Privacy Policy

01 Who is responsible for your data

This website, wdesigner.ro, is the portfolio of Ștefan Chirițoiu, a UI/UX and web designer based in Romania. I am the data controller for the personal data processed through this website, as defined by the EU General Data Protection Regulation (GDPR).

For anything related to your data, write to me at stefan@wdesigner.ro. I read every message myself.

02 What I collect and why

I only collect what you choose to send me, plus the minimum technical data a website needs to work and stay secure.

When you use the contact form

The form asks for your name, email address, the subject and your message. I use them only to answer you and, if we decide to work together, to prepare an offer or a project. The form is sent to my email inbox; the form plugin (Contact Form 7) does not keep a copy in the website database.

Legal basis: taking steps at your request before a possible contract (Art. 6(1)(b) GDPR) and my legitimate interest in answering the messages I receive (Art. 6(1)(f) GDPR).

When you email me directly

I receive your email address and whatever you write. I use it the same way as a contact form message.

When you leave a comment

If comments are open on an article, WordPress stores the name, email address and website you enter, the comment itself, your IP address and your browser type (used to fight spam). Your name, website and comment are public; your email address is never shown. An anonymised string made from your email address (a hash) may be sent to the Gravatar service to show your profile picture, if you have one. Gravatar privacy policy.

Legal basis: your consent when you submit the comment (Art. 6(1)(a) GDPR).

When you simply visit the website

Like every website, the server that hosts wdesigner.ro records technical data in its logs: your IP address, the date and time, the page you requested and your browser and operating system. These logs are used only to keep the website running and secure, and they are deleted automatically after a short period.

Legal basis: legitimate interest in a secure, working website (Art. 6(1)(f) GDPR).

03 What I do not do

• No analytics or visitor statistics tools, no advertising and no tracking pixels.
• No selling, renting or sharing of your data for marketing.
• No newsletter unless you explicitly ask for one.
• No automated decisions or profiling.

04 Cookies

This website uses very few cookies, and none of them track you across other websites.

• Cookie notice: remembers the choice you made in the cookie banner, so it does not appear on every page.
• Comments (only if you tick the box): remember your name, email and website for one year, so you do not have to type them again.
• Login cookies: used only by the site administrator when logged in to WordPress.
• Embedded videos: if a page contains a YouTube or Vimeo video, it only loads after you allow it in the cookie banner. From that moment, the video platform may set its own cookies.

You can delete cookies at any time from your browser settings.

05 Services that help run this website

To load quickly and look the way it does, the website uses a few external services. When your browser loads a page, it connects to them and they receive your IP address, which is technically necessary to deliver the files.

• Google Fonts (Google Ireland Limited): the typefaces Montserrat, Open Sans and Archivo Black. Google privacy policy.
• jsDelivr (open source content delivery network): the GSAP library that powers the animations. jsDelivr privacy policy.
• ChatNode (chat assistant): the chat window in the corner of the page. It loads from ChatNode’s servers, and if you write in it, your messages are sent to ChatNode to generate the answers. Please do not share sensitive information in the chat. ChatNode privacy policy.
• Hosting provider: stores the website files and the server logs described above.
• Email provider: delivers and stores the messages you send me.
• Embedded content from other websites (videos, posts) behaves exactly as if you visited that website, and it is loaded only with your consent.

Some of these providers may process data outside the European Economic Area, for example in the United States. In that case the transfer is protected by the EU-US Data Privacy Framework or by the Standard Contractual Clauses approved by the European Commission.

06 How long I keep your data

• Contact messages and emails: as long as our conversation or collaboration continues, then for up to two years so I can follow up on past discussions. If we sign a contract, the documents are kept for as long as Romanian accounting and tax law requires.
• Comments: as long as the comment is published. You can ask me to remove it at any time.
• Server logs: a short period set by the hosting provider, usually a few weeks.
• Cookies: as described in the Cookies section.

07 Your rights

Under the GDPR you have the right to:

• access the personal data I hold about you and receive a copy;
• correct data that is wrong or incomplete;
• delete your data (“the right to be forgotten”), unless I am legally required to keep it;
• restrict or object to how I use it;
• receive your data in a portable format;
• withdraw your consent at any time, without affecting what happened before.

To use any of these rights, email me at stefan@wdesigner.ro. I will answer within one month, free of charge.

You also have the right to complain to the Romanian data protection authority, ANSPDCP (Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal), or to the authority in the EU country where you live.

08 Security

The website runs over an encrypted HTTPS connection, WordPress and its plugins are kept up to date, and access to the administration area is protected. No system is perfectly secure, but I take reasonable measures to protect your data against loss, misuse and unauthorised access.

09 Children

This website is meant for businesses and adults. I do not knowingly collect data from children under 16. If you believe a child has sent me personal data, please contact me and I will delete it.

10 Changes to this policy

I may update this policy when the website or the law changes. The date at the top shows the latest version. This version was last updated on 27 September 2026.