Privacy notice.

1. Controller

The controller of personal data collected through this website is MCD WEB DESIGN & SEO, operating the ShiftVane brand.

• Registration number: J2019001787324
• VAT ID: 41700214
• Registered office: Gura Râului, Lungă Street, No. 165, Sibiu, Romania
• Email: contact@shiftvane.com

We have not appointed a Data Protection Officer because we do not currently consider our processing activities to require one under the GDPR.

2. Personal data we process

If you submit the workflow form or email us, we may process:

• your name, work email, company and role;
• the systems, tools, workflows and business context you choose to describe;
• the content of your messages and our correspondence with you;
• standard technical and security data such as IP address, browser information, timestamps and requested pages that may appear in server or security logs.

Please do not submit confidential production credentials, passwords, special-category personal data, or information you are not authorized to share.

3. Why we process personal data

We process personal data only where we have a lawful basis. Depending on the context, that may include:

• Responding to your inquiry and taking steps you request before entering a contract — GDPR Article 6(1)(b), where applicable.
• Our legitimate interests — GDPR Article 6(1)(f), including reviewing business inquiries, understanding operational requirements, protecting the website, preventing abuse, maintaining records of business correspondence and improving how we handle prospective projects.
• Legal obligations — GDPR Article 6(1)(c), where we must retain or disclose information under applicable law.

Submitting the workflow form does not subscribe you to a newsletter or marketing list.

4. Who may receive the data

Access is limited to people and service providers who need the information for the purposes described above. Categories may include:

• our founder and authorized delivery personnel;
• website hosting, infrastructure, security and backup providers;
• email and business-communication providers;
• professional advisers or public authorities where required by law or necessary to establish, exercise or defend legal claims.

We do not sell personal data. We do not use the website form to build third-party advertising audiences.

5. How long we keep information

We keep personal data only for as long as reasonably necessary for the purpose for which it was collected.

• Prospective-project inquiries and related correspondence: generally up to 24 months after the last substantive interaction, unless a longer period is reasonably needed for an ongoing discussion, dispute, legal obligation or record of an opt-out.
• Project and contractual records: if an engagement begins, retention is governed by the project agreement and applicable accounting, tax and legal requirements.
• Technical and security logs: retained according to operational and security needs and provider schedules; where controlled by us, we aim to keep them only for the limited period necessary for security and troubleshooting.

6. International data transfers

We are established in Romania, in the European Economic Area. Some infrastructure, hosting, email or business-service providers may process data outside the EEA. Where GDPR requires safeguards for such transfers, we use or rely on an applicable legal mechanism, such as an adequacy decision or approved contractual safeguards.

7. Your GDPR rights

Where the GDPR applies, and subject to the conditions and exceptions in the law, you may have the right to:

• request access to your personal data;
• request correction of inaccurate data;
• request deletion;
• request restriction of processing;
• object to processing based on legitimate interests;
• request data portability where applicable;
• withdraw consent where processing is based on consent, without affecting earlier lawful processing;
• lodge a complaint with a supervisory authority.

We do not currently use the website form for automated decision-making or profiling that produces legal or similarly significant effects.

In Romania, the supervisory authority is the National Supervisory Authority for Personal Data Processing (ANSPDCP). You can find its complaint procedure at dataprotection.ro ↗.

8. U.S. state privacy rights

Some U.S. state privacy laws grant rights to residents when the relevant law applies to the business processing their information. Depending on your state and the applicability of that law to us, you may have rights concerning access, correction, deletion or certain disclosures.

We do not currently sell personal data or use this website for cross-context behavioral advertising. If our practices materially change, we will update this notice and implement any legally required controls.

9. Cookies, analytics and tracking

At the time of this notice, shiftvane.com does not intentionally use non-essential advertising cookies, advertising pixels or behavioral analytics trackers. Standard hosting and security infrastructure may still process technical request data needed to serve and protect the site.

If we add non-essential analytics, advertising or third-party tracking technologies in the future, we will update this notice and introduce any consent controls required by applicable law before using them.

10. Security

We use reasonable technical and organizational measures appropriate to the nature of the website and the information submitted. No internet transmission or storage system can be guaranteed to be completely secure, so we avoid making absolute security guarantees.

11. Changes to this notice

We may update this notice when our services, vendors or legal obligations change. The date at the top of this page shows the most recent revision.

12. Privacy contact

To ask a privacy question or exercise a data-protection right, email contact@shiftvane.com. We may need reasonable information to verify your identity before acting on a rights request.