Privacy

This site, dragos.cc, is the personal portfolio of Dragos Constantin, a full-stack developer based in Romania (European Union). For anything related to your data, I am the controller.

You can reach me at office@dragos.cc. If you need a postal address for a formal request, ask by email and I will provide one.

This is a static portfolio. There are no accounts, no logins, no advertising, and no behavioural tracking. I only handle personal data when you choose to contact me.

• Contact form: the name, email address, message, and optional appointment date you submit.
• Inbound email: if you email an address on this domain, the sender address, subject, and body are processed so the message can be forwarded to me and I can reply.
• Technical data: your IP address and standard request metadata are processed by the hosting, delivery, and anti-spam providers listed below to serve the site and keep the form from being abused.

I only use your data for the reason you got in touch. Under the GDPR, each use has a clear legal basis.

• To read and reply to your message and to send any materials you request: taking steps at your request before a possible contract, and my legitimate interest in answering enquiries (Article 6(1)(b) and 6(1)(f)).
• To protect the contact form from spam and abuse: my legitimate interest in keeping the site secure (Article 6(1)(f)).
• To operate, deliver, and secure the site: my legitimate interest in running it reliably (Article 6(1)(f)).

I keep correspondence only for as long as it takes to handle your request and any reasonable follow-up, then I delete it. I do not build marketing lists and I do not keep your details indefinitely. If you ask me to delete your data sooner, I will.

I use a small number of established providers to run the site and its email. They act on my instructions as processors, each under their own data processing terms. None of them use your data to advertise to you.

The providers above are based in the United States, so handling your message can involve a transfer of data outside the European Economic Area. These transfers rely on the safeguards those providers offer, such as Standard Contractual Clauses and the EU-US Data Privacy Framework. Their agreements set out the detail.

You have the following rights over your personal data. To use any of them, email me at office@dragos.cc and I will respond within the time the law allows.

• Access: ask for a copy of the data I hold about you.
• Rectification: ask me to correct anything inaccurate.
• Erasure: ask me to delete your data.
• Restriction and objection: ask me to limit or stop a particular use.
• Portability: ask for your data in a portable format.
• Complaint: if you believe I have mishandled your data, you can complain to a supervisory authority. In Romania this is the ANSPDCP.

I do not use analytics, advertising, or cross-site tracking cookies, so there is no consent banner to click through.

Cloudflare Turnstile may store a short-lived token on the contact page to tell humans from bots when you submit the form. It is strictly necessary for that check and is not used to profile you.

Your theme choice (light or dark) is saved in your browser's local storage on your own device. It never leaves your browser and is never sent to me.

The site is served over HTTPS, I keep the data I handle to a minimum, and I rely on reputable providers for delivery and hosting. No method of transmission or storage is ever completely secure, but I take reasonable measures to protect what you send me.

If I change how I handle data, I will update this page and the date shown at the top. Significant changes will be reflected here before they take effect.

Questions about this policy or your data are welcome at office@dragos.cc.