Privacy Policy

1. Data controller

The data controller responsible for your personal data is ELENA IOANA MARTAC, Bischoffring 8/2, 07627 Lohmar, Germany. Email: martac.ei@inbox.eu. Phone: +49 157 78485973.

2. What data we collect

• Contact data you submit via the contact form (name, email, subject, message).
• Billing data for clients (company name, address, VAT ID, payment details).
• Technical data automatically collected when you visit (IP address, browser, pages viewed) via cookies.
• Project data you share with us during engagements (credentials, content, files).

3. Why we use your data and legal basis (GDPR Art. 6)

• To respond to enquiries — pre-contractual measures (Art. 6(1)(b)).
• To provide our services and invoice you — performance of contract (Art. 6(1)(b)).
• To comply with tax and accounting obligations — legal obligation (Art. 6(1)(c)).
• To improve our website and analyse traffic — legitimate interests (Art. 6(1)(f)) or your consent for non-essential cookies.

4. Cookies

We use essential cookies that are necessary to operate the site, and (with your consent) analytics cookies to understand how visitors interact with our content. You can accept or reject non-essential cookies via the cookie banner shown on your first visit, and change your choice at any time by clearing your browser storage for this site.

5. Sharing your data

We share data only with trusted processors that help us operate (hosting, email, payments, analytics). All processors act under written data processing agreements compliant with GDPR Art. 28. We do not sell your data. International transfers outside the EEA/UK rely on Standard Contractual Clauses or an adequacy decision.

6. Retention

• Contact form messages: up to 24 months after the last interaction.
• Client records and invoices: 10 years (German Commercial Code & Tax Code requirements).
• Analytics data: anonymised or deleted within 14 months.

7. Your rights (EU & UK GDPR)

You have the right to:

• Access the personal data we hold about you.
• Request correction or erasure of your data.
• Restrict or object to processing.
• Data portability.
• Withdraw consent at any time, without affecting the lawfulness of processing before withdrawal.
• Lodge a complaint with a supervisory authority — in Germany, the relevant State Data Protection Authority (Landesdatenschutzbeauftragter NRW); in the UK, the Information Commissioner's Office (ICO, ico.org.uk).

To exercise any right, email martac.ei@inbox.eu.

8. Security

We apply appropriate technical and organisational measures to protect your data, including encryption in transit (TLS), access controls, regular backups and staff training.

9. Changes

We may update this policy. The current version with the date of the last revision is always published on this page.