Sarghy Design

Legal document

Privacy Policy

This policy explains how Sarghy Design Solutions SRL collects, uses, and protects personal data through the sarghydesign.ro website.

Back to Legal
Last updated: June 19, 2026In accordance with Regulation (EU) 2016/679 (GDPR)

Data protection notice

Unauthorized access, abusive automated data collection, or any attempt to compromise our systems is prohibited. Security events may be recorded and analyzed to protect users, infrastructure, and the operator's rights.

1. Data controller

The data controller is Sarghy Design Solutions SRL, CUI 41539879, Reg. Com. J40/10974/2019, Aleea Poiana Mare 8, Sector 6, Bucharest, Romania. You can contact the controller at office@sarghydesign.ro or at +40 730 095 824.

2. Personal data collected

We collect only the information necessary to operate the site and respond to you:
  • Identification and contact data: name, email address, phone number (when submitted through the contact form).
  • Newsletter subscription data: your email address, if you subscribe.
  • Message content sent through the contact form.
  • Technical browsing data: IP address, browser type, operating system, and server logs — collected automatically for security and operation.

3. Legal bases for processing (Art. 6 GDPR)

We process your data on one or more of the following legal bases:
  • Pre-contractual steps / legitimate interest — to respond to inquiries sent through the contact form.
  • Consent — for newsletter subscription.
  • Legitimate interest — site security and operation, technical logging.
  • Legal obligation — where the law requires retaining certain data.

4. Processing purposes and data disclosure

Data is used to: respond to contact inquiries; send the newsletter (if you subscribed); and ensure the security and operation of the site. We do not sell or rent your personal data. Data may be shared only with the technical providers listed below or when there is a legal obligation.

5. Third-party processors and international transfers

We use the following third-party data processors:
  • Resend (The Resend Company, Inc.) (USA) — delivery of emails sent through the contact form and the newsletter. Transfers governed by standard contractual clauses.
  • Vercel Inc. (USA) — hosting of the site, with globally distributed infrastructure. Transfers governed by standard contractual clauses.
The site currently does not use traffic analytics or advertising tools. If these are introduced, we will update this policy and request consent. Transfers outside the EEA are made exclusively with adequate safeguards in accordance with Chapter V of the GDPR.

6. Data retention periods

We retain data only as long as necessary for the purposes described:
  • Contact form messages: up to 2 years from the last communication.
  • Newsletter subscription data: until you unsubscribe.
  • Technical and security logs: maximum 12 months.
  • Fiscal data (if a contract results): 10 years, under Romanian tax law obligations.

7. Data security

We apply appropriate technical and organizational measures, including secure TLS/SSL connections, protected infrastructure, and limited data access on a need-to-know basis. Unauthorized access attempts may be monitored, blocked, and reported in accordance with the law.

8. Your GDPR rights

As a data subject, you have the following rights:
  • Right of access — to request a copy of the data we hold about you.
  • Right to rectification — to correct inaccurate or incomplete data.
  • Right to erasure — to request deletion of your data, within the limits of legal obligations.
  • Right to restriction and objection — to limit or object to certain processing.
  • Right to data portability — to receive your data in a structured, commonly used format.
  • Right to withdraw consent — at any time, without affecting the lawfulness of prior processing.
To exercise these rights, contact us at office@sarghydesign.ro. If you believe your rights have not been respected, you may lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) — www.dataprotection.ro.

System integrity

Form submissions and technical interactions may be protected through validation, filtering, and security mechanisms. Unauthorized access, injection, or data exfiltration attempts may be documented and forwarded to competent authorities when permitted or required by law.

Controller contact

For questions regarding data protection, you can contact us at: office@sarghydesign.ro · +40 730 095 824

We protect your data with the same care we apply to building our projects.