Privacy policy
What this site collects, why, and what you can ask me to do about it.
This site collects little, and what it collects stays with me. No advertising trackers, no data sold to anyone, no marketing cookies. The full list is below, without the usual vagueness.
Last updated: 20 July 2026
Who processes the data
Bogdan Zamfir, sole trader (Zamfir C. Marius Bogdan PFA), Prahova county, Romania. Romanian tax ID (CUI): 20687066
For anything about your data: contact@zbconsulting.eu.
What I collect
The contact form
When you submit the form I collect your name, email address and message, along with the site language and the time you sent it. That is all. There are no hidden fields collecting anything else.
The form has an invisible trap field aimed at spam bots. If it is filled in, the message is discarded without being stored or emailed.
Why: so I can answer you and, if the conversation goes further, prepare a proposal. Legal basis: steps taken at your request prior to entering a contract (Art. 6(1)(b) GDPR). How long: 24 months from our last contact. Decision cycles on software work are long and it is common for a conversation to restart a year later. You can ask me to delete it sooner at any time.
Traffic statistics
For each page served I record the date and time, the page address, the referring page, the browser type and the language. I do not record your IP address and I use no cookies for this. The statistics sit on my own server, never reach an external service, and do not allow anyone to be identified.
Why: so I know which content gets read and which does not. Legal basis: my legitimate interest in understanding how my own site is used (Art. 6(1)(f) GDPR). How long: 12 months.
I currently do not use Google Analytics or any other external analytics tool. If that changes, I will update this policy before switching it on.
Server logs
The web server keeps access logs containing the IP address, the time of the request and the page requested. These are the standard logs any web server keeps, needed for security and for diagnosing faults.
Legal basis: legitimate interest, security of the service (Art. 6(1)(f) GDPR). How long: 12 months at most.
Language detection
If you land on an English address, the site checks which country the request comes from so it can send you to the Romanian version if you are in Romania. The lookup happens locally, on my own server, against a database downloaded in advance. Your IP address is used only at that moment, in memory, and is not stored anywhere for this purpose. No request goes out to an external geolocation service.
Explicitly picking a language with the RO/EN switch overrides the automatic detection.
Cookies and browser storage
There is no cookie banner because there are no cookies that require consent.
| What | Where | Purpose | Lifetime |
|---|---|---|---|
ui-lang |
cookie | Remembers the language you explicitly chose, so you are not redirected against your own pick | 1 year |
zb-theme |
local storage | Remembers the visual theme you chose | until you clear it |
zb-banner |
local storage | Remembers your header banner preference | until you clear it |
The ui-lang cookie is created only if you click the language switch. It is strictly necessary to honour your choice, so it needs no consent (Art. 5(3) ePrivacy Directive). The two local-storage values never leave your browser and never reach the server.
Who else sees the data
I do not sell, rent or trade data with anyone. The complete list of parties who touch it, for technical reasons:
- Contabo GmbH (Germany) hosts the server the site runs on. The data stays in the European Union.
- Google Ireland Ltd. is involved only for contact-form messages: they land in a mailbox that forwards to a Gmail address. The transfer to Google in the United States relies on the EU-US Data Privacy Framework.
The site's fonts are served from my own server. No request goes to Google Fonts or any other external provider when a page loads, so your IP address never reaches them.
I may be required to disclose data on a lawful request from an authority. Outside that, no.
Your rights
Under the GDPR you have the right to:
- find out what data I hold about you and get a copy;
- correct data that is wrong;
- ask for it to be deleted;
- ask me to restrict how it is processed;
- receive it in a format you can hand to someone else;
- object to processing based on legitimate interest.
Write to contact@zbconsulting.eu and I will reply within 30 days at the latest. There is no charge.
If my answer does not satisfy you, you can complain to the Romanian supervisory authority, ANSPDCP, B-dul General Gheorghe Magheru 28-30, sector 1, Bucharest, www.dataprotection.ro. If you live in another EU country you may complain to your local authority instead.
Automated decisions
I make no automated decisions affecting you and I do no profiling.
Changes
If something material changes I update the date at the top. I keep no public archive of earlier versions; if you need the one in force on a given date, ask me.