Privacy notice
Last updated: 12 November 2026
Data controller
The data controller is Alexandru Casapu (natural person), who can be contacted at alex@casapu.net.
Data processed
The data entered in the contact form: first name, last name, work email, company and, optionally, phone. In addition, for security and to understand where a request comes from: an anonymised identifier of the IP address (not the address itself), the browser type, the site language and campaign parameters (for example utm_source).
Purposes and legal bases
To reply to the request and arrange the free first call with a TBD Process Engineer. Legal basis: the data subject's consent (Article 6(1)(a) of Regulation (EU) 2016/679) and, for contact requests, pre-contractual steps taken at the data subject's request (Article 6(1)(b)). Security and prevention of misuse of the form (request limit, trap field): legitimate interest in keeping the service secure (Article 6(1)(f)).
Who can see the data
TBD's founders and the tools, including AI-based ones, that assist them in handling requests. Authorised collaborators, advisers and service providers (for example hosting, email and processing tools) may access it under the controller's responsibility and a duty of confidentiality, designated as authorised persons or appointed as processors under Article 28 GDPR. Access is limited to what is necessary for the stated purposes. If a provider is based outside the European Union, the transfer relies on appropriate safeguards (for example standard contractual clauses).
Artificial intelligence
Requests may be processed with the help of AI-based tools, for example to prepare a reply. No decision producing legal effects on the requester is taken solely by automated means.
Retention
Data is kept for as long as necessary to handle the request and any relationship that follows. If no relationship results, it is deleted or anonymised within a reasonable period, unless the law requires otherwise.
Rights
By writing to alex@casapu.net, you may exercise the rights of access and rectification, erasure and restriction of processing, portability, objection to processing based on legitimate interest, and withdrawal of consent at any time (without affecting processing already carried out). You also have the right to lodge a complaint with the competent supervisory authority, such as the Italian data protection authority (www.garanteprivacy.it).
Cookies and measurement
The site measures visits anonymously and without cookies: it records the page visited, the language, the variant shown, campaign parameters, the referring site and an anonymous identifier that changes every day (computed from the IP address and browser, without storing them on the device). If the browser sends the Do Not Track or Global Privacy Control signal, measurement does not start. Third-party tools for measuring and improving campaigns (for example Google Analytics or LinkedIn Insight Tag), if enabled, load only after consent given through the banner. The restricted area for administrators uses a technical session cookie.
Changes
This notice may be updated. The date at the top shows the latest revision.