Who we are
The data controller is SC Master WebTools SRL, VAT ID (CUI) RO30089574, Trade Register no. J12/1089/2012, registered office sat. Dezmir, str. Cloșca 74C, Cluj, Romania, 407039.
For anything about your data, email contact@master-webtools.com. We have not appointed a Data Protection Officer.
What we collect and why
| Data | Where it comes from | Why we use it | Legal basis |
|---|---|---|---|
| Name, email, company, phone, project details, budget | The contact form | To confirm your email address, reply to your enquiry and prepare a quote | Steps taken at your request before a contract (GDPR Art. 6(1)(b)) |
| Anything you include in an email to us | Email to contact@master-webtools.com | To reply to you | Art. 6(1)(b), or our legitimate interest in answering correspondence (Art. 6(1)(f)) |
| IP address, browser type, page requested, time of request | Your browser, when you visit the site | To deliver the site and protect it from abuse and attacks | Our legitimate interest in keeping the site secure and working (Art. 6(1)(f)) |
| Email address, when you signed up and confirmed, and the consent wording you agreed to | The newsletter sign-up, or the newsletter box on the contact form | To send you our newsletter and keep proof of your consent | Your consent (Art. 6(1)(a)), which you can withdraw at any time |
| Contract, billing and invoicing details | Clients, once a project starts | To deliver the contract and keep our accounts | Performance of a contract (Art. 6(1)(b)) and legal obligation (Art. 6(1)(c)) |
Who receives your data
We never sell your data. These service providers process it on our behalf, under data processing agreements:
- Cloudflare, Inc.: hosts and delivers this website, stores contact-form enquiries in a database located in the EU, and runs its security systems.
- Resend, Inc.: sends our emails: confirmation links, contact-form notifications to our inbox, and the newsletter.
- Google (Google Workspace): hosts our business email, including the messages the contact form sends us.
- Our accountant: receives invoicing data for clients, as accounting law requires.
Transfers outside the European Economic Area
Cloudflare, Resend and Google may process data in the United States. Where they do, the transfer is covered by the EU–US Data Privacy Framework or by the European Commission's Standard Contractual Clauses in their data processing terms. Email us for a copy of the relevant safeguards.
How long we keep it
- Enquiries that don't lead to a project: 12 months after our last exchange, so we can pick up the conversation if you come back. After 12 months, the copy in our website database is anonymized automatically: your name, email, company, phone and message are removed, and only the date, the type of project and the budget range you picked are kept, for our statistics.
- Client project correspondence: for the duration of the project and while we support it afterwards.
- Contracts and invoices: for as long as Romanian accounting and tax law requires.
- Enquiries and newsletter sign-ups you never confirm: deleted 7 days after you send them.
- Newsletter subscribers: until you unsubscribe. We then delete your address within 30 days.
- Server and security logs: for the short period our hosting provider keeps them.
Your rights
You can ask us to give you a copy of your data, correct it, delete it, limit how we use it, stop using it where we rely on legitimate interest, or send it to you or another company in a machine-readable format.
Email contact@master-webtools.com and we'll reply within one month. The newsletter relies on your consent: you can withdraw it at any time with the unsubscribe link in every newsletter, without affecting anything sent before.
Complaints
If you think we've mishandled your data, please tell us first so we can fix it. You can also complain to the Romanian data protection authority, the Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP), through its complaints page.
Do you have to give us your data?
No. But we need at least your name, email and a description of your project to reply to an enquiry. Company, phone and budget are optional, and so is the newsletter.
Automated decisions
We don't make automated decisions about you or build profiles.
Cookies
This site doesn't use analytics, advertising or tracking cookies, and its fonts are served from our own domain. Our hosting provider, Cloudflare, may set a strictly necessary security cookie (such as __cf_bm) to tell people apart from bots. Because it is strictly necessary, it doesn't need your consent.
The site picks its language from your browser's settings, and that isn't stored. If you use the language switch (EN | RO), we remember your choice for one year in a cookie named mwt-lang, so the site stops switching you automatically. It's strictly necessary for the feature you asked for and doesn't need consent.
If you use the light/dark switch, your browser remembers your choice in its local storage on your device. It's never sent to us, and you can clear it with your browser's site data.
Changes to this policy
If we change how we handle data, we'll update this page and the effective date at the top.