This notice explains how enquiries and website data are handled. The controller is FISCALERA S.R.L., Strada Academiei, nr. 28–30, etaj 4, București, Sector 1, România, tax identification no. 54284050. Contact: lucian.demezzo@fiscalera.ro.
Information and purposes
The form collects your name, email and message. Telephone number, company and topic are optional. Please do not include identity documents, national identification numbers, tax documents or sensitive information. A suitable channel can be agreed later.
We use enquiries to respond and assess a potential engagement. When you request an engagement in your own name, the basis is taking steps at your request before a contract (GDPR Article 6(1)(b)). General questions and communications with company representatives rely on our legitimate interests in managing professional relationships (Article 6(1)(f)). Security and abuse prevention also rely on legitimate interests. Enquiries are not used for unsolicited marketing.
Storage and access
Form enquiries are stored in the WordPress database and are accessible to authorised administrators. The website is hosted by Rackhost. Where email correspondence follows, Microsoft 365 is used. Technical providers and authorised maintenance personnel may process data as needed to operate these services.
The application uses a keyed, pseudonymous representation of the requesting IP address for rate limiting; this expires after one hour. Random codes used to prevent duplicate form submissions are cleared after two days at the next maintenance run. Hosting infrastructure may separately keep technical logs, including IP addresses, request times and requested URLs, for security and operation. The operator must confirm the applicable hosting-log and backup retention arrangements.
Retention
Enquiries in WordPress are scheduled for deletion 180 days after submission. Execution depends on the scheduled maintenance task. A contractual relationship, legal obligation or dispute may require a separate record and retention period. Email copies, hosting logs and backups have their own retention arrangements; they are not deleted by the website’s enquiry cleanup.
External services and transfers
WhatsApp and social-media buttons are ordinary external links. They do not automatically load those platforms into this site. If you use them, the provider processes information under its own policies. Hosting and email services may involve international processing depending on the contracted services. The operator is responsible for confirming the relevant contracts and applicable transfer safeguards; details can be requested at the contact address above.
Your rights
Subject to the GDPR, you may request access, correction, erasure, restriction and portability, and object to processing based on legitimate interests. If a distinct activity relies on consent, it can be withdrawn without affecting previous lawful processing. Requests can be sent by email; the usual response period is one month, with extensions only as permitted by law. You can complain to ANSPDCP.
Required form fields are necessary to receive and answer the enquiry. The site does not use profiling or solely automated decisions with legal effects. This notice concerns the website; any engagement may require additional information about professional processing.
Comments and email confirmation
We collect your name (which may be a pseudonym), email and comment text to verify the address, prevent abuse and moderate contributions. The basis is our legitimate interest in managing a relevant and safe discussion. Your name, text and date become public only after moderator approval; your email is not published. Unconfirmed comments are kept outside the moderation queue and deleted after 5 days when scheduled maintenance runs.
Confirmed email addresses are retained in the database to recognise the same address on future comments, including from other devices, without cookies. You may request removal of this record using the controller’s email. Confirmation of an address does not certify the author’s identity and does not replace moderation. Approved comments are retained while the article and discussion remain relevant, subject to justified erasure requests. Rejected comments may be removed by the moderator.
The ALTCHA anti-bot check is hosted on this website, without an external account or sending information to an external CAPTCHA service. It uses a temporary technical check and submission limits. Confirmation and moderation emails are transactional and do not subscribe you to marketing. Rackhost provides the technical website processing and dispatch of automated messages when the hosting mail transport is used. Professional correspondence remains in Microsoft 365. During technical testing, administrator notifications are routed to the test address designated by the operator.