Last updated: 13 May 2026
Privacy policy
This policy explains how we process personal data received through sustainabletech.ro, in accordance with Regulation (EU) 2016/679 (GDPR) and Romanian Law 190/2018.
1. Data controller
Controller: SUSTAINABLE EDTECH ROMANIA S.R.L. · VAT
RO41226189 · Reg. no. J2019002422354.
Contact for GDPR requests: contact@sustainabletech.ro.
2. What data we process
Data you provide directly
If you email us at contact@sustainabletech.ro, we process: your email address, any name you provide, the organization mentioned, and the content of your message — strictly as needed to answer your request.
Automatic technical data
Our infrastructure providers (Cloudflare, Vercel) automatically log limited technical data: IP address, browser type, operating system, page visited, request timestamp. This data is used exclusively for security, abuse prevention, and aggregated anonymous statistics. We do not build individual profiles or correlate this data with your identity.
3. Purposes and legal basis
| Purpose | Legal basis |
|---|---|
| Responding to contact requests | Legitimate interest, GDPR Art. 6(1)(f) |
| Site security and operation | Legitimate interest, GDPR Art. 6(1)(f) |
| Anonymous aggregated usage statistics | Legitimate interest, GDPR Art. 6(1)(f) |
4. Recipients (sub-processors)
- Cloudflare, Inc. — CDN, DNS, security, Email Routing, anonymous analytics.
- Zoho Corporation (EU region) — SMTP for sending emails from the domain.
- Vercel Inc. — static hosting.
All sub-processors comply with GDPR and have Standard Contractual Clauses (SCC) where applicable. We do not sell or transmit data to third parties for marketing purposes.
5. International transfers
Some services (Cloudflare, Vercel) may process data outside the European Economic Area (EEA). These transfers are covered by the European Commission's standard contractual clauses and, where applicable, the EU-US Data Privacy Framework.
6. Retention period
- Emails received: maximum 12 months after the last interaction, unless legal obligations require longer retention.
- Technical logs: maximum 30 days.
- Aggregated anonymous statistics: indefinite (cannot be linked to an individual).
7. Your rights
As a data subject, you have the right to:
- Access your data
- Rectification
- Erasure ("right to be forgotten")
- Restriction of processing
- Data portability
- Object to processing based on legitimate interest
- File a complaint with the Romanian Data Protection Supervisory Authority (ANSPDCP, anspdcp.ro)
To exercise your rights, write to contact@sustainabletech.ro. We respond within 30 days (in complex cases we may extend by another 60 days, notifying you).
8. Cookies
For details about cookies, see the cookie policy.
9. Changes
This policy may be updated. The current version is published here with the date of the latest revision. Significant changes will be visibly flagged on the site.