Privacy Policy

This policy explains what personal data is collected, why it is collected, who it is shared with, how long it is kept, and what rights you have over it. It covers both the florinb.eu website and the mobile applications published by BARDOSI FLORIN IOAN PERSOANĂ FIZICĂ AUTORIZATĂ on Google Play and other app stores.

1. Who is responsible for your data

The data controller for the purposes of the EU General Data Protection Regulation (Regulation (EU) 2016/679, “GDPR”) is:

For any question about this policy or about your personal data, contact hello@florinb.eu. No data protection officer has been appointed, as one is not required under Article 37 GDPR for processing at this scale.

2. The florinb.eu website

2.1 Analytics

This website uses Umami, a privacy-focused analytics tool, to count page views and understand which pages are read. The analytics script is only loaded after you explicitly accept it in the consent banner. If you decline, or ignore the banner, no analytics script is loaded and no analytics data is collected.

Umami does not use tracking cookies, does not create a cross-site profile of you, and does not store your full IP address. It records aggregate, non-identifying information: page URL, referring site, browser, operating system, device type, and country.

2.2 Local storage

Your consent choice is stored in your browser's local storage under the key cookie-consent so the banner is not shown again on every visit. This value never leaves your device. Clearing your browser storage resets it.

2.3 Web server logs

The hosting provider serving this site may record standard access logs, including IP address, timestamp, requested URL, and user agent, for security and abuse prevention. These logs are controlled by the hosting provider under its own retention schedule.

2.4 Fonts

Typefaces are loaded from Google Fonts. When your browser requests them, Google receives your IP address and user agent. See Google's privacy policy.

2.5 Contact by email

If you email the address above, that message and your email address are processed in order to reply to you. Correspondence is kept only as long as needed to handle the enquiry and any resulting engagement, then deleted.

3. The mobile application

The sections below describe the data practices of the mobile application and correspond to the categories in the Google Play Data safety section.

3.1 Data collected and why

TODO: Confirm whether the app collects any data at all. If it collects nothing, this table is replaced with a single explicit statement to that effect, which is what Google expects.

3.2 Whether providing data is required

TODO: State which data is required for the app to function and which is optional, and what happens if the user declines the optional items.

3.3 Third-party services and SDKs

TODO: List every third-party SDK, analytics provider, crash reporter, advertising network, and backend service the app uses, with a link to each provider's privacy policy. Google requires these to be disclosed even when they collect data independently of you.

3.4 Data sharing

TODO: State whether any collected data is shared with, transferred to, or sold to third parties, and name the recipients and the reason. If nothing is shared, say so explicitly.

3.5 Security

Data transmitted between the app and any backend service is encrypted in transit using HTTPS/TLS. TODO: Confirm whether data is also encrypted at rest, and describe access controls on any backend.

3.6 Retention and deletion

TODO: State how long each category of data is retained and the criteria used to decide. Describe the route a user takes to request deletion of their data and of their account, including any in-app path. Google Play requires an account-deletion route to be documented and reachable from outside the app.

3.7 Children

TODO: State the intended audience. If the app is not directed at children under 16, say so and confirm that data is not knowingly collected from them. If it is directed at children, the Google Play Families policy applies and this section must be expanded.

4. Legal bases for processing

Personal data is processed only where the GDPR provides a lawful basis:

• Consent (Article 6(1)(a)) — website analytics, which run only after you accept them, and any optional app feature identified in section 3.2. You may withdraw consent at any time.
• Performance of a contract (Article 6(1)(b)) — providing the app's core functionality to you, and delivering services you have engaged me for.
• Legitimate interests (Article 6(1)(f)) — keeping the site and app secure, preventing abuse, and responding to enquiries you initiate.
• Legal obligation (Article 6(1)(c)) — retaining invoices and accounting records for the period Romanian law requires.

5. International transfers

Where a service provider processes data outside the European Economic Area, the transfer relies on an adequacy decision by the European Commission or on Standard Contractual Clauses. TODO: Name the app's backend and SDK providers and the country each processes data in.

6. Your rights

Under the GDPR you have the right to request access to your personal data, correction of inaccurate data, erasure, restriction of processing, portability of data you provided, and to object to processing based on legitimate interests. Where processing rests on consent, you may withdraw it at any time without affecting processing already carried out.

To exercise any of these, email hello@florinb.eu. You will receive a response within one month, as Article 12(3) requires.

If you believe your data has been handled unlawfully, you may lodge a complaint with the Romanian supervisory authority, the National Supervisory Authority for Personal Data Processing (ANSPDCP), or with the supervisory authority of your country of residence.

7. Changes to this policy

This policy may be updated as the website or the app changes. The date at the top of this page reflects the most recent revision. Material changes affecting how your data is used will be communicated in the app or on this website before they take effect.

8. Contact