Privacy policy

Dock30 is the trading name of LAZAR DIGITAL AGENCY SRL, a company registered in Bucharest, Romania. For everything described in this policy, LAZAR DIGITAL AGENCY SRL is the data controller under the EU General Data Protection Regulation (GDPR).

Company

LAZAR DIGITAL AGENCY SRL

Registered in

Bucharest, Romania

Trading as

Dock30

Website

dock30.com

Privacy contact

crew@dock30.com

You give us data directly when you:

• Send the contact form: your name, email address, and whatever you write in the project brief.
• Email us at crew@dock30.com: your address and the contents of the conversation.
• Book a call: the name, email, and time slot you enter into Calendly, our scheduling provider.

Some data is collected automatically while you browse, through the analytics tools described in the next section. We do not run ads, we do not buy data about you from anyone, and we never sell or rent personal data to anyone.

We use three measurement tools, and they work in different ways:

• Vercel Analytics. Runs server side and is cookieless. It records aggregated page views and Web Vitals without setting anything on your device and without building a profile of you. Visitors are counted by a hash that resets daily, so you cannot be recognized across days.
• Google Analytics. Provided by Google Ireland Ltd. Uses cookies to measure visits, traffic sources, and page behavior. We use IP anonymization and have not enabled advertising features.
• Microsoft Clarity. Provided by Microsoft Ireland Operations Ltd. Uses cookies and records anonymized session replays and heatmaps (scrolls, clicks, mouse movement) so we can see where the site confuses people. Text you type into forms is masked before it reaches Clarity.

Google Analytics and Microsoft Clarity only start, and only set cookies, after you consent through the cookie notice. Details on every cookie, including lifetimes and how to withdraw consent, are in the cookie policy.

• Answering you and scoping work. When you contact us about a project, we process your data to reply and to prepare a proposal. Legal basis: steps taken at your request before entering a contract (Art. 6(1)(b) GDPR).
• Delivering projects. When you become a client, we process the data needed to perform the contract (Art. 6(1)(b) GDPR).
• Cookie-based analytics. Google Analytics and Microsoft Clarity run on your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.
• Cookieless measurement and security. Aggregated, non-identifying server-side measurement and keeping the site secure rest on our legitimate interest in running a working website (Art. 6(1)(f) GDPR).
• Legal obligations. Invoices and accounting records are kept because Romanian law requires it (Art. 6(1)(c) GDPR).

• Inquiries that do not become projects: up to 24 months after our last exchange, then deleted.
• Client project records and correspondence: for the duration of the project and up to 3 years after delivery, in case questions or claims come up.
• Invoicing and accounting records: as long as Romanian fiscal law requires.
• Analytics data: Google Analytics retains event data for up to 14 months; Clarity retains recordings for up to 12 months; Vercel Analytics stores only aggregated, non-identifying counts.

Only service providers that help us run the site and the business, acting under data processing agreements. We never sell personal data.

• Vercel Inc.: hosting and server-side analytics.
• Google Ireland Ltd.: Google Analytics.
• Microsoft Ireland Operations Ltd.: Microsoft Clarity.
• Calendly LLC: call scheduling, only if you book a call.
• Our email provider, for the mail you send us.
• Authorities, only where the law obliges us to, and professional advisers (accountant, lawyer) where strictly needed.

Some of the providers above are US companies or use infrastructure outside the European Economic Area. Where data leaves the EEA, the transfer is covered by the EU-US Data Privacy Framework or by the European Commission's Standard Contractual Clauses, together with additional safeguards where needed.

Under the GDPR you can, at any time and free of charge:

• Ask for a copy of the personal data we hold about you (access).
• Have inaccurate data corrected (rectification).
• Have your data deleted where there is no legal reason to keep it (erasure).
• Restrict or object to processing based on legitimate interest.
• Receive your data in a portable format (portability).
• Withdraw consent for analytics cookies, without affecting past processing.

Write to crew@dock30.com and we will respond within one month. If you believe we handle your data unlawfully, you can complain to the Romanian supervisory authority, ANSPDCP, at dataprotection.ro, or to the authority in your own EU country.

The site is served over HTTPS only, access to stored data is limited to the people who need it, and we keep the amount of personal data we hold deliberately small. No transmission over the internet is ever completely risk-free, but if a breach affecting your data occurs we will notify you and the authority as the GDPR requires.

Our services are aimed at businesses and professionals. The site is not directed at children under 16, and we do not knowingly collect their data. If you think a child has sent us personal data, contact us and we will delete it.

When we change this policy we update the date at the top of the page. If a change meaningfully affects how your data is handled, we will say so clearly on the site rather than bury it here.

Questions about this policy or about your data: crew@dock30.com.