Privacy policy

who we are

everfast, an IT consultancy based in Romania. For anything about your data, write to contact@everfast.ro.

what we collect

Only what you type into the contact form: your name and email address, optionally your company and phone number, plus what you told us about the project — the services you’re interested in, what is getting in your way, where your applications live today, estimated budget, timeline and your message.

Beyond that, visit statistics, without cookies and without identifying you, and, only with your consent, measurement of our ads in ChatGPT. No profiling.

visit statistics

We count visits: which pages are viewed, which site or campaign brought you here, device type and browser, and your country and city, approximated from your IP address. We use no cookies for this and store nothing in your browser. The data shows us what is useful on the site, not who you are.

When you submit the form, we also count the submission, with the language, how many services you ticked and the budget you picked, without your name or contact details.

cookies

Without your consent, only two strictly necessary cookies: locale, which remembers the language you picked, and consent, which remembers your choice in the cookie banner. Your theme preference, light or dark, stays in your browser and never reaches us.

If you accept in the banner, the two ad-measurement cookies described below are added. You can change your choice at any time under “Cookie settings” at the bottom of the page.

ad measurement

We advertise in ChatGPT. To know whether those ads bring enquiries, we use OpenAI’s measurement tool, only with your consent.

The tool uses two cookies: __oppref, for 30 days, holding the click identifier from the page address when you came from an ad, and __obref, for 365 days, holding a random browser identifier. When you submit the form, OpenAI receives an “enquiry sent” event, the site address, those identifiers and cryptographic fingerprints (SHA-256 hashes) of the email address and phone number from the form, computed in your browser. The addresses themselves are not sent to OpenAI. As with any connection, OpenAI also sees the IP address and browser the request comes from.

The data goes to OpenAI Ireland Limited, as an independent controller, under its own privacy policy. OpenAI may transfer it outside the European Economic Area on the basis of a valid transfer mechanism. We only see aggregated reports, not people.

If you decline, the tool does not load. If you withdraw your consent, both cookies are deleted.

your IP address

Your IP address is used at the moment you submit the form, to rate-limit repeated submissions and stop bots, and on every visit, to approximate your country and city and to tie the pages you view to the same visit. We do not store it.

where the data lives

Enquiries submitted through the form are stored in a database explicitly configured to run and keep data inside the European Union. Outgoing email is sent from an EU data centre as well.

The website itself is served from a globally distributed network, so a page requested from outside Europe may be delivered by a server outside Europe. That concerns page delivery only, not the data you send us.

who else sees it

We do not sell or share your data. It reaches the providers we need to run the site: a hosting provider, an email delivery provider and a bot-protection provider. All of them act on our instructions under contract and may not use the data for anything else. We will name them on request.

Separately, and only if you accept ad measurement, OpenAI receives the data described above as an independent controller.

how long we keep it

Enquiries: two years after our last conversation. If an enquiry turns into a contract, statutory retention periods apply. You can ask us to delete it sooner at any time.

legal basis

We process the data to respond to your enquiry, that is, to take steps at your request prior to entering into a contract, under Article 6(1)(b) GDPR.

Visit statistics rely on our legitimate interest in knowing how the site is used, under Article 6(1)(f) GDPR. They are built not to identify you: no cookies, no stored IP address.

Ad measurement relies on your consent, under Article 6(1)(a) GDPR. You can withdraw it at any time under “Cookie settings”, without affecting what happened before.

your rights

You can ask to see the data we hold, correct it, delete it, restrict how we use it, or receive it in a portable format. Write to dpo@everfast.ro and we will respond within 30 days.

If you are unhappy with how we handled your request, you can complain to your local data protection authority, or to the Romanian one (ANSPDCP), where we are established.