We take the protection of your personal data seriously. This policy explains what personal data we process when you visit arkhonconsulting.com or contact us, why we process it, on what legal basis, and what rights you have under the EU General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR").
1. Data controller
Arkhon Consulting — a trading name of Calancea George-Bogdan Persoană Fizică Autorizată (PFA) Strada Deda nr. 1, bl. 36, sc. C, ap. 14, 500251 Brașov, Romania Trade Register (ONRC) no.: F8/203/2017 · CUI: 37238835
- Email: contact@arkhonconsulting.com
- Phone: +40 770 452 673
We have not appointed a Data Protection Officer, as we are not required to do so. For any privacy question, contact us at the email above.
2. What we process, why, and on what legal basis
a) When you visit the website (server log files)
When you access the site, your browser automatically transmits certain information that our hosting provider stores in server log files: IP address, date and time of the request, the page/file requested, the referring URL, and information about your browser and operating system.
- Purpose: to deliver the website, ensure stability and security, and prevent misuse.
- Legal basis: Art. 6(1)(f) GDPR (our legitimate interest in a secure, functioning website).
- Retention: these logs are stored for up to 30 days and are then deleted or anonymised.
b) When you contact us (contact/audit form and email)
If you use our contact or "Request an audit" form, or email us directly, we process the data you provide — typically your name, email address, company, and the content of your message.
- Purpose: to respond to your enquiry and, where relevant, to take steps toward or perform a contract.
- Legal basis: Art. 6(1)(b) GDPR (pre-contractual / contractual measures) where your enquiry concerns our services, and Art. 6(1)(f) GDPR (our legitimate interest in handling enquiries) otherwise.
- Retention: for as long as needed to handle your enquiry and any resulting business relationship, and thereafter for the periods required by applicable commercial and tax law.
c) Cookies and analytics
This website sets one cookie. It records whether you accepted or declined analytics, so that we do not have to ask you again on every page — including when your answer was no.
| Cookie | Purpose | Duration |
|---|---|---|
arkhon_consent | Stores your decision about analytics | 6 months |
It is set only once you answer, it holds nothing but that answer and the version of the question it answered, and it is strictly necessary for that purpose: without it the banner could not remember a refusal. Legal basis: Art. 6(1)(f) GDPR (our legitimate interest in respecting your choice).
Analytics: Plausible Community Edition, self-hosted. We measure how the site is used with Plausible Community Edition, which runs on our own infrastructure at stats.arkhonconsulting.com. No analytics provider is involved, no data is sent to a third party, and nothing leaves our servers.
Plausible sets no cookie and stores nothing on your device. It records the page visited, the referring page, and general technical characteristics such as browser, operating system, device type and country. Beyond page views it records exactly four events, each a count with no field values attached: a contact-form submission, an audit-form submission, a language switch, and a click on our email address or telephone number.
The analytics script is loaded only if you accept — decline, and it is never requested at all. Legal basis: Art. 6(1)(a) GDPR (your consent). You may withdraw your consent at any time with effect for the future, without affecting the lawfulness of processing carried out before withdrawal, using Cookie settings in the footer of every page.
d) Bot protection on our forms (Cloudflare Turnstile)
Both the contact form and the audit form are protected by Cloudflare Turnstile, a bot check operated by Cloudflare, Inc. (101 Townsend Street, San Francisco, CA 94107, USA). When you open either form, your browser loads a widget from challenges.cloudflare.com. Cloudflare assesses whether the submission is automated, and our server confirms that assessment with Cloudflare before accepting your message.
- Purpose: to prevent automated abuse of our forms.
- Data processed: your IP address and technical characteristics of your browser.
- Legal basis: Art. 6(1)(f) GDPR (our legitimate interest in preventing abuse of the forms).
- Transfer: Cloudflare, Inc. is established in the United States. The transfer is governed by Cloudflare's data processing addendum, which incorporates the EU Standard Contractual Clauses.
Turnstile shows no puzzles and, according to Cloudflare, is not used to build advertising profiles.
3. Recipients and processors
We do not sell your personal data. We share it only with service providers who process it on our behalf under a data-processing agreement (Art. 28 GDPR), and only as needed, for example:
- Hosting / infrastructure: Hostinger (website hosting).
- Email: Hostinger (email hosting for contact@arkhonconsulting.com).
- Bot protection: Cloudflare, Inc. (Cloudflare Turnstile on our two forms).
We may also disclose data where legally required (e.g. to authorities) or to establish, exercise or defend legal claims.
4. International transfers
Our hosting and email provider, Hostinger, is established in the European Union. Our bot-protection provider, Cloudflare, Inc., is established in the United States; that transfer is governed by Cloudflare’s data processing addendum, which incorporates the EU Standard Contractual Clauses. No other transfers outside the European Economic Area take place.
5. Your rights
Under the GDPR you have the right to:
- access your personal data (Art. 15);
- rectification of inaccurate data (Art. 16);
- erasure (Art. 17);
- restriction of processing (Art. 18);
- data portability (Art. 20);
- object to processing based on legitimate interests (Art. 21); and
- withdraw consent at any time, where processing is based on consent, without affecting the lawfulness of processing before withdrawal (Art. 7(3)).
To exercise any of these rights, contact us at contact@arkhonconsulting.com.
You also have the right to lodge a complaint with a supervisory authority. Our lead authority is the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP), Bd. G-ral Gheorghe Magheru 28–30, Sector 1, 010336 Bucharest, Romania — www.dataprotection.ro. If you are in another EU/EEA country, you may also complain to your local data protection authority.
6. Is providing data mandatory?
Providing personal data is not a legal requirement. However, if you do not provide the data requested in our contact or audit form, we may be unable to respond to your enquiry or provide our services.
7. Automated decision-making
We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects on you.
8. Changes to this policy
We may update this policy to reflect changes in our services or the law. The current version is always available on this page, with the "last updated" date above.