Privacy Policy

The controller is Bostan Enterprise S.R.L., Intrarea Navigatorilor nr. 2A, Bucharest, Romania, registered with the Trade Register under no. J2026046044002, Unique Registration Code (CUI) 55281310. You can reach us at contact@bostanenterprise.com. We have not appointed a Data Protection Officer, because we are not required to.

Two things, and nothing else.

Website analytics. We use a privacy-focused analytics service to count visits. It records the address of the page you opened, the page that referred you, and rough technical details such as browser, operating system, device type and country. It does not set cookies, does not store anything on your device, does not follow you across other websites, and does not build a profile of you. We see totals, not people.

Email. If you write to us, we receive whatever you put in the message — normally your name, your email address and what you are asking about. We use it to answer you.

We do not run advertising, we do not use tracking pixels, we do not sell or share data with anyone for marketing, and there is no account to create, so there is no password or payment detail to lose.

This website sets no cookies and stores nothing on your device for tracking. That is why you are not being asked to accept anything. The only thing the analytics script can read from your browser is an opt-out flag, and only if you have set one yourself.

Analytics — our legitimate interest in knowing whether anyone reads the site and which pages work (GDPR Article 6(1)(f)). The data is aggregated and cannot be traced back to you, so the impact on you is minimal.

Email — either steps taken at your request before entering into a contract (Article 6(1)(b)), or our legitimate interest in replying to correspondence (Article 6(1)(f)).

Only the suppliers that make the site work, and only as much as they need:

Hosting and delivery. The site is served through Cloudflare, which processes connection data, including your IP address, to deliver the page and protect against attacks.

Analytics. The analytics service described above processes page views on our behalf.

Email. Our mail runs on Google Workspace, so anything you send us is stored there.

We do not share personal data with anyone else. We do not sell it. No public authority has asked us for it.

Some of the suppliers above are established outside the European Economic Area or process data there. Where that happens, the transfer relies on the European Commission's Standard Contractual Clauses or an adequacy decision. You can ask us which applies to a given supplier.

Analytics — aggregated statistics only, kept for as long as they are useful. There is no individual record to delete.

Email — for as long as the conversation is live and afterwards for as long as we may need it, normally up to three years. Ask us to delete it sooner and we will, unless we are required to keep it.

Under the GDPR you can ask us to:

• tell you what data we hold about you, and give you a copy;
• correct it if it is wrong;
• delete it;
• stop using it while a dispute is resolved;
• stop using it altogether where we rely on legitimate interest;
• hand it over in a portable format where that applies.

Write to contact@bostanenterprise.com. We will answer within one month. There is no charge. Because the analytics data is aggregated and holds no identifier for you, we generally cannot find a record of an individual visitor in it — which is the point of collecting it that way.

Tell us first and we will try to fix it. You also have the right to complain to the Romanian supervisory authority, the National Supervisory Authority for Personal Data Processing (ANSPDCP), B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, Bucharest, anspdcp@dataprotection.ro, www.dataprotection.ro. If you live in another EU country you may complain to your own authority instead.

If we change how the site handles data, we will change this page and update the date at the top. There is no mailing list to notify, because we do not run one.