1. Introduction
This policy explains what personal data we process when you visit ris-development.dev or contact us through the website, why we process it, on what legal basis, and what rights you have. It applies to visitors of the website and to anyone who sends us a message through the contact form or by email.
2. What data we process
- Contact form data: your name, email address and the message you send us, including any details about your project that you choose to share. We do not store contact form submissions in a database. When you submit the form, your message is sent to our inbox as an email, and it is kept there.
- Email correspondence: the content of the emails we exchange with you after your first message.
- Technical data: when you visit the website, your browser automatically sends technical data such as your IP address, browser type and device type. This data is processed by our hosting provider (Vercel) in server logs, for security and to keep the website running. We do not collect or keep these logs ourselves.
- Spam protection data: when you submit the contact form, Cloudflare Turnstile checks that the request comes from a person and not a bot. This check processes technical data about your browser and connection.
- Usage statistics: aggregated, anonymous statistics about visits (for example, number of visitors, pages viewed, country, device type), collected with Vercel Web Analytics without cookies and without identifying individual visitors.
We do not ask for and do not want to receive sensitive data (such as health data) through the contact form.
3. Why we process your data and on what legal basis
- To reply to your message and discuss a possible project with you: taking steps at your request before entering into a contract (Art. 6(1)(b) GDPR) and our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR).
- To keep a record of our communication with you: our legitimate interest in having a history of the discussions with potential and existing clients (Art. 6(1)(f) GDPR).
- To protect the website against spam, abuse and security incidents: our legitimate interest in keeping the website secure (Art. 6(1)(f) GDPR).
- To understand, in aggregate, how the website is used and improve it: our legitimate interest (Art. 6(1)(f) GDPR).
- If we work together, to manage the contract, invoicing and accounting: performance of the contract (Art. 6(1)(b) GDPR) and our legal obligations (Art. 6(1)(c) GDPR).
We do not use your data for automated decision-making or profiling, and we do not send you marketing messages unless you ask us to.
5. Transfers outside the European Economic Area
Some of our providers are based in, or process data in, the United States. In these cases, the transfer is based on the safeguards provided by the GDPR, such as the EU-U.S. Data Privacy Framework (where the provider is certified) or the European Commission's Standard Contractual Clauses.
6. How long we keep your data
- Messages and email correspondence about a possible project: 12 months from our last communication, if no collaboration follows. After that, we delete the emails from our inbox.
- If we start working together: for the duration of the collaboration, and afterwards for the periods required by Romanian accounting and tax law for contracts and financial documents.
- Technical logs: kept by our providers only for the short period set by their own policies, for security and troubleshooting.
After these periods, the data is deleted or anonymised.
7. Your rights
Under the GDPR, you have the right to:
- access the personal data we hold about you;
- ask us to correct inaccurate data;
- ask us to delete your data;
- ask us to restrict the processing of your data;
- receive your data in a portable format;
- object to processing based on our legitimate interest.
To exercise any of these rights, email us at hello@ris-development.dev. We will reply within one month. You also have the right to lodge a complaint with the Romanian data protection authority, Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP), at dataprotection.ro (opens in a new tab).
9. Security
We use appropriate technical and organisational measures to protect your data, including encrypted connections (HTTPS), spam protection on the contact form and access to the data limited to the people who need it.
10. Children
This website is intended for businesses and is not directed at children under 16. We do not knowingly collect data from children.
11. Changes to this policy
We may update this policy from time to time. The current version and the date of the last update are always published on this page.
12. Contact
For any question about this policy or about your personal data, email us at hello@ris-development.dev.