Privacy Policy

Data controller

The controller of personal data processed through this website, by email, by phone and on WhatsApp is ALTVERA S.R.L., whose identification details are shown above.

For any question or request about your personal data, write to contact@altvera.ro.

What data we process

We process only the data we need to answer your inquiry:

• Contact form: your name, email address, the project type you choose, your message and the language of the page on which you filled in the form. The form fields are needed so that we can reply.
• Email: your email address, the content of your message and the usual technical data of an email (for example date and time).
• WhatsApp: your phone number, your displayed profile name, the content of the conversation and the information you send us.
• Phone: telephone communication takes place through your telephone operator; we keep only the information you tell us.
• Technical data: access information (for example the IP address) processed by the hosting infrastructure and by anti-abuse measures, to the extent described in the section on technical and security data.

Sensitive data

Please do not include sensitive data (for example health data, origin, beliefs, identity documents or financial data) or unnecessary confidential information in your first inquiry. If such information becomes necessary for a project, we will agree on a suitable channel together.

Purposes and legal bases

• Requests and quotations: we answer inquiries, assess the services requested and prepare quotations. Basis: Article 6(1)(b) GDPR, where the request concerns pre-contractual steps requested by you. For communications that are not pre-contractual steps (for example a general question or later correspondence) we rely on our legitimate interest in handling the professional correspondence we receive, Article 6(1)(f). That interest is limited to the minimum data used and does not override your rights; you can object at any time (see Your rights).
• Existing clients: project communication and delivery. Basis: Article 6(1)(b) GDPR, and for legal obligations (for example accounting and tax) Article 6(1)(c).
• Website security: security, abuse prevention, service operation and troubleshooting, based on technical access data. Basis: Article 6(1)(f) GDPR, the legitimate interest in protecting the services and their users, balanced against your rights.

Marketing

There is no automatic newsletter subscription, and we do not use the data from inquiries for unsolicited promotional campaigns. We do not use marketing pixels or other tracking tools.

The contact form

When you submit the form, the message is sent over an encrypted connection to a function on Netlify's infrastructure, which hands it to the contact@altvera.ro mailbox, operated through Apple iCloud Mail. We do not keep messages in a database, a CRM or an analytics tool.

A message counts as sent only if the mail server accepts it; this does not mean it has been read. If sending fails, the form tells you and offers to open the message in your email app or lets you write to contact@altvera.ro directly.

To prevent abusive submissions we limit the number of submissions; for this purpose the IP address is used temporarily, in the function's memory, and by Netlify's infrastructure. The application does not store it or write it to its own logs.

Email correspondence

Messages sent to contact@altvera.ro, directly or through the form, are received in the Apple iCloud Mail service. We use them to reply, to discuss the proposed project and, if we start working together, to carry it out. Apple processes the messages as the provider of the email service (see Service providers and third parties).

WhatsApp correspondence

The WhatsApp link on the site takes you to the WhatsApp app or website, to the ALTVERA WhatsApp Business account. You choose whether to send a message. If you do, we use your phone number and the content of the message to reply.

WhatsApp, part of the Meta group, also processes information under its own terms and privacy notices, in roles that may differ according to the processing activity; you can read them in the WhatsApp app. We do not use WhatsApp for advertising, marketing contact lists, a catalog or a CRM integration.

Technical and security data

The website is hosted by Netlify. Like any hosting infrastructure, it may process technical access data, including the IP address, to deliver pages, ensure security and prevent abuse. How long these logs are kept is set by Netlify and by the account configuration; we do not fully control it and we do not state a fixed period.

The website's code does not store the IP address. When an error occurs, the contact function records only a technical code, without name, email address, message or IP address.

Cookies and similar technologies

This website does not set cookies and does not use the browser's local or session storage. It includes no analytics, advertising or tracking tools and loads no scripts, fonts, maps or other resources from third parties: all files are served from the same domain. For that reason we do not show a cookie banner.

If we add such technologies in the future, we will update this page and ask for your consent before activating them where the law requires it. Phone, email and WhatsApp links are plain links: the terms of the respective service apply only once you open them.

Service providers and third parties

• Netlify: the website's hosting infrastructure and the function that forwards the form.
• Apple (iCloud Mail): the provider of the contact@altvera.ro mailbox.
• WhatsApp / Meta: only if you choose to write to us on WhatsApp.

Netlify privacy policy · Apple privacy policy

Disclosure of data

We do not sell your data or use it for advertising. We may disclose it to authorities only where the law requires it.

Transfers outside the EEA

We do not claim that data stays exclusively in the EU or Romania. The providers above belong to groups with infrastructure that is also outside the European Economic Area, in particular in the United States, so processing may involve transfers.

• Netlify: according to Netlify's public documents, transfers rely on the European Commission's standard contractual clauses (Decision 2021/914), and Netlify, Inc. participates in the EU-U.S. Data Privacy Framework.
• Apple: according to Apple's privacy policy, data is generally stored by Apple Inc. in the United States, and transfers from the EEA are governed by standard contractual clauses, a copy of which Apple provides on request.
• WhatsApp / Meta: transfers are governed by the WhatsApp and Meta terms and privacy policy, available in the WhatsApp app.

Information about protective measures

You can ask for more information about these protective measures at contact@altvera.ro.

Retention

• Inquiries without a contract: at most 12 months after the last substantive interaction, unless legal obligations or a documented need to defend ourselves in a dispute justify longer storage.
• Contract-related records: for the duration of the contract and then for the periods required by law (for example for accounting documents).
• Technical security and infrastructure logs: according to the platform configuration and the provider's rules (Netlify); we do not state a fixed period.

How we delete

There is no automatic deletion. We periodically review our email and WhatsApp correspondence by hand and delete the messages whose retention period has expired.

Security

We apply appropriate technical and organizational measures: an encrypted connection (HTTPS), validation of the data received, limits on abusive submissions, keeping passwords and other secrets out of the source code, and logs without personal data in the contact function. No method of transmission or storage is completely secure, so we cannot promise absolute security.

Your rights

Under the GDPR you have, under the conditions set by law, the right to information, access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21). Where processing is based on consent, you can withdraw it at any time without affecting the lawfulness of processing before withdrawal.

Send your request to contact@altvera.ro. We reply without undue delay and, as a rule, within one month; that period can be extended by up to two further months where necessary, taking into account the complexity and number of requests, in which case we inform you within the first month. We may ask for additional information to verify your identity.

Complaint to ANSPDCP

If you believe that processing infringes the law, you can lodge a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP), without prejudice to other administrative or judicial remedies. We invite you to contact us first so that we can try to clear things up.

dataprotection.ro

Information you provide voluntarily

Contacting ALTVERA is voluntary. Without the details needed to reply (for example a correct email address or phone number), we may be unable to respond to your request.

Automated decisions and profiling

We do not take decisions based solely on automated processing and we do not profile visitors (Art. 22 GDPR). The website uses no analytics or tracking tools.

Updates to this policy

We may update this policy when the website, our providers or the law change. The version in force is the one published here, with the date of the last update shown above.