Privacy policy

The data controller is SC GURU CODERS SRL, VAT ID RO40446631, Trade Reg. J08/2792/2021, registered at Str. Salcâmilor 65, room 1, Tărlungeni village, Tărlungeni commune, Brașov county, Romania. For any request related to your personal data, contact us at office@gurucoders.ro.

• Through the contact form: your name, phone number and the content of your message.
• Technical data collected automatically: IP address (used solely for rate-limiting — anti-spam), user-agent and request timestamp.
• Functional cookies: gc_cookie_consent_v2 (your cookie preferences), NEXT_LOCALE (your language) and theme (light/dark) — all strictly necessary or functional.
• We do not use Google Analytics, Facebook Pixel or any other behavioural tracking. We do not build advertising profiles.

• Responding to commercial enquiries via the form — basis: Art. 6(1)(b) GDPR (pre-contractual measures taken at the data subject's request).
• Site security (IP rate limiting) — basis: Art. 6(1)(f) GDPR (legitimate interest in preventing automated abuse).
• Storing UI preferences (language, theme) — basis: Art. 6(1)(a) GDPR (consent expressed through the cookie banner).

We use a minimal number of third-party processors, strictly necessary for the site to function:

• Telegram Messenger LLP (United Kingdom) — receives a notification with the content of the contact form (name, email, message). Their policy: https://telegram.org/privacy. The transfer to the UK is covered by the European Commission's adequacy decision of 28 June 2021.
• Vercel Inc. (USA) — hosting provider for this site. The transfer to the US is covered by the EU-U.S. Data Privacy Framework, under which Vercel is certified.

We do not sell or transfer your data to third parties for commercial or marketing purposes.

• Messages received via the form: max. 24 months from submission, after which they are deleted from the archive.
• If you become an invoiced client, data tied to invoices is retained for 10 years, per fiscal obligations (Romanian Fiscal Code art. 25 and Accounting Law 82/1991).
• Functional cookies: max. 12 months from being set, after which they expire automatically.

As a data subject you have the following rights:

• Right of access to your data (Art. 15 GDPR).
• Right to rectification (Art. 16 GDPR).
• Right to erasure („right to be forgotten”) (Art. 17 GDPR).
• Right to restriction of processing (Art. 18 GDPR).
• Right to data portability (Art. 20 GDPR).
• Right to object (Art. 21 GDPR).
• Right to withdraw consent at any time, without retroactive effect (Art. 7(3) GDPR).

To exercise any of these rights, email us at office@gurucoders.ro. We reply within 30 calendar days of receiving the request. office@gurucoders.ro.

You also have the right to lodge a complaint with the Romanian Data Protection Authority (ANSPDCP): B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, Bucharest, anspdcp@dataprotection.ro, https://www.dataprotection.ro.

The site is served only over HTTPS. Configuration secrets are stored in environment variables, never in the repository. The contact form is protected by IP rate-limiting and an anti-bot honeypot field. Access to received messages is restricted to authorised people.

The date of the latest update is displayed at the top of the page. For material changes (e.g. adding a new processor or a new processing purpose), we will publish a notification banner on the site.