Privacy Policy Regarding the Processing of Personal Data
Web Agency Codessia Web Studio SRL • Last updated: 3 july 2026, replaces all previous versions.
We consider ensuring the right to personal data protection as a fundamental commitment of Codessia Web Studio, therefore we will dedicate all necessary resources and efforts to process your data in full compliance with Regulation (EU) 2016/679 ("The General Data Protection Regulation" or "GDPR"), as well as any other applicable legislation within the territory of Romania. Since one of the essential principles of this legal framework is transparency, we have prepared this document through which we wish to inform you about how we collect, use, transfer, and protect your personal data when you interact with us in connection with our products and services, including through our website or mobile applications.
We reserve the right to periodically update and modify this Privacy Policy to reflect any changes in how we process your personal data or any changes in legal requirements. In the event of any such modification, we will display the amended version of the Privacy Policy on our website, which is why we kindly ask you to periodically check the content of this Privacy Policy.
Who we are and how you can contact us
Codessia Web Studio is a property of S.C. Codessia Web Studio S.R.L., a legal entity of Romanian nationality, having its registered office in Galaţi, Buceşti Village | Iveşti Commune, 5 Movilă Vodă Street, registered with the Trade Register under no. J2026022489009, sole registration code (CUI) 54421807 (hereinafter referred to as “Codessia Web Studio” or “we“). For the purposes of data protection legislation, we act as a data controller when processing your personal data.
Since we are always open to hearing your feedback and providing any additional information you may need regarding the processing of your data, we encourage you to contact the Codessia Web Studio Data Protection Officer at the email address gabriel.arghire.dev@gmail.com or by post or courier at the address Galaţi, Buceşti Village | Iveşti Commune, 5 Movilă Vodă Street - with the mention: For the attention of the Codessia Web Studio Data Protection Officer.
Data Protection and Technologies Used
The Codessia Web Studio platform is designed based on the principle of full respect for user privacy. We do not collect, request, or store direct personal data (such as name, email address, phone number, or sensitive data).
A. Cookies Used
We exclusively use 3 technical cookies, stored locally within your browser, with the sole purpose of ensuring the proper functioning and customization of the website:
- cookiesConsent: Remembers whether you have accepted the use of cookies on the site.
- theme: Remembers your preference for the website's theme (Light / Dark).
- appVersion: Remembers the current version of the website to ensure you receive the latest content updates.
B. User Traffic Analysis
To understand how the platform is used and to improve our educational materials, we use a privacy-focused traffic analysis software solution. This processes your device's IP address exclusively as a unique encrypted cryptographic hash, without storing the actual IP address in our databases, without using tracking cookies, and without creating commercial or advertising profiles. We are not interested in who you are, we do not track you across other websites, and we do not create an advertising profile for you. However, to know if our work is meaningful and how we can improve the website, we count visits using an open-source solution. This tool does not use cookies and instantly anonymizes your IP address, meaning we cannot identify you. We collect these statistical data based on our legitimate interest to understand traffic volume and the most read pages, in order to manage the website efficiently.
C. Minors Policy
Since the platform does not collect identifiable personal data and does not allow account creation, our services can be accessed freely. We recommend that users under the age of 16 browse the site and study the educational materials with the consent or under the supervision of a parent or legal guardian.
D. How long we keep your data
Because we do not collect identifiable personal data (such as name or email) and there is no option to place orders or create accounts on the platform, we do not own or store a personal database. The technical cookies mentioned above are stored temporarily, directly on your device, and can be manually deleted at any time by clearing your browser's history (cache).
E. Transmission of personal data
The Codessia Web Studio platform does not sell, rent, or transmit your data to third parties (such as courier companies, payment providers, or advertising agencies). The only situations where technical data (such as the hashed IP address) may be accessed are:
- The web hosting service, strictly to ensure website security and prevent cyber attacks;
- Public institutions or authorities, exclusively in cases where we have a legal obligation under Romanian legislation.
F. Data Location and Transfer
The Codessia Web Studio platform is hosted on servers located within the European Union (EU). Since we do not collect identity data, forms, or contact details, we do not perform transfers of personal databases to third countries outside the European Economic Area (EEA).
G. Platform Security
We are committed to ensuring secure browsing on the platform by implementing the HTTPS (SSL) encryption protocol, ensuring that no third party can intercept or modify the content or files transmitted to your browser. However, we remind you that internet transmissions are not 100% secure, but since we do not host accounts or sensitive data on our servers, the risk associated with compromising your personal data on Codessia Web Studio is minimized by design.
H. Your Rights under GDPR
Although the European Regulation grants you extensive rights (such as access, rectification, portability, or erasure of data), please keep in mind that, from a technical perspective, Codessia Web Studio cannot identify you directly. We do not store your name, email, or real IP address in databases, so we have no files that we can associate with your person to delete or modify upon request.
However, you have full control over the limited technical data stored:
- The Right to be Forgotten / Erasure: You can exercise this right instantly on your own by manually deleting the aforementioned cookies directly from your browser's history settings.
- The Right to Object (Anonymous Tracking): If you do not want your visit to be included in our completely anonymous traffic statistics, you can enable the "Do Not Track" or "Global Privacy Control" option in your browser, and our system will automatically respect it, completely ignoring the session.
You have the right to lodge a complaint with a supervisory authority regarding the processing of your personal data. In Romania, the contact details of the data protection supervisory authority are as follows:
National Supervisory Authority for Personal Data Processing (ANSPDCP)
B-dul G-ral. Gheorghe Magheru nr. 28-30, Sector 1, postal code 010336, București, Romania
Phone: +40.318.059.211 or +40.318.059.212;
E-mail: anspdcp@dataprotection.ro
Without affecting your right to contact the supervisory authority at any time, please contact us in advance, and we promise that we will make every effort necessary to resolve any issue amicably. You can write to us here.
Targeted Rights
Access
You can ask us to:
- confirm whether we are processing your personal data;
- to provide you with a copy of this data;
- give you other information about your personal data, such as what data we have, what we use it for, whom we disclose it to, whether we transfer it abroad and how we protect it, how long we keep it, what rights you have, how you can file a complaint, and where we obtained your data, to the extent that the information has not already been provided to you through this notice.
Rectification
You can ask us to rectify or complete your inaccurate or incomplete personal data.
We may attempt to verify the accuracy of the data before rectifying it.
Data Erasure (The Right to be Forgotten)
You can ask us to delete your personal data, but only if:
- it is no longer necessary for the purposes for which it was collected; or
- you have withdrawn your consent (where the processing was based on consent); or
- you exercise a legal right to object; or
- it has been unlawfully processed; or
- we are under a legal obligation to do so.
We are not obliged to comply with your request to delete your personal data if the processing of your personal data is necessary:
- it is no longer necessary for the purposes for which it was collected; or
- for compliance with a legal obligation; or
- for the establishment, exercise, or defense of legal claims in court.
There are certain other circumstances in which we are not obliged to comply with your request to delete data, although these two are the most likely circumstances in which we might refuse this request.
Please note that:
- you will lose all these documents and Codessia Web Studio will be unable to provide them to you, as applicable, because the data deletion process is irreversible.
Restriction of Processing
You can ask us to restrict the processing of your personal data, but only if:
- its accuracy is contested (see the rectification section), to allow us to verify its accuracy; or
- the processing is unlawful, but you do not want the data to be deleted; or
- it is no longer necessary for the purposes for which it was collected, but you need it to establish, exercise, or defend a legal claim in court; or
- you have exercised your right to object, and the verification of whether our legitimate grounds override yours is ongoing.
We can continue to use your personal data following a restriction request if:
- we have your consent; or
- to establish, exercise, or ensure the defense of a legal claim in court; or
- to protect the rights of Codessia Web Studio or another natural or legal person.
Data Portability
You can ask us to provide your personal data in a structured, commonly used, and machine-readable format, or you can request that it be "ported" directly to another data controller, but in each case only if:
- the processing is based on your consent or on the conclusion or performance of a contract with you; and
- the processing is carried out by automated means.
Objection
You can object at any time, on grounds relating to your particular situation, to the processing of your personal data based on our legitimate interest, if you believe that your fundamental rights and freedoms override this interest.
Automated Decision-Making
You can request not to be subject to a decision based solely on automated processing, but only when that decision:
- produces legal effects concerning you; or
- similarly significantly affects you.
This right does not apply if the decision reached through automated decision-making:
- is necessary for entering into or performing a contract with you;
- is authorized by law and there are adequate safeguards for your rights and freedoms; or
- is based on your explicit consent.
Complaints
You have the right to lodge a complaint with a supervisory authority regarding the processing of your personal data. In Romania, the contact details of the data protection supervisory authority are as follows:
National Supervisory Authority for Personal Data Processing (ANSPDCP)
B-dul G-ral. Gheorghe Magheru nr. 28-30, Sector 1, postal code 010336, București, Romania
Phone: +40.318.059.211 or +40.318.059.212;
E-mail: anspdcp@dataprotection.ro
Without affecting your right to contact the supervisory authority at any time, please contact us in advance, and we promise that we will make every effort necessary to resolve any issue amicably. You can write to us here.