Privacy notice
In short: we only collect what you write to us through the form, so we can reply. We use no cookies, we don't market to you with your data, and we don't sell it.
1. Who is responsible
The controller is [DENUMIRE LEGALĂ — ex. HTH CONSULTING SRL], tax ID (CUI) [CUI], trade register no. [J40/…/…], registered office at [ADRESA SEDIULUI SOCIAL], București. You can reach us at contact@hthconsulting.ro.
2. What we collect
Through the contact form: your name, email address, message and, if you fill them in, your company and the subject. We also record which language version of the page you wrote from, so we reply in the same language. That's all — we don't ask for a phone number, address or anything else.
Our hosting provider keeps technical logs of every visit (IP address, browser, page requested, time) for security and to keep the site running.
Please don't send us sensitive data through the form, such as ID numbers, health data or bank details.
3. Why we use it, and on what legal basis
- To reply and, if you want, to send you a quote — GDPR Art. 6(1)(b): steps taken at your request before entering into a contract.
- Where the message isn't about a possible contract — our legitimate interest in answering correspondence, Art. 6(1)(f).
- Technical logs — legitimate interest in keeping the site secure and working, Art. 6(1)(f).
We make no automated decisions about you and build no profiles.
4. Who else sees it
- Netlify, Inc. (USA) hosts the site and receives form submissions as our processor. Transfer to the USA relies on the European Commission's Standard Contractual Clauses and, where applicable, the EU-US Data Privacy Framework.
- Proton AG (Elveția) is our email provider, where we receive the notification of each message.
No one else, unless the law requires it.
5. How long we keep it
Messages that don't lead to working together are deleted within 12 months. If we do work together, we keep the correspondence for the length of the contract plus the retention periods required by Romanian accounting and tax law. Technical logs are kept for as long as the hosting provider's policy sets.
6. Your rights
You can ask at any time for a copy of your data, to have it corrected or deleted, to restrict processing, to object to processing based on legitimate interest, or to receive your data in a portable format. We reply within one month.
If you think we have handled your data badly, you can complain to the Romanian supervisory authority, ANSPDCP — www.dataprotection.ro.
7. How to request deletion
Write to us from the address you contacted us with, with the subject "Data deletion request". The button below opens that email already filled in.
We delete the message from the form, from our inbox and from any other record within 30 days and confirm in writing. The only exception is documents the law requires us to keep, such as invoices, and we tell you explicitly if that applies.
8. Children
This site is aimed at businesses, not at anyone under 16, and we don't knowingly collect data about children. If you find a minor has sent us data, write to us and we will delete it at once.
9. Cookies
This site uses no cookies. Details in the cookie policy.
10. Changes
If we change how we use data, we update this page and the date at the top.