Last updated: November 8, 2026
This Privacy Policy explains how personal data is handled when you visit https://octaviangeorgescu.ro/, browse the creative archive, or contact the website operator. It is written for the current portfolio and enquiry functions and should be read together with the Cookie Policy.
1. Who is responsible for your data?
Data controller / website operator: Octavian Marius Georgescu.
Contact: contact@octaviangeorgescu.ro or the website contact form.
No separate Data Protection Officer contact has been published for this website. Privacy requests may be sent to the website operator using the contact details above.
2. What information may be collected?
- Enquiry information: name, email address, enquiry category, subject and message text that you choose to submit through the contact form.
- Technical information: information ordinarily processed to deliver and secure a website, which may include IP address, request date/time, browser and device information, requested URL, error/security events and server logs.
- Correspondence: information you provide when replying to an email or continuing a conversation outside the website.
Please do not submit sensitive personal data unless it is strictly necessary for your enquiry and you have a lawful reason to provide it.
3. Why is information used and what is the legal basis?
- To answer messages and enquiries: steps requested before entering a contract, where relevant (GDPR Article 6(1)(b)), or the operator’s legitimate interest in responding to correspondence and maintaining a record of business or professional communications (Article 6(1)(f)).
- To operate, maintain and protect the website: legitimate interests in availability, troubleshooting, fraud prevention and security (Article 6(1)(f)).
- To meet legal obligations: compliance with a legal obligation where one applies (Article 6(1)(c)).
- For optional analytics, advertising or embedded services: only where such services are actually enabled and the required prior consent has been obtained, where consent is the applicable legal basis.
4. How contact-form messages are handled
The OG contact form asks for a name, email address, enquiry type, subject and message. In the supplied form implementation, submissions are emailed to the website administrator and are not created as public website posts or stored as contact records in the WordPress content database by the form itself. A copy may remain in the recipient’s mailbox, email-delivery systems, provider backups or related security logs. The actual mailbox and SMTP provider should be identified in the site settings.
5. Who may receive the information?
Information may be processed by service providers only to the extent needed to operate the website and handle correspondence, including:
- the website hosting, infrastructure, backup and security provider(s): the provider(s) engaged for this site;
- the mailbox and email delivery provider(s): the provider(s) used by the site administrator;
- technical support providers or professional advisers where necessary; and
- public authorities where disclosure is required by law.
These providers may act as processors or independent controllers depending on the service and the role they perform. Their own privacy terms also apply to processing they carry out as independent controllers.
6. International transfers
If a service provider processes personal data outside the European Economic Area, the operator should ensure that an applicable transfer mechanism and safeguards are in place, such as an adequacy decision or appropriate contractual safeguards under the GDPR. The actual transfer position depends on the hosting, email and optional services configured for the live site.
7. How long is information kept?
Enquiry correspondence is kept for as long as reasonably necessary to respond and follow up. It is then deleted unless a legal obligation, an ongoing relationship or the establishment, exercise or defence of legal claims requires longer retention.
Technical and security logs are retained according to the policies and technical configuration of the hosting and security providers. Email copies are subject to mailbox, backup and provider retention settings. No fixed retention period is represented here where the live provider settings have not been supplied.
8. Your data-protection rights
Subject to the conditions and exceptions in the GDPR, you may request access, rectification, erasure, restriction of processing, data portability, or object to processing based on legitimate interests. Where processing is based on consent, you may withdraw that consent at any time; withdrawal does not affect the lawfulness of processing before withdrawal. You also have the right to lodge a complaint with a supervisory authority.
To exercise a right, contact contact@octaviangeorgescu.ro. The controller may need to verify your identity before acting on a request. The GDPR generally requires a response within one month, subject to the permitted extension in complex cases.
In Romania, the supervisory authority is the National Supervisory Authority for Personal Data Processing (ANSPDCP). Information about complaints is available here.
9. Security
Reasonable technical and organisational measures are used to protect the site and the information handled through it. No internet transmission, email service or storage system can be guaranteed to be completely secure.
10. Children
This website is a general creative and professional portfolio and is not directed at children. The operator does not knowingly request personal information from children through the contact form.
11. External websites and changes
Links to third-party websites are provided for convenience. Their privacy practices are controlled by those providers. This policy may be updated when the website, its services or applicable requirements change. The current revision date appears above.