Last updated: 17 May 2026
1. Data Controller
The vocaarchitects.ro website is operated by:
- Name: VOCA ARCHITECTS S.R.L.
- Registered address: 18 Frigului Street, District 4, Bucharest, postal code 040584, Romania
- Tax ID (CUI): 44411954
- Trade Registry no.: J2021010060400
- EUID: ROONRC.J2021010060400
- Email: office@vocaarchitects.ro
- Phone: +40 755 199 705
For any data-protection request, please contact us at office@vocaarchitects.ro.
Given the limited size of our business and the nature of the processing we carry out, we have not appointed a Data Protection Officer (DPO), which is not mandatory under Article 37 of EU Regulation 2016/679 (GDPR).
2. Categories of personal data processed
We collect and process only the data necessary to respond to your requests and to operate the website:
- Data submitted via the contact form: first name, last name, email address, phone number (optional), message.
- Data sent by direct email: any information you voluntarily provide in correspondence with us.
- Technical data collected automatically: anonymised IP address (last octet stripped), browser type, operating system, pages visited, visit duration, traffic source. This data is collected via Matomo, a web analytics system hosted on our own servers (self-hosted), and is aggregated, without individual visitor identification.
- Server log data: IP addresses, timestamps, user agents. Kept temporarily for security and diagnostics.
We do not collect sensitive data (ethnic origin, political views, health, etc.) and we do not perform automated profiling.
3. Purposes and legal bases for processing
| Purpose | Legal basis (GDPR) |
|---|---|
| Responding to requests submitted via the contact form or by email | Art. 6(1)(b) – performance of a contract or pre-contractual measures at the data subject’s request |
| Statistical analysis of site traffic, without individual identification | Art. 6(1)(f) – legitimate interest (understanding site usage to improve it) |
| Site security (server logs, attack prevention) | Art. 6(1)(f) – legitimate interest (ensuring service continuity) |
| Compliance with legal obligations (responses to authorities, retention of accounting records) | Art. 6(1)(c) – legal obligation |
4. Recipients (data processors)
Your data may be accessed by the following entities, under processing agreements compliant with Article 28 GDPR:
- TPC Hosting – provider of web hosting, email and backup services (Acronis Cyber Backup, EU-based datacenter). All data is stored on servers located in the EU.
- WPML LLC and its translator partners – when site content is translated via the WPML professional translation service, certain texts (without personally identifiable information) may be transmitted to WPML partner translators.
We do not sell, rent or transfer your data to third parties for marketing purposes.
5. International transfers
Data is stored and processed within the European Union. If a provider uses sub-processors outside the EU, transfers are made with adequate safeguards (Standard Contractual Clauses approved by the European Commission).
6. Retention periods
- Messages received via contact form / email: 12 months from last interaction, after which they are deleted, except where a longer retention is required by law or contract.
- Matomo analytics data: 14 months, aggregated and anonymised.
- Server logs: max 90 days.
- Contract / client records: as required by Romanian law (10 years for accounting documents, per Accounting Law no. 82/1991).
7. Your rights
Under EU Regulation 2016/679 (GDPR), you have the following rights:
- Right of access (Art. 15) – to obtain confirmation that we process data about you and a copy of that data.
- Right to rectification (Art. 16) – to request correction of inaccurate or incomplete data.
- Right to erasure (“right to be forgotten”, Art. 17) – to request deletion of data under conditions provided by law.
- Right to restriction of processing (Art. 18).
- Right to data portability (Art. 20) – to receive your data in a structured, commonly used format.
- Right to object (Art. 21) – for processing based on legitimate interest.
- Right not to be subject to decisions based solely on automated processing (Art. 22). We do not perform such decisions.
- Right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP), B-dul G-ral Gheorghe Magheru 28-30, District 1, Bucharest, anspdcp@dataprotection.ro.
To exercise any of these rights, send a request to office@vocaarchitects.ro. We will respond within 30 days at most.
8. Data security
We apply reasonable technical and organisational measures to protect data: HTTPS (TLS) encryption for the entire site, HTTP security headers (HSTS, X-Frame-Options, Referrer-Policy), complex administrative passwords, regular platform and plugin updates, encrypted backups stored within the EU.
9. Cookies and similar technologies
For details about cookies, please see our Cookie Policy. This site does not use advertising or cross-site tracking cookies.
10. Changes to this policy
We reserve the right to update this policy as needed. The current version is always available at this URL, and the last-updated date is displayed at the top of the page.
11. Contact
For any questions related to this policy or how we process your data, contact us:
- Email: office@vocaarchitects.ro
- Phone: +40 755 199 705
- Post: VOCA ARCHITECTS S.R.L., 18 Frigului Street, District 4, Bucharest, postal code 040584, Romania