Privacy Policy

Last updated: 8 October 2026

This policy explains what personal data I collect through susala.eu, why, how long it is kept, who else receives it, and the rights you have under the General Data Protection Regulation (GDPR).

Who I am

susala.eu is my personal website. The controller of your personal data is Bogdan Susala, Bucharest, Romania. For anything about your data, write to bogdan@susala.ro.

Contact form

When you write to me through the contact form, I receive and store your first name, last name, email address, phone number, subject and message, together with the language of the page and the time it was sent, and a record that you accepted this policy.

  • Why: to answer your message and keep track of the conversation.
  • Legal basis: my legitimate interest in replying to people who contact me (GDPR Art. 6(1)(f)), or steps you ask me to take before a contract (Art. 6(1)(b)).
  • How: the message is stored on this website and sent to me by email. If you tick “Send me a copy”, a copy is emailed to the address you entered.
  • How long: 12 months after our last exchange, then deleted.

Newsletter

When you subscribe to my Newsletter, I store your email address, your language, your IP address and the time you signed up. I then email you a confirmation link; you are only subscribed once you confirm, and I record the time and IP address of that confirmation as proof of your consent.

  • Why: to send you new articles published on susala.eu.
  • Legal basis: your consent (GDPR Art. 6(1)(a)), which you can withdraw at any time.
  • Unsubscribing: every newsletter email has an unsubscribe link. After you unsubscribe I keep your address marked as unsubscribed, so that you are not added again by mistake and as a record of your consent and its withdrawal; ask me and I will delete it.
  • How long: while you are subscribed, and as described above after you unsubscribe.

Comments

When you leave a comment, WordPress stores the name, email address and website you enter, the comment itself, your IP address and your browser’s user-agent string. Your name, website and comment are shown publicly; your email address and IP address are not.

  • Why: to publish the conversation under each article and to keep spam out.
  • Legal basis: my legitimate interest in running a discussion under my articles (Art. 6(1)(f)).
  • How long: while the comment stays published. Ask me and I will remove it.
  • If you tick “Save my name, email, and website in this browser”, three cookies remember them for your next comment; see the Cookie Policy.

Spam protection

My forms are protected by Cloudflare Turnstile, which checks that a form is sent by a person. Cloudflare receives technical data from your browser for this check; see the Cloudflare Privacy Policy. Legal basis: my legitimate interest in protecting the site from abuse (Art. 6(1)(f)).

All forms also contain a hidden field that people never see, used to recognise automated submissions; it stores nothing about you.

Statistics

I use Google Analytics to see how many people read the site and which articles they read. It sets its cookies only after you accept the Analytics category in the cookie banner. Until then, Google receives only cookieless measurements that do not identify you between visits.

  • Legal basis: your consent (Art. 6(1)(a)), which you can withdraw at any time from the cookie settings.
  • Provider: Google Ireland Limited; see the Google Privacy Policy.

Cookies

I use only the cookies needed for the site to work, unless you agree to others in the cookie banner. Your choice is stored in a cookie named sccon_consent for 365 days. The cookies I use, grouped by purpose, are listed in the Cookie Policy.

You can change your choice at any time:

Who receives your data

  • HostBay, which hosts this website, its database and its email, on servers in Frankfurt, Germany (EU).
  • Cloudflare, for spam protection (see above).
  • Google, for statistics, only with your consent (see above).

I do not sell your data or use it for advertising. Cloudflare and Google may process data in the United States; those transfers rely on the EU-US Data Privacy Framework (the European Commission’s adequacy decision of 10 July 2023) and on standard contractual clauses.

Your rights

You have the right to access your data, to have it corrected or deleted, to restrict or object to its processing, to receive it in a portable format, and to withdraw your consent at any time without affecting what was done before. Write to bogdan@susala.ro; I answer within one month.

You may also complain to the Romanian supervisory authority, the Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP), www.dataprotection.ro, or to the authority in the EU country where you live.

Changes

I update this policy when what I collect changes; the date at the top shows the last change.