Privacy
Last updated 17 July 2026.
Who I am
This site, dragos.cc, is the personal portfolio of Dragos Constantin, a full-stack developer based in Romania (European Union). For anything related to your data, I am the controller.
You can reach me at office@dragos.cc. If you need a postal address for a formal request, ask by email and I will provide one.
Data I collect
This is a static portfolio. There are no accounts, no logins, no advertising, and no behavioural tracking. I only handle personal data when you choose to contact me.
- Contact form: the name, email address, message, and optional appointment date you submit.
- Inbound email: if you email an address on this domain, the sender address, subject, and body are processed so the message can be forwarded to me and I can reply.
- Technical data: your IP address and standard request metadata are processed by the hosting, delivery, and anti-spam providers listed below to serve the site and keep the form from being abused.
Why I process it, and the legal basis
I only use your data for the reason you got in touch. Under the GDPR, each use has a clear legal basis.
- To read and reply to your message and to send any materials you request: taking steps at your request before a possible contract, and my legitimate interest in answering enquiries (Article 6(1)(b) and 6(1)(f)).
- To protect the contact form from spam and abuse: my legitimate interest in keeping the site secure (Article 6(1)(f)).
- To operate, deliver, and secure the site: my legitimate interest in running it reliably (Article 6(1)(f)).
How long I keep it
I keep correspondence only for as long as it takes to handle your request and any reasonable follow-up, then I delete it. I do not build marketing lists and I do not keep your details indefinitely. If you ask me to delete your data sooner, I will.
Who processes data on my behalf
I use a small number of established providers to run the site and its email. They act on my instructions as processors, each under their own data processing terms. None of them use your data to advertise to you.
ResendUnited States
Sends the emails triggered by the contact form and receives inbound email for addresses on this domain so it can be forwarded to me.
CloudflareUnited States
Runs the Turnstile anti-spam check on the contact form and provides DNS and content delivery for the site.
VercelUnited States
Hosts the website and serves it to your browser.
International transfers
The providers above are based in the United States, so handling your message can involve a transfer of data outside the European Economic Area. These transfers rely on the safeguards those providers offer, such as Standard Contractual Clauses and the EU-US Data Privacy Framework. Their agreements set out the detail.
Your rights under the GDPR
You have the following rights over your personal data. To use any of them, email me at office@dragos.cc and I will respond within the time the law allows.
- Access: ask for a copy of the data I hold about you.
- Rectification: ask me to correct anything inaccurate.
- Erasure: ask me to delete your data.
- Restriction and objection: ask me to limit or stop a particular use.
- Portability: ask for your data in a portable format.
- Complaint: if you believe I have mishandled your data, you can complain to a supervisory authority. In Romania this is the ANSPDCP.
Security
The site is served over HTTPS, I keep the data I handle to a minimum, and I rely on reputable providers for delivery and hosting. No method of transmission or storage is ever completely secure, but I take reasonable measures to protect what you send me.
Changes to this policy
If I change how I handle data, I will update this page and the date shown at the top. Significant changes will be reflected here before they take effect.
Contact
Questions about this policy or your data are welcome at office@dragos.cc.