Updated on 7 October 2026. This website is managed by Marius Alexandru Gheorghe. For questions about your data, write to [email protected].
Contact messages
The form asks for your name, email address, conversation topic and message. They are used to receive and respond to your enquiry, based on steps you request before a possible collaboration or the legitimate interest of handling professional correspondence. Confirming that you have read this page is not marketing consent.
Your message is saved in a private register accessible only after authentication, with a notification sent to my inbox through secure SMTP. The record remains available even if the email notification fails. The form does not subscribe you to a promotional list. Do not include passwords or sensitive data in your message.
Correspondence is reviewed periodically and retained as long as needed for the conversation or collaboration. You can request deletion of a message; obligations associated with a collaboration may require certain documents to be retained.
Form protection and hosting
The form uses a session cookie mg_contact, limited to /api/, to validate requests. It is not used for advertising. To limit abuse, the server temporarily retains identifiers derived from IP addresses using a secret-based function, without saving messages in these records. Records are removed after no more than two hours on the next valid request.
The hosting and email provider processes the data needed to operate its services. The server may keep technical access and error logs containing IP addresses, URLs and browser information. Retention and access depend on the hosting configuration.
We use a private operational log to identify errors, check availability and protect forms and administrative access. It includes event type, date, known route without URL parameters, response code and, where needed, a technical enquiry reference or email notification status. Browser reports use no cookies or persistent identifiers and do not include error text, form contents, passwords or access codes. Temporary IP fingerprints are used to limit abusive reports, in separate records that expire after two hours. For 404 errors, we also retain the filtered path of the missing page or resource, observation source, count and first/last occurrence to fix links and choose suitable redirects. We remove URL parameters, fragments and obvious identifiers from paths; IP addresses and referring pages are not copied into this list. A path may contain text entered in an address, so the list remains private and is deleted after 30 days. The security log records sign-ins and administrative operations, HTTP signals about unexpected scripts or successful access to sensitive addresses, and changes to monitored files/configurations. It uses daily HMAC fingerprints of source addresses for correlation without storing raw IP addresses in the log; these may reflect a proxy rather than a person. It does not record passwords, authentication codes, tokens, configuration contents or form messages. File checks detect changes since the first observation and do not prove a clean initial state or the absence of data reading/copying. Events and reports are retained for 30 days, with access restricted to authorised administrators and support. Technical logs and reports are deleted through scheduled maintenance after 30 days. Consolidated reports are accessible only to people authorised to administer and support the websites. These records are separate from client enquiries and correspondence.
We also import filtered summaries from hosting HTTP access and PHP error logs: access counts, response codes, known public routes, filtered 404 paths and error type, file and line. IP addresses, URL parameters, referrers, user agents and raw error messages are not copied into the consolidated report. Original hosting logs are managed separately; dedicated PHP diagnostic files are private, rotated and retained for 30 days. Visits served entirely from CDN cache do not appear in these summaries.
Cookie preferences
Your analytics and marketing choice is saved locally in your browser under the key mg-consent-v1, for up to 180 days. On your first visit, you can customise your choice in the banner. After saving, the icon button at the bottom right reopens preferences so you can change or withdraw consent. If the configured tools change, the website asks you to choose again.
Analytics and marketing
Google Analytics and Google Ads, when configured, load in Advanced Consent Mode with all four permissions denied by default. Cookieless signals about visits, successful enquiries and contact clicks may be sent before your choice and after rejection. Analytics and advertising cookies require category consent. Meta Pixel starts only after marketing consent. Rejection does not affect browsing or the form.
- Google Analytics / Google Tag Manager: measuring browsing and actions according to the active configuration. Analytics cookies are configured for no more than 180 days.
External tools may use cookies such as _ga, _gcl_* or _fbp, depending on the service and its settings. Names, emails and message contents are not sent through the tracking events implemented here. Providers of configured tools may process data outside the EEA under their service terms and transfer mechanisms.
Your rights
Under applicable conditions, you can request access, rectification, erasure, restriction and portability, or object to the processing of your data. Preferences for optional tools can be withdrawn at any time. You can lodge a complaint with ANSPDCP.
External links
LinkedIn, Business PRO and portfolio websites have their own policies. Following a link takes you to that service.