# Privacy, cookies and legal notice

## Data controller

TNY PERFORMANCE S.R.L., CUI 50003437, Nr. Reg. Com. J2024003166233, Str. Stadionului 5, 40, cod poștal 077177, Ilfov, Romania. Contact: tnyperformance@gmail.com.

## Data we process and why

Name, email, company and message from the contact form (legal basis: your consent and pre-contract steps, GDPR Art. 6(1)(a),(b)). Retention: up to 24 months, then deleted. Server logs for security (legitimate interest).

## Your rights

Access, rectification, erasure, restriction, portability, objection and withdrawal of consent at any time by emailing us. You can complain to ANSPDCP (dataprotection.ro), the Romanian data protection authority.

## Cookies

Strictly necessary: stores your cookie choice (tny_consent). Analytics (optional): enabled only after you accept. You can change your choice at any time with the cookie settings link in the footer.

## Processors and transfers

Hosting by Vercel Inc. and email delivery by our provider, under Data Processing Agreements and EU Standard Contractual Clauses where data leaves the EEA.

## Cybersecurity (DNSC)

We apply security-by-design practices aligned with the NIS2 framework (Romanian Law 124/2025 and OUG 155/2024). Security incidents can be reported to DNSC (dnsc.ro) and to us at the contact above.

## Disputes

Consumers can contact ANPC (anpc.ro) and the alternative dispute resolution (SAL) bodies. Romanian law applies.

## Other information

Providing your data is voluntary, but we need it to reply to you. We make no automated decisions and no profiling, we do not sell your data and we send no marketing emails without your separate consent. This website is not directed at children under 16. If you reach us through an ad or campaign link, we store the campaign details and the page you used, together with your request, to understand which channels work.

## Cookies and storage used

- **tny_consent (localStorage)**: Stores your cookie choice. (12 months)
- **_ga, _ga_* (Google)**: Anonymous audience statistics. Set only if you accept and analytics is enabled. (2 years)