1. Data controller and contact
The controller for this agency website is OPEN DIROLINE BOOST S.R.L. (J40/15125/2022, CUI 46594491), Intrarea Gheorghe Simionescu Nr. 19, Ap. B26, Sector 1, 014155 București, Romania. Email us: info@shopsfile.com.
2. Information we handle
When you enquire, we handle your name, email, optional business name, selected service, message and page language. Email or WhatsApp may also include your phone number and other information you choose to provide. Contracting may require billing and project information. Please send only what is needed and avoid passwords, payment-card details or sensitive personal data. Hosting may record IP addresses, access times, requested pages and browser information for operation and security.
3. Purposes and legal bases
We use enquiries to reply and prepare proposals. Steps requested by an individual before a contract, and performance of their contract, rely on GDPR Article 6(1)(b). Business contact communications and website security rely on legitimate interests under Article 6(1)(f): managing professional enquiries and preventing abuse. Billing and other statutory records may rely on Article 6(1)(c). We do not create a newsletter subscription by receiving an enquiry. Consent, when needed for a separate optional purpose, must be requested separately.
4. Contact form and protection
The form sends your details to our server and then to info@shopsfile.com through PlanetHoster email services. No message database is used by this form; emails remain in the mailbox. If you open an email draft instead, your email app sends it only when you choose to send. The form uses short-lived security tokens and private anti-abuse records with a keyed IP hash, attempt times and token identifiers, without message text. Expired entries are cleaned during later valid attempts; the checks use 15-minute, 30-minute and one-hour windows. This is not an automatic mailbox deletion schedule.
5. Cookies and analytics
The delivered website and contact form do not set cookies, use visitor local storage or load Google Analytics, advertising pixels or external tracking widgets. Language changes use separate page URLs. Infrastructure may process technical requests independently of these website features. Before adding Analytics or any optional tracking, we must update this policy and assess the necessary information and consent controls. Future Analytics is not described as already active.
6. Recipients and external communications
Project communications are handled by the operator and people authorised to work on the request. PlanetHoster supplies hosting and email infrastructure. Your own email service also processes messages you send or receive. WhatsApp links open WhatsApp, which processes communications under its own privacy terms; no WhatsApp widget is embedded. Professional advisers or public authorities may receive records where needed for legal obligations or claims. Other project providers must be identified before data is shared with them.
7. International processing
A provider may process information outside the European Economic Area. The actual hosting, mailbox, support and backup locations, applicable processing agreements and any adequacy decision or other transfer safeguards must be verified before this draft is finalised. We do not claim that all data stays in the EU. You can request information about the arrangements applying to your enquiry at info@shopsfile.com.
8. Retention criteria
This draft uses purpose-based criteria because a fixed mailbox deletion period has not been confirmed. Enquiries should be kept while needed to handle the request and necessary follow-up, then deleted when no further lawful purpose remains. Contract, invoice and dispute records must be kept for applicable legal obligations or the establishment, exercise or defence of claims, with restricted access when appropriate. Hosting logs and backups have provider-specific retention that must be confirmed. The anti-abuse cleanup described above applies only to its temporary records.
9. Your rights and complaints
Contact info@shopsfile.com to request access, correction, erasure, restriction or portability where applicable, or to object to processing based on legitimate interests. You may withdraw consent for a consent-based purpose without affecting earlier lawful processing. We may request proportionate identity checks and respond within the applicable GDPR deadlines. You can complain to a competent supervisory authority, including Romania's ANSPDCP or the authority where you habitually live or work. No decision with legal or similarly significant effects is made solely by automated processing; the form's spam checks do not decide whether you can purchase a service.
10. Required information and changes
Name, email, service and message are needed to process a form enquiry; the business field is optional. If required information is missing, the form cannot send, but you can use email or WhatsApp. This policy concerns the agency website, not the privacy notices of client websites. We will revise it when providers, purposes or website features change. For privacy questions, write to info@shopsfile.com.