Privacy Policy

1. Controller and scope

This site (liviubucel.com) is operated by Liviu Bucel. This notice explains the personal data processed when you use optional site features and the limited technical data processed to operate and secure the site. It applies across this domain, including Romania Cyber Monitor.

2. Data processed

• Contact form: name, email address and the message you choose to send, so the enquiry can be read and answered.
• Newsletter: email address and subscription status. Double opt-in is used before newsletter delivery, and every newsletter includes an unsubscribe mechanism.
• CV request: name and email address only. The service no longer asks for a phone number or company name. The email is used to deliver the requested link and is not stored alongside the CV download token.
• Security and diagnostics: infrastructure providers may process technical request data such as IP address, browser/device information and request metadata. For CV abuse prevention, the application stores only a one-way hash derived from the client IP for a short rate-limit window, not the raw IP address.

3. Why the data is used

Data is used only for the feature you request, for operating and securing the site, and for diagnosing faults. The intended lawful basis for newsletter delivery is consent. Responding to direct enquiries, delivering a requested CV and preventing abuse are handled on the basis of the legitimate interests in providing and securing those requested site functions, subject to the applicable balancing requirements.

Personal data is not sold, rented, used for behavioural advertising, or added to unrelated marketing lists.

4. CV download security and retention

• CV download tokens are generated using cryptographically secure randomness.
• The raw token is sent to the requester; the application stores only its SHA-256 hash.
• Each token is single-use and expires after 24 hours.
• Rate limiting uses a one-way IP-derived hash and a 24-hour request window.
• Expired rate-limit and token records are automatically pruned by the application during subsequent requests.

5. Other retention

• Contact messages are retained only as long as reasonably needed to handle and follow up the enquiry.
• Newsletter subscriber data is retained until unsubscribe, removal on request, or another valid operational reason requires deletion.
• Operational/security logs are retained according to the configured retention of the infrastructure and error-monitoring services.

6. Processors and infrastructure

The site uses Cloudflare infrastructure for hosting, Workers, database and email-related processing. Sentry is used for error monitoring and may process technical diagnostics needed to investigate faults. These providers act only as needed to provide the relevant technical services; there is no third-party advertising network or marketing tracker intentionally embedded by this site.

7. Romania Cyber Monitor

Romania Cyber Monitor publishes automated summaries derived from public threat-intelligence sources. Ransomware listings are treated as unconfirmed claims unless the source material supports stronger wording. Publication here is not independent proof that a named organisation was compromised.

If an entry concerning your organisation appears inaccurate, use the contact page to request review or correction.

8. Your data-protection rights

Depending on where you are and which law applies, you may have rights including access, correction, deletion, restriction, objection, portability and withdrawal of consent where consent is the lawful basis.

To make a privacy request, email contact@liviubucel.com. UK residents may also raise concerns with the Information Commissioner's Office; people elsewhere can contact their applicable supervisory authority.

9. Changes

Material changes to this notice will be reflected by updating the date shown above.