Privacy Policy

Last updated: September 2026

This policy explains what personal data WEB LOFT SRL processes through webloft.ro, on what basis, how long we keep it and what rights you have. It is written to describe exactly what the site does.

1Data controller

The controller is WEB LOFT SRL, registered office at Str. Buzoieni 14, Sector 5, Bucharest, Romania, VAT number 44674942, Trade Register J40/13171/2021.

We have not appointed a Data Protection Officer, because our activity does not fall within the cases listed in art. 37 GDPR. For anything concerning your data, write to [email protected] or call +40 728 354 886.

2What we collect

The site has no user accounts and sells nothing online. We collect data in two situations.

  • The contact form: your name, e-mail address, subject and message, plus the box you tick to confirm your agreement. Nothing else is asked for and nothing is inferred.
  • Traffic measurement: the page visited, the referring page, technical data about your browser and device, and a randomly generated visitor identifier.

3Legal basis and purpose

We process on the basis of your consent in both cases.

  • Form messages: consent (art. 6(1)(a) GDPR), given by ticking the box before sending. We use them solely to answer your enquiry and discuss possible work together.
  • Traffic measurement: consent (art. 6(1)(a) GDPR), given through the banner shown on your first visit. We use it to understand which pages are read and where visitors come from.

We take no automated decisions with legal effect on you, and we do not profile.

4How long we keep it

  • Contact form messages: 3 years from receipt — the general limitation period for claims arising from a commercial discussion. They are deleted after that.
  • Traffic data: 14 months, after which it is removed from our analytics instance.

5Who else has access

We do not sell or rent data. We disclose it only to those who actually help us deliver the service, each as a processor and only for the stated purpose.

  • SMTP2GO — delivery of the e-mail generated by the contact form. We use the service’s European endpoint.
  • Our hosting provider, which operates the server webloft.ro runs on.

Traffic statistics run on our own infrastructure at analytics.webloft.ro and are not sent to a third-party analytics provider. We may also disclose data to authorities where the law requires it.

6Traffic measurement and local storage

The site uses no cookies. It uses the browser’s localStorage instead, which falls under the same rules (art. 5(3) of the ePrivacy Directive, implemented in Romania by Law 506/2004).

We measure traffic with Rybbit, self-hosted at analytics.webloft.ro. The following values are written in your browser:

  • rybbit-visitor-id — a random visitor identifier, written by the measurement tool.
  • gdpr-consent — your choice from the banner, so we do not ask again on every page.
  • disable-rybbit — the flag that stops measurement, written when you decline.
  • webloft-lang — the language you prefer the site in.

One thing most sites do not tell you: the measurement script starts with the page, so your first page view is already recorded by the time the banner appears on screen. If you decline, measurement stops from the next page load onwards and the refusal is remembered. That first record cannot be withdrawn retroactively. If you accepted and want to change your mind, clear the site’s data in your browser — the banner will ask again.

7Your rights

Under the GDPR you have the rights below. You can exercise them by writing to [email protected], and we answer within one month.

  • Access — to find out what data we hold about you.
  • Rectification — to have inaccurate data corrected.
  • Erasure — to have data removed once we no longer have a reason to keep it.
  • Restriction — to have processing stopped while the data is kept.
  • Portability — to receive your data in a format you can reuse.
  • Objection — to object to the processing.
  • Withdrawal of consent — at any time, without affecting what was lawfully processed before then.

If our answer does not satisfy you, you may lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP), B-dul General Gheorghe Magheru 28-30, Sector 1, Bucharest, anspdcp.ro.

8Changes and contact

If we change this policy, we update the date at the top of the page.

For any question about your data: [email protected] or +40 728 354 886.

WEB LOFT SRLCUI 44674942