1. Who is responsible for your data
The website thecarpasia.com is run by Sebastiano Zaharia, a private individual, under the name Carpasia. For any question about your data, write to atcarpasia@gmail.com.
2. What data we receive and why
Price comparison request
The form on the site does not send or store anything on the site. When you press "Send request", your own email app opens with a message addressed to us, and you decide whether to send it. We only receive what you send: your name, organisation or company, email address, phone number (optional) and product list.
We use this data to reply, prepare the price comparison and, if you wish, organise the order. The legal basis is Article 6(1)(b) GDPR (steps taken at your request before a contract) and Article 6(1)(f) (our legitimate interest in answering business enquiries).
Emails sent directly
If you write to us directly at atcarpasia@gmail.com, we use the data in your message for the same purpose and on the same basis.
Visiting the site
Our hosting provider, Netlify, automatically records technical data about each visit: IP address, browser type, the page requested and the time. This is needed for the site to work and to protect it against attacks. The legal basis is legitimate interest (Article 6(1)(f) GDPR). We do not use it to identify you.
3. Cookies and tracking
The site does not use Google Analytics, advertising pixels, social media buttons or any other tracking tools. Fonts are hosted on the site itself, not loaded from Google.
The only cookie is carpasia_lang_…. It is set only if you choose a language in the menu, and it remembers that choice for one year. It is strictly necessary for a function you asked for, so we do not ask for consent for it.
4. Who we share data with
- Netlify, Inc., which hosts the website.
- Google, through the Gmail mailbox where we receive messages.
- Manufacturers: we send them the product list to get prices. We pass your contact details to a manufacturer only with your agreement, when you decide to order.
We never sell or rent data to anyone.
5. Transfers outside the European Union
Netlify and Google are US companies. Data is transferred under the EU-U.S. Data Privacy Framework, to which both companies are certified, and under the standard contractual clauses approved by the European Commission.
6. How long we keep data
We keep messages and contact details while we discuss your request. If we do not end up working together, we delete them at the latest 3 years after our last contact. If an order follows, the related documents are kept for as long as the law requires. Technical hosting data is kept by Netlify for a limited period, under its own policy.
7. Your rights
You have the right to access your data, have it corrected or deleted, restrict its processing, receive it in a portable format, and object to processing based on legitimate interest. Write to atcarpasia@gmail.com; we reply within one month. We do not make automated decisions about you.
If you believe your data is not handled correctly, you can complain to the Romanian data protection authority, ANSPDCP (www.dataprotection.ro), or to the authority in your own country. In the Republic of Moldova this is the National Centre for Personal Data Protection (datepersonale.md).
8. Changes
If we change this policy, we update the date at the top of the page.