1. Who we are
This website, cipriantrip.ro, is operated by Ciprian Trip, the person responsible for processing personal data collected through this website (the “data controller”). If you have any questions about this policy or your data, you can contact us at ciprian@cipriantrip.ro.
2. What data we collect
We collect data in three situations:
- When you complete the contact form (the “Work with me” page): first name, last name, email address and the content of your message. This data is transmitted through Netlify Forms and delivered by email to ciprian@cipriantrip.ro.
- When you browse the website, through cookies and similar technologies, but only for the cookie categories you explicitly accept (see section 4).
- When you accept the marketing category, a hashed version of your email address (if you completed the contact form), together with technical identifiers such as your IP address, browser type and Meta/Google click identifiers, is sent directly to Meta and Google using server-to-server methods to measure and optimise advertising campaigns (see section 4).
3. Legal basis for processing
- Data from the contact form is processed on the basis of your request to be contacted and the pre-contractual steps you initiate (Article 6(1)(b) GDPR).
- Analytics and marketing cookies are used only on the basis of your explicit consent (Article 6(1)(a) GDPR), expressed through the cookie banner. Cookies that are strictly necessary for the website to operate do not require consent.
4. Cookies we use
The website uses Google Tag Manager to manage the following tools centrally. No analytics or marketing cookie is set before you provide consent.
| Category | Provider | Purpose |
|---|---|---|
| Necessary | This website (localStorage) | Remembers your cookie choice so you are not asked on every visit. |
| Analytics | Google Analytics (GA4) | Anonymised statistics about website traffic and visitor behaviour. |
| Analytics | Microsoft Clarity | Click and scroll maps and session recordings used to understand the user experience. |
| Marketing | Meta (Facebook/Instagram) Ads - Pixel | Browser cookies (e.g. _fbp, _fbc) used to measure conversions from Meta Ads campaigns. |
| Marketing | Google Ads | Browser cookies used to measure conversions from Google Ads campaigns. |
| Marketing | OpenAI Ads (ChatGPT) | Browser cookies used to measure conversions from advertising campaigns delivered through the OpenAI Ads platform. |
In addition to cookies, we use two server-to-server measurement methods. These do not rely exclusively on browser cookies and are activated only if you accept the marketing category:
- Meta Conversions API: a server function hosted by us on Netlify infrastructure sends Meta a hashed version of your email address, if you completed the contact form, together with your IP address, browser type and Meta click identifiers already stored in Pixel cookies. The purpose is more accurate conversion measurement, including when browser cookies are blocked.
- Google Ads Enhanced Conversions: Google Tag Manager sends Google a hashed version of data entered in the contact form to improve the accuracy of conversion measurement for Google Ads campaigns.
Your email address is never sent as plain text. It is always hashed with SHA-256 before being sent to Meta or Google.
For exact details about individual cookies, retention periods and data processing, consult the providers’ privacy policies: Google, Meta, Microsoft, OpenAI.
5. How to change your preferences
You can accept, reject or customise cookie categories at any time using the “Cookie preferences” link in the footer of any page or the button below:
6. Recipients and data transfers
Data collected when consent is granted may be transferred to Google LLC, Meta Platforms Inc., Microsoft Corporation and OpenAI, L.L.C. as processors or service providers. These companies may process data outside the European Economic Area under safeguards provided by the GDPR, such as standard contractual clauses. Contact-form data is also processed by Netlify, Inc. for website hosting, form delivery and the server function used for Meta Conversions API described in section 4.
7. Retention period
Contact-form data is retained for as long as necessary to respond to your enquiry and afterwards in accordance with applicable legal obligations. Data collected through analytics and marketing cookies is retained according to each provider’s retention policy (Google, Meta, Microsoft), available in their public documentation.
8. Your rights
Under the GDPR, you have the right to access your data, request its correction or deletion, restrict or object to processing, request data portability and withdraw your consent at any time. You also have the right to lodge a complaint with Romania’s National Supervisory Authority for Personal Data Processing (ANSPDCP), www.dataprotection.ro. To exercise any of these rights, write to ciprian@cipriantrip.ro.
9. Updates to this policy
This policy may be updated periodically to reflect legal changes or changes to the tools used on the website. The date of the latest update appears at the beginning of this page.