Data Protection Notice (GDPR)
LexiCrafts is operated by Cojocaru Ionela, Persoana Fizica Autorizata (PFA), registered in Romania, Gorj County, Targu-Jiu, with CUI 46838332 and EUID RO ONRC.F2023000150182. This notice explains how personal data submitted through this website is collected, used, stored and deleted, in line with the General Data Protection Regulation (EU) 2016/679 (GDPR) and other applicable European Union data protection rules.
What Data We Collect
When you contact us through the form on this website, we collect the personal data you choose to provide, which may include your name, email address, phone number, and any details you share about your inquiry or project. We do not collect additional data beyond what you voluntarily submit through the contact form, and we do not use tracking cookies, hidden analytics scripts, or third-party advertising tools to gather information about you without your knowledge or consent. If, over the course of a collaboration, you share further documents or information relevant to a project, that information is treated with the same care and subject to the same rules described in this notice.
Why We Collect It
The data you submit is used solely to respond to your inquiry, to discuss a potential collaboration in more detail, and, if both parties agree to move forward, to prepare and sign a service contract. We do not use your data for marketing purposes, we do not build advertising profiles from it, and we do not sell, rent, or otherwise share it with third parties for their own commercial use. Your information stays within the scope of the conversation and project you've reached out about.
Legal Basis for Processing
We process your data based on the consent you give at the moment you submit the contact form, and, where relevant, on the legitimate interest of responding to a business inquiry that you have personally initiated. If a contract is subsequently signed between us, any further processing of your data is based on the performance of that contract, including the tasks and communication necessary to deliver the agreed service.
How Long We Keep Your Data
Data minimization is a core part of how this business operates, and your personal data is never stored indefinitely without reason. Specifically, the following rules apply to any data submitted through this website:
- If we do not go on to sign a contract with you, all the data you submitted through the form is deleted.
- If an offer or proposal is sent to you and you do not respond within 5 days, your data is automatically deleted after that period.
- If you choose to reject an offer, your data is deleted automatically following that decision, without any further storage.
- If a contract is signed between us, your data is retained only for as long as necessary to fulfill that contract, along with any related legal, tax or accounting obligations under Romanian and EU law.
This means that unless we have an active, signed agreement together, your personal information will not remain in our systems for an extended period, and you will not need to separately request its removal in most cases.
Copies and Confirmation of Deletion
Before your data is deleted, you are welcome to request a copy of the personal data we hold about you, which will be sent to the same email address you originally provided. Once your data has actually been deleted from our records, we send a confirmation of deletion by email as well, so that you have clear, written proof that your information is no longer stored anywhere in our systems. This applies whether the deletion happens because a contract was not signed, an offer was rejected, or no response was received within the applicable timeframe.
Data Security
As a small, single-operator business, your data is handled directly and personally, without being passed through large internal teams or unnecessary intermediaries. We take reasonable technical and organizational measures appropriate to the scale of this business to protect your personal data against unauthorized access, accidental loss, or misuse, including limiting access to the operator of LexiCrafts and using secure tools for communication and file storage wherever practical.
Your Rights Under GDPR
As a data subject under the GDPR, regardless of where in the world you are located, you have the right to:
- Access the personal data we currently hold about you.
- Request correction of any inaccurate or incomplete data.
- Request deletion of your data, sometimes referred to as the "right to be forgotten."
- Object to, or request restriction of, the processing of your data.
- Request a copy of your data in a portable, commonly used format.
- Withdraw your consent at any time, without affecting the lawfulness of any processing carried out before that withdrawal.
To exercise any of these rights, simply get in touch using the contact form on this website, ideally using the same email address you originally submitted your data with, so that we can properly verify your identity and locate the relevant information without delay.
Data Controller
The data controller responsible for your personal data is Cojocaru Ionela, operating as a Persoana Fizica Autorizata (PFA), CUI 46838332, registered in Gorj County, Targu-Jiu, Romania, EUID RO ONRC.F2023000150182. If you have any concerns about how your data has been handled that we are unable to resolve directly between us, you also have the right to lodge a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP) in Romania, or with the equivalent data protection authority in your own country of residence within the European Union.
Changes to This Notice
This GDPR notice may be updated from time to time to reflect changes in our practices, in the services we offer, or in applicable Romanian or European Union law. Any changes will be posted on this page, and we encourage you to review it periodically if you have an ongoing relationship with LexiCrafts.
Before you go
Have a project in mind? Head over to my contact page or send me a message, and I'll get back to you as soon as I can.