Skip to main content

Privacy Policy

Last updated: September 27, 2026

Data Controller

Personal data collected through this website is processed by:

  • Legal name: Faintech Solutions SRL (trade name: Faintech Solutions)
  • CUI (tax ID): 48078411
  • Trade Register No.: J2023008071401
  • EUID: ROONRC.J2023008071401
  • Incorporated: 2 May 2023
  • Registered office (sediu social): Bucharest, Romania — no public office; remote operations
  • Contact: eduard@faintechsolutions.com, +40 725 536 036

1. Information We Collect

We collect the information you give us directly when you contact us through the website:

  • Identity and contact details: your name, email address and, if you fill them in, your phone number and company name
  • Project details: the project type, rough budget and timeline, if you choose them, and what you write in your message
  • Technical data tied to the submission: the IP address the form is sent from, the time it was sent and a single-use security code generated by the website
  • Communication data: the messages and emails we exchange afterwards
  • Replying to your message, preparing an estimate and a quote (form data and later emails). Legal basis: Art. 6(1)(b) of Regulation (EU) 2016/679 (GDPR), steps taken at your request before entering into a contract.
  • Visit analytics and session recording (Google Analytics 4 and PostHog with persistent identifiers, Microsoft Clarity). Legal basis: Art. 6(1)(a) GDPR, your consent, which you give or withdraw in “Cookie settings”.
  • Website security and spam protection (IP address, the form security code, the Cloudflare Turnstile check, limiting how many messages one IP address can send). Legal basis: Art. 6(1)(f) GDPR, our legitimate interest in keeping the website and the form working and protected from abuse.

3. Data Storage and Security

  • The contact form sends your data to our own server (/api/contact.php), which does not store it in a database: it forwards it as an email, over encrypted SMTP (TLS), to our mailbox through our email provider.
  • To limit repeated submissions, the server temporarily keeps a hash of the IP address and the time of sending, for at most one hour.
  • We apply appropriate technical and organisational measures to protect your data. We do not sell personal data to third parties.
  • Retention period: messages sent through the contact form that do not lead to a contract are kept for at most 24 months from the last communication, then deleted; client data is kept for the duration of the contract and afterwards as long as financial and accounting law requires (up to 10 years for accounting records, under Romanian Accounting Law no. 82/1991); analytics data (Google Analytics) is kept for 14 months.

4. Your Rights

Under the GDPR, you have the right to:

  • access the personal data we process about you
  • have inaccurate data corrected
  • have your data erased
  • restrict processing
  • receive your data in a structured format and have it transmitted to another controller (portability)
  • object to processing based on our legitimate interest
  • withdraw your consent at any time, without affecting the lawfulness of processing carried out before withdrawal
  • lodge a complaint with the Romanian data protection authority, Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP), www.dataprotection.ro

To exercise your rights, email us at eduard@faintechsolutions.com.

5. Cookies and Tracking

The cookie banner and Cookie settings (in the website footer) let you choose each category separately. Nothing optional is enabled before you choose, and "Reject all" is as easy as "Accept all".

  • Necessary (always on): local browser storage that remembers your cookie choice (the categories, the date, and the policy version) and your language preference.
  • Analytics (optional): Google Analytics 4 and PostHog may use analytics cookies or durable identifiers to connect activity across pages and visits. Without this consent they only count visits in cookieless mode, with no identifiers that persist across visits.
  • Session recording (optional): Microsoft Clarity records scrolls and clicks as page-level session recordings; form input content is masked. Clarity is loaded only after you enable this category.
  • Marketing: not used. Advertising storage stays disabled.

You can withdraw consent at any time from Cookie settings. Withdrawing turns the related signals back to denied, stops durable PostHog capture, and ends a running Clarity recording, and deletes the analytics cookies and storage set on this domain (_ga*, _gid, _gat, ph_*, _clck, _clsk). If your browser sends a Global Privacy Control signal, we treat it as "Reject all" unless you choose otherwise in Cookie settings. We ask again when this policy changes. You can also disable cookies in your browser settings.

6. Third-Party Services

We use the following third-party services:

  • Our email provider - Receives contact-form messages over encrypted SMTP (TLS) and hosts our mailbox
  • Google Analytics 4 - For privacy-aware analytics: anonymous aggregate measurement by default, full analytics only after consent
  • PostHog - Privacy-aware product analytics (EU region, posthog.com): anonymous session-scoped measurement without cookies by default; durable identifiers only after consent
  • Microsoft Clarity - Interaction analytics and page-level session recording with form input masked; loaded only after you enable session recording
  • Google Tag Manager (gtag.js) - Script delivery from googletagmanager.com, used to load analytics
  • Cloudflare Turnstile - Bot protection on the contact form (challenges.cloudflare.com); receives your IP address and technical browser data for the check

These services have their own privacy policies.

7. Contact Us

If you have questions about this Privacy Policy, please contact us: