Privacy Policy

Last updated: 23 October 2026

1. Who is responsible for your data?

The data controller is Federico Pacilli PFA, CUI 50523430, registered at Intrarea Gheorghe Simionescu, Nr. 19, Ap. B26, Bucureşti, 077190, Romania. For privacy enquiries, email [email protected].

2. Scope and data collected

This policy applies to fppfa.info. When you contact us, we collect your name, email address, message and, if provided, phone number and selected service. We may also process technical information such as IP address, browser details, timestamps and security signals required to operate and protect the website. Please avoid submitting sensitive personal information unless necessary.

3. Why we process personal data

We use contact details to respond to enquiries and discuss requested services, based on steps taken at your request before a contract (GDPR Article 6(1)(b)) or our legitimate interest in responding to general business enquiries (Article 6(1)(f)). We process relevant information to perform contracts (Article 6(1)(b)), protect the site and prevent abuse (Article 6(1)(f)), and comply with applicable legal obligations (Article 6(1)(c)). We do not automatically subscribe contact-form users to marketing emails.

4. Hosting, email and spam protection

The website is hosted on Cloudflare Pages and uses Cloudflare Turnstile to help prevent spam and automated abuse. Cloudflare may process IP addresses, browser information and other technical signals for security purposes. We use Resend to deliver contact-form messages to our email inbox. These providers may process information as service providers under their applicable terms and privacy documentation.

See Cloudflare Privacy Policy, Cloudflare Turnstile Privacy Policy and Resend Privacy Policy.

5. Cookies and similar technologies

The website and its security services may use strictly necessary cookies or similar technologies to provide functionality, security and abuse prevention. We do not intentionally use advertising or behavioural profiling cookies on this website. If optional analytics or marketing technologies are introduced, we will update this policy and obtain consent where required by Romanian and EU law.

6. Sharing and international transfers

Personal data may be accessible to hosting, security, email delivery and email inbox providers where necessary to provide their services, and to authorities where legally required. Some providers may process data outside the European Economic Area. Where relevant, transfers must be covered by an adequacy decision, Standard Contractual Clauses or another lawful safeguard under Chapter V GDPR. We do not sell personal data.

7. How long we keep information

We delete contact-form enquiries within 90 days after the enquiry has been resolved, or earlier when no longer necessary, unless the enquiry develops into a professional relationship or retention is needed to establish, exercise or defend legal claims. Information relating to clients, contracts, invoices or accounting is retained for the periods required by applicable Romanian law. Technical and security information may be retained according to the applicable settings and policies of service providers.

8. Your rights

Subject to applicable GDPR conditions, you may request access to, rectification or erasure of your data; restriction of processing; data portability where applicable; and object to processing based on legitimate interests. Where processing is based on consent, you may withdraw consent at any time without affecting earlier lawful processing. To exercise your rights, contact [email protected]. We will respond within the applicable statutory timeframe, normally one month.

9. Complaints

You may lodge a complaint with the Romanian supervisory authority, Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP), at dataprotection.ro, or another competent supervisory authority.

10. Security and third-party websites

We use reasonable technical and organisational measures, including HTTPS and website security controls, to protect personal information. No system is completely secure. External websites linked from this site have their own privacy practices.

11. Children

Our professional services website is not directed at children, and we do not knowingly solicit personal information from children.

12. Updates

We may update this Privacy Policy when our services, processing activities or legal obligations change. The latest version and revision date will appear on this page.