This Privacy Policy explains what data METZ CODE collects from visitors and clients, why we collect it, how we protect it, and the rights you have over it. We comply with the EU General Data Protection Regulation (GDPR) and Romanian law on the protection of personal data.

Last updated: 9 May 2026

1. Who we are and how to contact us

METZ CODE S.R.L., a Romanian limited liability company with registered office at Str. Visan nr. 80, Bl. 1, Et. 3, Ap. 20, 700282 Iași, Romania, registered with the Romanian Trade Register under number J2018003395229 and tax identification number (CUI) 40290884, is the data controller for the personal data described in this Privacy Policy.

For privacy-related questions or to exercise your rights, contact us at office@metzcode.dev or by post at the registered office address above.

2. What data we collect

2.1 Information you provide directly

When you contact us through the website's contact form, by email, or by phone, we collect: your name, email address, company (if provided), phone number (if provided), and the content of your message. If we enter into a contractual relationship, we may collect additional information needed to deliver the services — including billing details, project requirements, and access credentials to systems we are working on.

2.2 Information collected automatically

Our website logs basic information about visits, including IP address, browser type, operating system, the page visited, and the time of access. This data is used for security and operational purposes only.

2.3 Information from third parties

If you click the embedded Google Maps link or follow our LinkedIn profile, those third parties may collect information about you according to their own privacy policies. We do not control and are not responsible for the practices of those third parties.

3. Legal basis for processing

We process personal data only when we have a lawful basis under GDPR Article 6:

• Legitimate interest — to respond to inquiries, manage our website, prevent fraud, and conduct our business operations.
• Performance of a contract — when you engage us as a service provider.
• Consent — for non-essential cookies or marketing communications, where applicable.
• Legal obligation — for tax, accounting, and other regulatory record-keeping.

4. How we use your data

We use the personal data we collect to:

• Respond to your inquiries and provide the information or services you request.
• Deliver software development and consulting services to you under a contract.
• Maintain and improve our website and services.
• Comply with legal obligations (tax, accounting, regulatory).
• Establish, exercise, or defend legal claims.

We do not use your data for automated decision-making or profiling.

5. Cookies and similar technologies

This website uses only cookies that are essential for its operation (for example, remembering your cookie consent choice). We do not use analytics, advertising, or tracking cookies.

Embedded content from Google Maps may set cookies if you choose to interact with it. The contact form, when submitted, sends the data to Formspree, which may set cookies during submission. You can decline these by not interacting with the embedded elements.

6. Sharing your data

We share personal data with the following categories of recipients:

• Service providers (data processors) who help us operate the website and the business — including Google (Firebase Hosting, Maps), Formspree (contact form processing), and our email and accounting providers. These processors act on our instructions under data processing agreements.
• Public authorities, if required by law or in connection with legal proceedings.
• Professional advisors (lawyers, accountants, auditors), bound by confidentiality obligations.

We do not sell or rent personal data to third parties.

7. International transfers

Most processing of personal data takes place within the European Economic Area. Some service providers — notably Formspree — are based in the United States. Where personal data is transferred outside the EEA, we rely on the European Commission's Standard Contractual Clauses or another GDPR-compliant transfer mechanism.

8. Data retention

We retain personal data only as long as necessary for the purposes for which it was collected:

• Inquiries that did not result in an engagement: up to 24 months from last contact.
• Client data: for the duration of the engagement, plus the periods required by Romanian law (typically 10 years for accounting and contractual records).
• Server logs: up to 12 months.

After these periods, we delete or anonymize the data.

9. Your rights

Under GDPR you have the following rights regarding your personal data:

• Access — to obtain a copy of the data we hold about you.
• Rectification — to correct inaccurate or incomplete data.
• Erasure — to have your data deleted, subject to legal retention obligations.
• Restriction — to limit how we use your data while a request is investigated.
• Portability — to receive your data in a portable format.
• Objection — to object to processing based on legitimate interest.
• Withdrawal of consent — where processing is based on consent.

To exercise any of these rights, contact us at office@metzcode.dev. We will respond within one month, as required by GDPR.

You also have the right to lodge a complaint with the Romanian supervisory authority — Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP) — at www.dataprotection.ro, or with the supervisory authority in your country of residence.

10. Security

We use appropriate technical and organizational measures to protect personal data against unauthorized access, accidental loss, alteration, or destruction. These include encryption in transit (HTTPS), access controls, regular software updates, and secure backup procedures. No system is perfectly secure, but we work to keep ours sound and up to date.

11. Children's privacy

Our website and services are not directed to children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us personal data, contact us and we will delete it.

12. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The most current version will always be posted on this page, with the "Last updated" date at the top. Material changes will be communicated to active clients through their normal communication channels.

13. Contact

METZ CODE S.R.L.
Registered office: Str. Visan nr. 80, Bl. 1, Et. 3, Ap. 20, 700282 Iași, Romania
Trade Register: J2018003395229 · CUI: 40290884
Email: office@metzcode.dev
Phone: +40 744 493 114