collected Data (only with your consent)
- Analytics data: Page views, session duration, referral source, device type, browser information — via Google Tag Manager.
- Marketing data: Conversion events — via Google Ads.
No analytics or marketing data is collected unless you explicitly consent via the cookie banner.
3.3 Cookies
We use cookies and localStorage to manage your consent preferences and, with your consent, to track analytics and marketing. See our Cookie Policy for a full breakdown.
4. Legal Basis for Processing
| Purpose | Legal Basis (GDPR) |
|---|---|
| Responding to contact form submissions | Art. 6(1)(a) Consent & Art. 6(1)(f) Legitimate interest |
| Website analytics | Art. 6(1)(a) Consent |
| Marketing / conversion tracking | Art. 6(1)(a) Consent |
5. How We Use Your Data
- To respond to your inquiries and provide requested services
- To improve our website and services (with analytics consent)
- To measure marketing effectiveness (with marketing consent)
- To comply with legal obligations
6. Third-Party Data Processors
6.1 Formspree (Form Processing)
- Purpose: Handling contact form submissions
- Data shared: Name, email, message content
- Location: United States (Standard Contractual Clauses apply)
- Policy: formspree.io/legal/privacy-policy
6.2 Google Tag Manager (Analytics — optional)
- Purpose: Website analytics (only if you consent)
- Data shared: Anonymous usage data, anonymised IP addresses
- Location: United States (GDPR-compliant)
- Policy: policies.google.com/privacy
6.3 Google Ads (Marketing — optional)
- Purpose: Conversion tracking (only if you consent)
- Data shared: Conversion events, anonymous identifiers
- Location: United States (GDPR-compliant)
- Policy: policies.google.com/privacy
7. Data Retention
- Contact form data: Retained for up to 2 years after last contact, then deleted.
- Analytics data: Retained according to Google's settings (typically 14–26 months).
- Marketing data: Retained per Google Ads retention policies.
- Consent record: Stored in your browser's localStorage until you clear it or withdraw consent.
8. Your Rights Under GDPR
You have the right to:
- Access — Request a copy of your personal data.
- Rectification — Request correction of inaccurate data.
- Erasure — Request deletion of your data.
- Restrict processing — Request limitation of data processing.
- Data portability — Receive your data in a structured, machine-readable format.
- Object — Object to processing based on legitimate interests.
- Withdraw consent — Withdraw consent at any time via the cookie settings button on our website.
To exercise these rights, email us at [email protected]. You also have the right to lodge a complaint with your local data protection authority.
9. Data Security
We implement appropriate technical and organisational measures to protect your data, including:
- HTTPS encryption for all data transmission
- Secure, GDPR-compliant third-party processors
- Regular security reviews
10. International Data Transfers
Your data may be transferred to and processed in the United States by our third-party processors (Formspree, Google). These transfers are protected by Standard Contractual Clauses (SCCs) approved by the European Commission.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date.
12. Contact
For questions about this Privacy Policy or to exercise your rights:
Email: [email protected]
Website: https://danstativa.dev