Privacy Policy
Last updated: March 2026
Softsite respects your personal data privacy. This policy explains what data we collect, why, and how we protect it.
1. Data Controller
The data controller is Softsite, a digital agency based in Romania. Contact: razvan@softsite.ro, phone: +40 727 999 900.
2. Data Collected
We collect data voluntarily provided through the contact form (name, email, phone number, message). Your browser also stores your theme preference (dark/light mode) locally - this is a UI preference, not a tracking cookie, and contains no personal data.
3. Legal Basis for Processing
We process contact form data based on your consent (Art. 6(1)(a) GDPR) and legitimate interest in responding to business inquiries (Art. 6(1)(f) GDPR). Theme preference is processed based on legitimate interest for interface functionality.
4. Purpose of Processing
Contact form data is used solely to respond to your inquiry and for communications related to the requested services. We do not use data for marketing without explicit consent.
5. Data Retention
Contact form data is retained for a maximum of 3 years from the last interaction, after which it is deleted. Theme preference remains stored locally in your browser until manually deleted or browser data is cleared.
6. Third-Party Processors
We use Vercel (USA) for hosting and traffic analysis. Vercel Analytics and Speed Insights are cookie-free services that do not collect personally identifiable data and are exempt from GDPR consent requirements. We do not transfer personal data to other third parties without your consent.
7. Your Rights
You have the right of access, rectification, erasure, portability and objection to the processing of personal data, pursuant to Art. 15-22 of the GDPR and Romanian Law 190/2018. To exercise these rights, contact us at razvan@softsite.ro.
8. Supervisory Authority
You have the right to file a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP): www.dataprotection.ro, B-dul Magheru 28-30, sector 1, Bucharest.
9. Cookies and Local Storage
We use cookies and similar local storage to run the site, remember your preferences, and — only with your consent — measure traffic and personalize ads. You can review and change your choice at any time using the cookie icon fixed to the edge of the screen. The table below lists every cookie/storage item currently in use, grouped by category.
Necessary
| Name | Provider | Purpose | Maximum Storage Duration | Type |
|---|---|---|---|---|
| NEXT_LOCALE | Softsite (first-party) | Remembers your selected language so the site loads in the right locale on your next visit. | 1 year | HTTP Cookie |
| cookie-consent | Softsite (first-party) | Stores your cookie consent choice so the consent dialog doesn't reappear on every visit. | 6 months | HTML Local Storage |
| theme | Softsite (first-party) | Saves your visual theme preference. Contains no personal data. | Persistent | HTML Local Storage |
Statistics
| Name | Provider | Purpose | Maximum Storage Duration | Type |
|---|---|---|---|---|
| _ga | Google Analytics | Distinguishes unique visitors by assigning a randomly generated ID. | 2 years | HTTP Cookie |
| _ga_* | Google Analytics | Used by Google Analytics 4 to persist session state. | 2 years | HTTP Cookie |
| _gid | Google Analytics | Distinguishes unique visitors for a 24-hour session window. | 24 hours | HTTP Cookie |
Marketing
| Name | Provider | Purpose | Maximum Storage Duration | Type |
|---|---|---|---|---|
| _fbp | Meta (Facebook Pixel) | Used by Meta to deliver relevant advertising and measure campaign performance. | 3 months | HTTP Cookie |
| fr | Meta (Facebook Pixel) | Used to show relevant ads and measure ad performance for Meta advertisers. | 3 months | HTTP Cookie |
| _ttp | TikTok Pixel | Used by TikTok to identify visitors across devices for ad measurement. | 13 months | HTTP Cookie |
| tt_* | TikTok Pixel | Used by TikTok to store session and ad-attribution data. | Session | HTTP Cookie |
10. Data Protection Contact
For any personal data requests: razvan@softsite.ro. We will respond within 30 calendar days pursuant to GDPR obligations.