Privacy Policy

1 Controller

The controller responsible for processing under the GDPR and applicable national law is:

2 Definitions

This policy uses the terms defined in Article 4 GDPR — including "personal data", "processing", "controller", "processor", "recipient", "third party", "consent" and "supervisory authority". We explain technical terms as plainly as possible.

3 General principles

We process personal data only where it is necessary to provide the requested service, to meet a legal obligation, or to pursue a legitimate interest. Data minimisation, purpose limitation and transparency guide everything we do.

Our legal bases include in particular:

• Art. 6(1)(a) GDPR — consent
• Art. 6(1)(b) GDPR — contract or pre-contractual steps
• Art. 6(1)(c) GDPR — legal obligation
• Art. 6(1)(f) GDPR — legitimate interests

4 Website & server logs

When you open our website, our hosting provider automatically records data that is technically required to display the page and keep it secure:

• IP address (shortened where possible)
• Date and time of access
• The URL requested
• Referrer URL
• Browser type and operating system

The legal basis is Art. 6(1)(f) GDPR (our legitimate interest in stable operation and defence against attacks). The data is deleted or anonymised once it is no longer needed.

5 Cookies & similar technologies

We use only technically necessary cookies so that basic functions of the site work; these do not require consent (Art. 6(1)(f) GDPR). Any analytics or marketing cookies would be set only after your explicit consent through a banner, which you can withdraw at any time. You can also view, restrict or delete cookies in your browser settings.

6 Contacting us

If you contact us by email, phone or the contact form, we process the details you provide (name, email address, your message) to handle your enquiry and any follow-up. The legal basis is Art. 6(1)(b) or (f) GDPR. We do not pass this data to third parties without your consent unless legally required.

7 Affiliate links & third parties

Our content contains affiliate links to third-party products. If you click one, you are taken to the provider's offer, and a unique identifier may be transmitted so the provider can recognise that your visit came from our site. We may then receive a commission, at no extra cost to you. We have no influence over the provider's own processing — please review their privacy notice. The legal basis is Art. 6(1)(f) GDPR.

8 Fonts & embedded content

We use web fonts from Google Fonts to display content consistently. When the page loads, fonts may be requested from servers in the EU or the USA, which can involve transmitting your IP address. The legal basis is Art. 6(1)(f) GDPR; where a transfer to a third country occurs, it is based on appropriate safeguards under Art. 46 GDPR.

9 International transfers

Where personal data is transferred outside the European Economic Area, we ensure an adequate level of protection using standard contractual clauses, adequacy decisions or other appropriate safeguards under Art. 44 et seq. GDPR.

10 Retention

• Server logs: usually up to 14 days
• Email or form enquiries: up to 12 months after the matter is closed
• Data subject to statutory retention: as required by Romanian law, where applicable

11 Your rights

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object (Art. 21 GDPR)
• Right to withdraw consent (Art. 7(3) GDPR)

To exercise any right, a simple message to contact@barnivox.com is enough.

12 Complaints & updates

You have the right to lodge a complaint with a supervisory authority. The competent authority in Romania is:

We may update this Privacy Policy to reflect changes in the law or in our service. The current version is always available on this page.