1. Who is the data controller

The data controller for the processing described on this page is Site administrator.

Owner / author name: Site administrator
Contact email: grig@grig.co
Privacy / GDPR email: grig@grig.co
Address:
Country: Romania
Website: https://webblog.co.uk

2. What data may be collected

Depending on how you use the site, the following categories of data may be processed:

• data provided directly by users, such as their name, email address, website domain, and the content of messages or comments;
• technical data such as IP address, user agent, browser and device information, operating system, and pages visited;
• data about cookie consent;
• data resulting from the use of third-party services integrated into the site, if enabled.

3. Purposes and legal grounds for processing

Data may be processed for the following purposes:

• Responding to messages sent through the contact form – legal ground: taking steps at the request of the data subject or the legitimate interest in responding to enquiries.
• Publishing and moderating comments – legal ground: legitimate interest in administering the site and preventing abuse; email confirmation may be used for security and spam prevention.
• Technical administration and site security – legal ground: legitimate interest in operating and securing the site and protecting it from abuse.

4. Cookies and similar technologies

The site may use cookies and similar technologies for operation, security, preferences, traffic analysis and, where applicable, media services or advertising.

4.1 Strictly necessary cookies

Some cookies may be strictly necessary for the site to operate, for example for sessions, security, authentication, or storing essential technical preferences. These do not require consent where they are strictly necessary to provide the service requested by the user.

4.2 Analytics, marketing, or external-content cookies

Any cookies or identifiers that are not strictly necessary should only be enabled with consent, before being stored on or accessed from a device, in line with applicable rules and GDPR requirements for valid consent.

4.3 How to manage cookies

You can change your cookie preferences through the site’s consent mechanism, if available, or through your browser settings. Cookie settings page: https://webblog.co.uk/#cookie-settings

4.4 Examples of cookie categories

• Necessary: sessions, security, authentication, basic technical preferences.
• Analytics: traffic measurement and analysis of site usage.
• External media: embedded content from third-party platforms, if used.
• Marketing: advertising, profiling, or conversions, only if actually enabled.

5. Third-party services and data recipients

Data may be accessed or processed by providers that supply services necessary for the site to operate.

• Hosting: ROMARG SRL
• Email / SMTP: ROMARG SRL

If the site includes third-party embedded content such as videos, maps, fonts, or widgets, those providers may receive technical data such as your IP address and browser information when their content is loaded.

6. International transfers

If certain third-party services involve providers or infrastructure outside the European Economic Area, data may be transferred internationally only under appropriate legal mechanisms, such as adequacy decisions, standard contractual clauses or other applicable safeguards.

7. How long data is retained

• Contact form messages: for as long as needed to handle the enquiry and for a reasonable period for record-keeping and legal protection.
• Comments: until deleted, withdrawn, anonymised, or for as long as justified by the purposes of publication and content administration.
• Unverified or rejected comments: for a limited period needed for security, abuse prevention, and administrative clean-up.
• Technical and security logs: for as long as needed for operation, maintenance, and protection against abuse.

8. Your rights

Under the GDPR, data subjects may have the following rights:

• the right of access;
• the right to rectification;
• the right to erasure;
• the right to restriction of processing;
• the right to object;
• the right to data portability, where applicable;
• the right to withdraw consent where processing is based on consent;
• the right to lodge a complaint with the competent supervisory authority.

To exercise your rights, contact: grig@grig.co

9. Complaints and supervisory authority

If you believe that the processing of your data violates applicable law, you may lodge a complaint with Romanian National Supervisory Authority for Personal Data Processing.

10. Security

Reasonable technical and organisational measures are used to protect data against unauthorised access, loss, alteration, or unauthorised disclosure. However, no method of electronic transmission or storage is completely secure.

11. Children

The site is not intentionally designed to collect personal data from children unless this is expressly and lawfully provided for. If you believe that a child’s data has been submitted inappropriately, please contact us.

12. Changes to this notice

This page may be updated periodically to reflect legal, technical, or operational changes. The current version will always be published on this page together with the latest update date.