Controller
S.C. COXSWAIN S.R.L., Tax ID RO51383300, Trade Register no. J2025015076002, registered office at Șoseaua Vergului 35, bl. K4, sc. A, et. 6, ap. 28, Sector 2, Bucharest, Romania. Contact: [email protected].
What data we process
- Contact form: name, email address, message content and, optionally, how you found us, provided voluntarily.
- Structured inquiry (the /api/intake endpoint and the MCP tools request_quote and book_call, used by scripts or AI agents on a person's behalf): contact name, email address, company, website, role, a description of the situation, technical stack, timeline, team size, budget, preferred call slots and the name of the agent that submitted it. Only what is sent is stored, an agent must have the person's consent before submitting, and the data is handled exactly like the contact form.
- Technical hosting data and traffic statistics: standard access logs (IP address, user agent, page requested, referring site) processed by Cloudflare, the hosting provider, for security, operation and aggregated traffic statistics (Cloudflare Analytics). Requests from automated crawlers and vulnerability scanners are also counted, with their address and network, and kept for up to three months. The aggregated statistics do not identify a person; the underlying logs, and the crawler and scanner records, include the address and user agent.
This site sets no cookies, loads no tracking scripts and loads no third-party resources. The only traffic statistics are the ones Cloudflare aggregates at the server level, without cookies or persistent identifiers.
Purpose and legal basis
Form and inquiry data are used solely to respond to your inquiry: steps taken at the request of the data subject prior to entering into a contract (Art. 6(1)(b) GDPR) and the legitimate interest of answering correspondence (Art. 6(1)(f) GDPR).
Recipients
Data is processed by our infrastructure providers acting as processors: Cloudflare (hosting and traffic statistics; Cloudflare privacy policy) and Google (Google Workspace: email hosting and delivery; Google privacy policy). These providers may process data outside the EEA under standard contractual clauses.
Retention
Correspondence is kept as long as necessary for the purpose it was sent for and for applicable legal obligations, then deleted.
Your rights
You have the right of access, rectification, erasure, restriction, objection and data portability. To exercise them, write to [email protected]. You also have the right to lodge a complaint with the Romanian supervisory authority, ANSPDCP (dataprotection.ro).