Privacy policy
How this website handles personal data.
Last updated: 30 October 2026
Who is responsible
CATALYST HUB S.R.L., Aleea Mostiștea 39, sector 3, Bucharest 032115, Romania, tax ID (CUI) 44588183, trade register no. J2021012136406 (“we”) is the controller of the personal data described on this page, for this website, which is published under the name Gabriela-Elena Dura (MECH). Privacy questions and requests: contact@gabriela-elena-mech.com.
In short
- This site sets no cookies on visitors, uses no analytics or advertising trackers and loads nothing from other companies: its fonts and files come from the site itself.
- Apart from the technical logs of our server, we receive personal data only if you contact us.
- Our server keeps its technical logs for 14 days.
What we collect, why, and on what basis
Visiting the site (server logs). When a page is requested, the server records the IP address, the page, the date and time, the response and the browser type, so that we can keep the site secure and working. Legal basis: our legitimate interests (Article 6(1)(f) GDPR) in security and reliable operation. The logs are kept for 14 days and then deleted. We do not use them to profile visitors.
Writing to us. The contact page shows an email address and a contact form (name, email address, phone number and company as optional fields, topic, message). When you submit the form, our website passes your details on as an email to our mailbox (contact@gabriela-elena-mech.com) and keeps no copy on the website; the email is delivered by Mailgun (see below), which keeps delivery logs for a limited time. The form handler holds your IP address briefly in memory to limit abuse and does not log it; visits to the contact page are covered by the server logs above. We receive what you put in it: your name, your email address, the phone number, company and topic if you add them, and your message. We use it to answer you and, if you ask about our services, to take the steps you request before an agreement (Article 6(1)(b)) or, otherwise, on the basis of our legitimate interest in answering enquiries (Article 6(1)(f)). You do not have to write to us, but we cannot reply without an address to reply to. We keep the correspondence for as long as it is needed to deal with your enquiry and any work that follows, and to meet the legal obligations that come with that work; correspondence that leads nowhere is deleted once it is no longer needed.
We make no decisions about you by automated means and we do not profile you.
Who processes data for us
- Hetzner Online GmbH (Germany) hosts the server on which this site runs, at its Helsinki, Finland data centre (EU).
- Mailgun (Mailgun Technologies, Inc., part of Sinch), EU region, delivers the emails created by the contact form. It is a company in the United States, so transfers outside the European Economic Area rely on the standard contractual clauses in its data processing agreement (Commission Implementing Decision (EU) 2021/914).
- Our email provider, Microsoft (Microsoft 365, purchased through GoDaddy), hosts the mailbox you write to. Transfers outside the European Economic Area rely on the safeguards in Microsoft’s data processing terms (standard contractual clauses).
We do not sell personal data and share it with no advertising partners. To get a copy of a safeguard mentioned above, write to contact@gabriela-elena-mech.com (Article 13(1)(f)).
Your rights
Under the GDPR you can ask us for access to your data (Article 15), its correction (16) or deletion (17), a restriction of its use (18), a copy of the data you gave us in a machine-readable format, and to have it passed to another controller, where we process it on the basis of a contract (20), and you can object to processing that rests on our legitimate interests (21). Write to contact@gabriela-elena-mech.com; we answer within one month (Article 12(3)), which can be extended by up to two further months for complex or numerous requests.
You also have the right to complain to a supervisory authority (Article 77): in Romania the National Supervisory Authority for Personal Data Processing (ANSPDCP, www.dataprotection.ro), or the authority of the country where you live or work.
Children
This site is for adults and is not aimed at children.
Changes
We date every change to this page at the top. If we add a newsletter, analytics or any other tracking, we will update this page first and ask for your consent before anything is collected.