Privacy Policy

Last updated: 21 October 2026

1. Who we are

The controller of your personal data is BLOOMERI BRAND SRL, tax ID (CUI) 45845765, Trade Register no. J2022005504408, with its registered office at Bulevardul Nicolae Iorga nr. 7B, bl. F7, et. 4, ap. 3, Iași, Iași County, Romania, which operates the website gabrieldev.eu under the name Gabriel Dev (“we”).

For any question about your data, write to contact@gabrieldev.eu or call +40 743 543 100.

2. What data we collect and why

Situation	Data	Purpose	Legal basis (GDPR)
Contact form	name, email, message, address or phone if you provide them	to answer your request and send you a quote	Art. 6(1)(b): steps taken at your request before entering into a contract
Booking a consultation	name, email, phone, company (optional), topic, chosen date and time, message	to confirm and hold the consultation	Art. 6(1)(b)
Newsletter	email address	to send you news and articles	Art. 6(1)(a): your consent, which you can withdraw at any time
Clients (contract)	identification and billing data, project correspondence	performing the contract, invoicing, support	Art. 6(1)(b) and (c): contract and legal (tax and accounting) obligations
Traffic statistics (Google Analytics)	visit data: pages, device, approximate location, cookie identifiers	to understand how the website is used and improve it	Art. 6(1)(a): consent given through the cookie banner
Ads and remarketing (Google, Meta)	cookie identifiers and on-site events (for example, a submitted booking)	to measure campaigns and show relevant ads	Art. 6(1)(a): consent
Website security	IP address, technical logs	preventing abuse and attacks	Art. 6(1)(f): our legitimate interest in protecting the website

We do not use your data for automated decisions with legal effects and we do not profile you beyond what is described above.

3. How long we keep data

Contact requests and bookings that do not become a contract: up to 12 months after the last conversation.
Client data and invoices: for the duration of the contract, then as long as the law requires (financial and accounting documents are generally kept for 10 years).
Newsletter: until you unsubscribe.
Google Analytics: 14 months.
Technical logs: up to 30 days.

4. Who we share data with

We do not sell your data. We only share it with providers that help us operate, under contracts that require them to protect it:

Hosting: SiteBunker (Romania), where the website runs and messages are stored;
Email: our email service provider, for correspondence;
Google Ireland Ltd., for Google Analytics and Google Ads, only with your consent;
Meta Platforms Ireland Ltd., for WhatsApp (if you message us there) and for ads on Facebook and Instagram, only with your consent;
Payment processors (for example, Stripe), if you pay online;
Accounting and public authorities, when the law requires it.

Transfers outside the EU: Google and Meta may transfer data to the USA. These transfers rely on the EU–US Data Privacy Framework and on the standard contractual clauses approved by the European Commission.

5. Your rights

Under Regulation (EU) 2016/679 (GDPR), you have the right:

to find out what data we hold about you and receive a copy (access);
to have inaccurate data corrected;
to have your data erased (“the right to be forgotten”);
to restrict processing;
to object to processing based on legitimate interest;
to receive your data in a structured format (portability);
to withdraw your consent at any time, without affecting processing carried out before;
to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP), B-dul G-ral. Gheorghe Magheru 28-30, Bucharest, www.dataprotection.ro.

To exercise your rights, write to contact@gabrieldev.eu. We reply within one month at the latest.

6. Cookies

We use strictly necessary cookies and, only with your consent, analytics and marketing cookies. The details are in the Cookie Policy, where you can change your choice at any time.

7. Security

We use an encrypted connection (HTTPS), restricted access to the admin panel, backups and security updates, so that data is protected against unauthorized access, loss or alteration.

8. Children

Our services are intended for people over 16. We do not knowingly collect data about children.

9. Changes

We may update this policy when our services or the law change. The date of the last update appears at the top of the page. If the changes are significant, we will announce them on the website.