Legal
Privacy Policy
Last updated: June 2026
This Privacy Policy explains how Hypeweb (“we”, “us”) collects, uses, and protects personal data when you visit hypeweb.ro, use our contact form, or otherwise communicate with us.
Hypeweb is the commercial name under which Davidescu Eduard-Gabriel — Persoană Fizică Autorizată provides web design services.
We process personal data in accordance with Regulation (EU) 2016/679 (GDPR) and applicable Romanian law.
Who is responsible for your data?
The data controller is:
- Legal name: Davidescu Eduard-Gabriel — Persoană Fizică Autorizată
- Trade name: Hypeweb
- CUI: 48784417
- Trade registry no.: F2023006718403
- Registered office: B-dul Bucureștii Noi 136, et. Parter, ap. 5, Sector 1, București, Romania
- Website: hypeweb.ro
- Email: [email protected]
For any question about this policy or your personal data, contact us using the details above or the contact form.
What data we collect
Contact form
When you submit our contact form, we may collect:
- Name (required)
- Email address (required)
- Company name (optional)
- Service of interest (optional)
- Message content (required)
- Technical metadata such as the page URL and site address, included to help us handle your request
We also use a simple anti-spam check on the form. The answer you provide is used only to verify the submission and is not stored for marketing purposes.
Other communication
If you contact us by email or WhatsApp, we process the information you choose to share (for example your name, phone number, and message content) so we can respond.
Website usage
Information about cookies and similar technologies is described in our Cookie Policy. If you accept analytics cookies, we may receive aggregated usage data through analytics tools.
Why we use your data and our legal basis
- Responding to inquiries and preparing quotes — to read, evaluate, and reply to messages sent through the contact form or other channels. Legal basis: Article 6(1)(b) GDPR (steps prior to entering a contract at your request) and, where applicable, Article 6(1)(f) GDPR (our legitimate interest in running and growing our business).
- Spam prevention and site security — to protect the contact form from automated abuse. Legal basis: Article 6(1)(f) GDPR (legitimate interest).
- Analytics (only if you accept optional cookies) — to understand how visitors use the site and improve it. Legal basis: Article 6(1)(a) GDPR (consent).
We do not use your contact form data for unrelated marketing unless you explicitly ask us to or give separate consent.
Who receives your data
Your data may be accessed only by people who need it to handle your request within Hypeweb.
We use trusted service providers that process data on our behalf:
- SMTP mail server — our hosting provider’s mail server sends contact form submissions to our business inbox using PHPMailer over SMTP. Messages are processed on our server in Romania / the EEA.
- Email providers — we receive and store messages in our business email accounts (for example Yahoo Mail and Gmail), which may also involve processing outside the EEA under appropriate safeguards.
- Analytics providers (optional, only with consent) — such as Google Analytics or similar tools described in our Cookie Policy.
We do not sell your personal data.
How long we keep your data
- Contact form messages and related correspondence: up to 24 months after our last interaction with you, unless a longer period is required by law or needed to establish, exercise, or defend legal claims.
- Cookie and analytics data: as described in our Cookie Policy.
When data is no longer needed, we delete it or anonymise it where possible.
Your rights
Under GDPR, you have the right to:
- access your personal data
- request correction of inaccurate data
- request erasure (“right to be forgotten”) in certain situations
- request restriction of processing
- object to processing based on legitimate interests
- data portability, where applicable
- withdraw consent at any time, where processing is based on consent (without affecting prior lawful processing)
To exercise these rights, email us at [email protected]. We may need to verify your identity before responding.
You also have the right to lodge a complaint with the Romanian supervisory authority:
- ANSPDCP — Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal
- Website: www.dataprotection.ro
Security
We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, or misuse. No method of transmission over the internet is completely secure, but we work to keep our systems and providers appropriately configured.
Children
Our services are aimed at businesses and adults. We do not knowingly collect personal data from children under 16.
Changes to this policy
We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page will reflect the latest version. We encourage you to review this page periodically.