1) Who we are (Controller)
Draft Design & Engineering Solutions SRL
Calea Griviței nr. 180, Sector 1, 010751 Bucharest, Romania
Email: HRoffice@dde-solutions.com
2) What we do with personal data
This is a presentation website. We do not offer accounts, comments, or contact forms. We process only what is necessary for:
- Security & reliability (server logs, security plugin),
- Basic audience measurement (optional; only if you accept analytics cookies).
3) Data we process
a) Security & operation (always on)
- Items: IP address, user agent, date/time, requested URL (from web server and security plugin logs).
- Purpose: prevent abuse, block attacks, ensure availability.
- Legal basis: Legitimate interests (GDPR Art. 6(1)(f)).
Note: Our security plugin (All-In-One Security/AIOS) may log IPs on our server only and does not send them to third parties. (WordPress.org)
b) Analytics (only with your consent)
If enabled, we use Site Kit by Google to load Google Analytics 4 (GA4) for aggregated stats (e.g., page views). GA4 does not log or store IP addresses; EU traffic is processed via EU domains/servers and IPs are dropped before logging. (Google Support)
- Items: event data about pages viewed and interactions (non-identifying).
- Legal basis: Consent (GDPR Art. 6(1)(a)); you can refuse or withdraw anytime via the cookie banner/settings.
- Retention (GA4 standard properties): 2 months or 14 months (we set the maximum 14 months unless noted). GA4 360 offers longer options. (Google Support)
4) Cookies
- Necessary cookies (site operation/security): used without consent.
- Analytics cookies (GA4 via Site Kit): loaded only after consent. EU guidance treats analytics cookies as non-essential, so consent is required. (GDPR.eu)
We provide a banner with Accept / Reject / Settings and honor your choices.
5) Plugins we use (summary)
- Site Kit by Google: integrates Google services (e.g., GA4, Search Console). Enabling GA4 may set analytics cookies only after consent. (WordPress.org)
- All-In-One Security (AIOS): may log IPs locally for brute-force and malicious-activity mitigation; no third-party transfer. (WordPress.org)
- SEOPress: SEO tooling; typically operates without personal-data collection by default and offers a cookie-bar/consent integration if you choose to use it. (SEOPress)
6) Data sharing and locations
- We do not sell or share personal data for marketing.
- Processors (only if analytics is enabled): Google Ireland Limited (GA4). GA4 for EU users processes data in the EU and does not store IP addresses. (Google Support)
- Hosting provider: processes server and security logs on our behalf within the EEA or with appropriate safeguards.
7) Retention
- Security logs: kept only as long as necessary for security and troubleshooting (typically a short rolling period set by the host/security plugin).
- Analytics data: GA4 retention for standard properties is 2 or 14 months; we choose 14 months when enabled. (Google Support)
8) Your rights
You may request access, rectification, erasure, restriction, objection, and data portability, and you may withdraw consent at any time (for analytics).
You can also lodge a complaint with the Romanian supervisory authority:
The National Supervisory Authority for Personal Data Processing (ANSPDCP)
B-dul General Gheorghe Magheru 28–30, Sector 1, 010336 Bucharest, Romania
Email: anspdcp@dataprotection.ro • Tel: +40 318 059 211 • dataprotection.ro. (dataprotection.ro)
9) Security
We apply technical and organizational measures (regular updates, least-privilege access, security plugin and server-side protections) to protect data against unauthorized access and misuse.
10) Third-party links
Our site may link to external sites with their own privacy policies.
11) Changes
We will update this notice when our processing or applicable law changes and will post the new “Last updated” date above.
12) Contact
For privacy questions or requests, email HRoffice@dde-solutions.com.