Privacy Policy

Last updated: 30 October 2026

1. Who we are

The data controller for this website (www.mirko.ro) is Gaminvest SRL (CUI 21913994, Trade Register No. J2007001510055, EUID ROONRC.J2007001510055), Str. Onestilor nr. 29, Oradea, Romania. E-mail: mirko.giuffrida@gaminvest.ro, phone: +40 743 982 745.

We process personal data in accordance with Regulation (EU) 2016/679 (GDPR) and the applicable Romanian legislation.

2. What data we collect

  • Contact data you send us: name, e-mail address, phone number and the content of your message, when you use the contact form, write to us by e-mail or WhatsApp or call us.
  • Technical data: IP address, browser type, pages visited and date/time of access, collected automatically for the security and operation of the website.
  • Statistics and advertising data: information about how you use the website, collected through cookies only if you accept them (see the Cookie Policy).

3. Why we use your data and on what legal basis

  • To answer your requests and to prepare or perform an advisory mandate – Art. 6(1)(b) GDPR (steps prior to a contract / performance of a contract).
  • To keep the website secure and working properly – Art. 6(1)(f) GDPR (our legitimate interest).
  • To measure website traffic and the effectiveness of our advertising (Google Analytics, Google Ads) – Art. 6(1)(a) GDPR (your consent, which you can withdraw at any time).
  • To comply with legal obligations (for example accounting and tax obligations) – Art. 6(1)(c) GDPR.

4. Who receives your data

We do not sell your data. Data may be processed, only to the extent necessary, by our service providers: the hosting provider of the website (Hostico, Romania), e-mail service providers, Google Ireland Ltd (Google Analytics, Google Ads) and WhatsApp Ireland Ltd if you choose to contact us via WhatsApp. Where the advisory mandate requires it and with your agreement, data may be shared with notaries, lawyers, accountants or other professionals involved in the transaction.

5. Transfers outside the EU

Some providers (for example Google) may process data in the United States. Such transfers are based on the EU–US Data Privacy Framework or on the Standard Contractual Clauses approved by the European Commission.

6. How long we keep your data

  • Contact requests: up to 3 years from the last contact, unless a contractual relationship follows.
  • Contract and accounting documents: for the period required by law.
  • Statistics data: according to the retention settings of Google Analytics (maximum 14 months).

7. Your rights

You have the right to access, rectify and erase your data, to restrict or object to processing, to data portability and to withdraw your consent at any time, without affecting the lawfulness of processing carried out before the withdrawal. To exercise your rights, write to mirko.giuffrida@gaminvest.ro. We reply within one month.

You also have the right to lodge a complaint with the Romanian supervisory authority: Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP), B-dul G-ral. Gheorghe Magheru 28-30, Bucharest, www.dataprotection.ro.

8. Security

We use appropriate technical and organisational measures to protect your data, including an encrypted connection (HTTPS) and website protection against attacks.

9. Automated decisions

We do not take decisions based solely on automated processing, including profiling, that produce legal effects concerning you.

10. Changes

We may update this policy. The current version is always available on this page, with the date of the last update.