Privacy notice.

Who is responsible

The data controller for this website is IONESCU LUPEANU ENGINEERING S.R.L., presented on this website as Ionescu-Lupeanu Design & Engineering. Privacy requests can be sent to office@ionesculupeanu.com.

Data handled by the website

The hosting infrastructure may record standard request data needed to deliver and protect the website, such as IP address, date and time, requested URL, browser or user-agent information, referrer and request outcome.

When you submit the contact form, the information you enter is sent securely to our website server so the studio can respond to your enquiry. This may include your name, email address, company or role, project information and message. The server temporarily stores the enquiry in a delivery queue and sends it to the studio by email. A successful submission confirms receipt by the website server, not delivery to an email inbox. Direct email links remain available if you prefer to use your own email application. Please do not include sensitive personal information.

Optional audience measurement

Only after you choose Accept analytics, this website loads Google Analytics to understand page visits, referral sources and clicks on email links. It is optional: rejection does not affect the website or contact features. We do not send names, email addresses, message contents or other contact-form entries to Analytics. Our configured page addresses omit query strings and fragments, and referral addresses are limited to their origin.

Google Analytics processes browser and device information, approximate location, interactions and identifiers stored in first-party analytics cookies. Advertising storage, advertising user data, personalization and Google signals are disabled in our tag configuration. The choice is saved in this browser for up to 180 days; analytics cookies are configured for up to 180 days without extending their expiry on every visit.

You can reopen Analytics preferences in the footer at any time. Rejecting after acceptance stops measurement, removes this site's Analytics cookies and reloads the page to unload the measurement library. If browser storage is unavailable, your choice applies for the current page and may be requested again. Previous consent-based processing is not undone by withdrawal.

Google provides the Analytics service and may process data internationally. Read Google's privacy information and how Google uses information from sites that use its services. An email-link click records an intention to contact us; it does not establish that an email was sent or received.

Why the data is used

Technical request data is used to operate, troubleshoot and secure the website. Contact details and correspondence are used to read and respond to an enquiry, discuss requested services and take steps requested before a possible engagement.

Legal bases

Website operation and security are pursued on the basis of legitimate interests in providing a reliable and secure website. Enquiry correspondence is handled to respond to your request and, where applicable, to take steps at your request before entering into a contract. Legal obligations may also require limited processing or retention. Optional audience measurement is based on your consent, which you may withdraw as described above.

Recipients and transfers

Necessary data may be processed by hosting, security and email delivery providers acting for the studio or used by the sender. Enquiries pass through the studio's mail service and Brevo for transactional email delivery, and are received and managed in a Google-hosted email account (Gmail). These providers may process information outside your country. Their privacy information explains the processing associated with their services.

Retention

Message contents are removed from the server-side delivery queue after successful transmission to the configured email recipients, or when their seven-day retention period expires; expiry cleanup runs hourly. Limited delivery metadata, including the request reference, content digest and delivery status, is retained for seven days from receipt to prevent duplicate processing. Email copies and correspondence are retained only for as long as reasonably needed for responding to the enquiry, maintaining business records, meeting legal obligations or establishing, exercising or defending legal claims. Technical logs are retained as needed for website security and troubleshooting.

Your rights

Subject to the conditions in applicable data-protection law, you may request access, correction, erasure or restriction, object to certain processing and request portability where it applies. You may also complain to the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP). See the authority's official contact page.

Changes

This notice will be updated when changes to our website or data processing materially affect the information above.