Privacy policy
Last updated: 16 September 2026
This page explains what happens to personal data when you use etheria.ro. Etheria is a brand of THETA ONE DIGIPLEX S.R.L., and that company decides why and how the data described here is processed. In legal terms it is the controller.
Who is responsible
- THETA ONE DIGIPLEX S.R.L., trading as Theta One Digital
- Registered office: Str. Verzișori 6, bl. D, ap. B118, Sector 4, București 040301, Romania
- Trade Register: J40/13360/2022 · VAT: RO46462008
- Email: hello@etheria.ro · Phone: +40 743 103 351
We are a small company and we have not appointed a data protection officer, because nothing we do requires one. Write to the address above and a person, not a ticketing system, will read it.
What we collect, and why
Everything is listed below. There is no hidden category, no profile built about you, and nothing is sold to anyone.
| Why | What | Legal basis | Kept for |
|---|---|---|---|
| To answer you when you get in touch by email or phone | Your name, email address, phone number if you give it, company name, and whatever you write to us | Steps taken at your request before a contract (art. 6(1)(b) GDPR) | 24 months after our last exchange, unless we sign a contract, in which case the contract and tax rules decide |
| To put the call you booked in the calendar and send you the invitation | Your name, email address, company, what you wrote in the message, your time zone, the email address of any colleague you asked us to invite, and how you found us: the campaign parameters of the link you clicked and the site that sent you, if any. We note whether the link came from an ad, never the ad platform’s click identifier itself | Steps taken at your request before a contract (art. 6(1)(b) GDPR) | The calendar entry and the invitation email stay in our mailbox; the underlying record follows the 24-month rule above |
| To keep the site up and protect it from abuse | Server logs: IP address, browser and device type, the page requested, the time. On the booking form, Cloudflare Turnstile checks that the request comes from a person: it looks at browser and device signals and your IP address, and loads only once you open that form | Our legitimate interest in a site that works and is not attacked, and in a calendar that only real people can book (art. 6(1)(f)) | Up to 30 days |
| To count visits and see which pages work | Aggregated page views, country, device type, referring site. No cookie, and the visitor identifier is derived from a hash that changes daily, so it cannot follow you between days or sites | Our legitimate interest in knowing whether the site does its job (art. 6(1)(f)) | Aggregated statistics only |
| To measure the site in more detail with Google Analytics | Cookie identifiers, pages viewed, approximate location, device | Your consent (art. 6(1)(a)), given through the cookie banner | 14 months, then automatically deleted by Google |
| To see which of our ads brought you here, and to show ads to people who visited | Cookie and pixel identifiers from Google Ads, Meta, TikTok and LinkedIn, and which pages you saw | Your consent (art. 6(1)(a)), given through the cookie banner | Between 3 and 24 months depending on the platform, per their own retention rules |
The ROI calculator runs entirely in your browser. The numbers you type are never sent to us, and we never see them. Only the anonymous fact that a calculator session started or finished is counted, as part of site measurement.
Booking a call runs through the scheduling service of our own company at thetaone.digital, so your details do not leave us on the way to the calendar. If you add a colleague’s email address so they receive the invitation too, we use that address for the invitation and nothing else — and it is worth telling them, since it is their data and this page explains what happens to it.
Who else sees it
We use a small number of suppliers to run the site. They process data on our instructions, under a written data processing agreement, and they are not allowed to use it for their own purposes.
| Supplier | What for | Where |
|---|---|---|
| Vercel Inc. | Hosting the website, security logs, cookieless visit statistics | European Union, with support access from the United States |
| Microsoft Ireland Operations Ltd. | The calendar and mailbox where a booked call becomes a meeting and an invitation email | European Union |
| Cloudflare, Inc. | Checks that a booking is sent by a person and not by a script (Turnstile). Loads only when you open the booking form | European Union, with transfers to the United States |
| Google Ireland Ltd. | Google Analytics and Google Ads measurement, only with your consent | European Union, with transfers to the United States |
| Meta Platforms Ireland Ltd. | Ad measurement on Facebook and Instagram, only with your consent | European Union, with transfers to the United States |
| TikTok Technology Ltd. | Ad measurement on TikTok, only with your consent | European Union, with transfers outside it |
| LinkedIn Ireland Unlimited Company | Ad measurement on LinkedIn, only with your consent | European Union, with transfers to the United States |
We also give data to public authorities when the law obliges us to, and to our accountant and lawyers when a project becomes a contract. Nothing else.
Data leaving the European Union
Most suppliers above are European entities that rely on parent companies in the United States; Cloudflare, Inc. is itself a United States company. In every case the transfer is covered by the EU–US Data Privacy Framework, under which the company is certified, by the European Commission’s standard contractual clauses, or by both. You can ask us for a copy of the safeguards that apply.
What you can ask us to do
The GDPR gives you rights over your own data, and they are free to use. You can ask us to:
- Show you what we hold about you, and give you a copy
- Correct anything that is wrong or incomplete
- Delete it, when we no longer have a reason to keep it
- Restrict what we do with it while a disagreement is being sorted out
- Hand it over to you or to another company in a machine-readable file, where it was given to us with your consent or under a contract
- Stop processing based on our legitimate interest, including for any form of profiling
- Withdraw consent for measurement or advertising, at any time, which is as simple as reopening the cookie settings at the bottom of any page
Write to hello@etheria.ro and we will answer within one month. Withdrawing consent does not undo what was lawfully done before you withdrew it.
If you think we have handled your data badly, tell us first and we will try to put it right. You can also complain to the Romanian supervisory authority, Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP), B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, București 010336, anspdcp@dataprotection.ro, https://www.dataprotection.ro.
How it is kept safe
The site is served only over an encrypted connection. Access to the mailbox and the hosting account is limited to the people who need it and protected by two-factor authentication. We keep as little as possible, for as short as possible, which is the only security measure that never fails.
Automated decisions and children
We make no automated decisions that produce legal effects for you, and we do not profile you in that sense. This site is aimed at businesses and is not directed at children, and we do not knowingly collect data about them.
Changes to this policy
When we add a supplier or change what we collect, we update this page and the date at the top of it. If the change affects something you consented to, we ask you again rather than assuming the old answer still stands.