Privacy policy.

Controller and contact details

The controller responsible for the public Dorobanti Media website is DOROBANTI NETWORK SRL, trading as Dorobanti Media, with its registered office at Aleea Tomești nr. 9, bl. 15, sc. 2, et. 7, ap. 63, Sector 4, 042144 Bucharest, Romania, unique registration and tax code (CUI) 51010254, Trade Register number J2024047810002, and EUID ROONRC.J2024047810002. The company provides custom software development services under CAEN 6210 Rev. 3 (equivalent to 6201 Rev. 2).

For questions or requests concerning personal data, email contact@dorobantimedia.com or use the public contact page.

Scope and sources

This notice applies to visitors of the public website and people who send a project inquiry. It does not replace any privacy information provided separately to clients, suppliers, employees, or authorized CRM users.

We receive information directly from you when you use the contact form or correspond with us. Limited technical, security, and analytics information may be generated automatically when you use the website.

Personal data we process

Project inquiries: name, phone number, optional email address, optional company or product name, selected service, message, interface language, submission and update times, and the internal status assigned to the inquiry. We also process later correspondence and any information you choose to include in it.

Security and operation: request metadata needed to deliver and protect the website. For contact-form rate limiting, the IP address and phone number are converted into one-way hashed keys before the rate-limit record is stored; the raw values are not stored in that record. Hosting providers may process IP addresses, request headers, timestamps, and diagnostic logs as part of delivering and securing the service.

Preferences and analytics: the website stores your cookie choice and appearance preference. If you consent to analytics, Google Analytics may process a cookie identifier, pages viewed, page title and URL, approximate location, browser and device information, referrer, session statistics, IP address during transmission, and related measurement data. Advertising storage, ad personalization, ad-user data, and Google Signals are disabled by this website.

Purposes and legal bases

If you inquire for yourself as a potential client, we use the inquiry data to review your request, contact you, prepare a proposal, and take steps you request before entering a contract (Article 6(1)(b) GDPR). If you contact us on behalf of an organization or another person, we rely on our legitimate interest in answering business communications and evaluating a possible project (Article 6(1)(f) GDPR).

We process limited technical and security data to provide the website, prevent abuse, troubleshoot failures, and protect our systems and users. The legal basis is our legitimate interest in operating a secure and reliable service (Article 6(1)(f) GDPR). Where information must be retained or disclosed under tax, accounting, company, or other law, the basis is compliance with a legal obligation (Article 6(1)(c) GDPR).

Optional analytics is based on your consent (Article 6(1)(a) GDPR and Article 4 of Romanian Law 506/2004). You can refuse or withdraw analytics consent at any time without affecting the lawfulness of processing carried out before withdrawal.

Required and optional information

Name, phone number, service selection, and project message are required to submit an inquiry because we need them to understand the request and reply. We cannot receive the form without them. Email address and company name are optional. The privacy notice is displayed next to the submit action; no consent is requested for processing that is necessary to answer your inquiry. Providing an inquiry does not create a contract or require either party to proceed with a project.

Recipients and international transfers

Access is limited to authorized Dorobanti Media personnel and providers that support hosting, database infrastructure, security, and technical operations. Professional advisers or public authorities may receive data where reasonably necessary to establish, exercise, or defend legal claims or comply with law. We do not sell personal data.

Google receives analytics data only after consent. Some providers may process data outside the European Economic Area. Where this occurs, we use an applicable European Commission adequacy decision, including the EU–U.S. Data Privacy Framework where available, or safeguards such as the European Commission standard contractual clauses. You may request information about the safeguard relevant to your data by contacting us.

Retention

Project inquiries that do not lead to a client relationship are reviewed and deleted or anonymized when no longer needed, normally no later than 24 months after the last meaningful contact. If a project proceeds, relevant correspondence, contracts, invoices, and accounting records are kept for the periods required by Romanian law and for the limitation periods applicable to legal claims.

Rate-limit records contain hashed keys, counters, and timestamps. The active rate-limit window is no longer than one hour, and records older than 24 hours are purged during subsequent rate-limit activity. Hosting and security logs are retained according to the provider configuration and only for as long as reasonably necessary. Your cookie choice is stored for six months and your appearance preference for up to one year. Google Analytics cookie durations and controls are described in the cookie policy.

Security

We use measures appropriate to the nature of the data and the risks involved, including access controls, encryption in transit, request validation, rate limiting, restricted administrative access, and security headers. No internet service can guarantee absolute security.

Your rights and complaints

Subject to the conditions in the GDPR, you may request access, rectification, erasure, restriction, or portability of your data, and you may object to processing based on legitimate interests. You may withdraw consent at any time. Rights requests are normally answered within one month and are free unless a request is manifestly unfounded or excessive. We may request reasonable information to verify identity.

You also have the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP), B-dul General Gheorghe Magheru 28-30, Sector 1, 010336 Bucharest, Romania, or with the supervisory authority in the EU or EEA country where you live or work.

Automated decisions and children

We do not use the personal data covered by this notice to make solely automated decisions that produce legal or similarly significant effects. The public website is intended for business and professional inquiries and is not directed to children.

Changes to this notice

We may update this notice when the website, providers, processing activities, or legal requirements change. Material changes will be highlighted where appropriate. The current version and its update date remain available on this page.