Skip to content
11sound

LEGAL

Privacy Policy

Last updated:

This Privacy Policy explains how SEO EXPERTS SRL (“we”, “the controller”) processes personal data in connection with the 11sound.ro website. It reflects the application’s current behaviour based on a technical audit. It is not a substitute for personalised legal advice.

1. Data controller

The controller of personal data processed through 11sound.ro is SEO EXPERTS SRL, a Romanian legal entity with its registered office at Uileacu de Munte, comuna Paleu, județul Bihor, Romania, tax identification number RO 29769020, registered with the National Trade Register Office under no. J05/229/1296.

For personal-data requests: hello@11sound.ro, phone +40 745 474 358.

2. Scope

This policy applies to visitors of 11sound.ro (Romanian and English versions) and to people who submit a message through the contact form.

Partner stores (for example djflightcase.ro) and social networks we link to are operated by third parties. Processing on those sites is governed by their own policies, not this document.

3. Data collected through the contact form

When you submit the contact form, we collect the data you enter:

  • name;
  • email address;
  • inquiry type (category selected from a list);
  • message;
  • interface language (Romanian or English), so we can reply in the appropriate language;
  • optionally, the page path from which you submitted the form (technical context metadata).

The form includes a hidden anti-spam (“honeypot”) field. It is not intended for human users; if it is filled in, the request is treated as spam and is not forwarded by email.

4. Purposes and legal bases

Contact-form data is processed in order to:

  • receive and review your inquiry;
  • contact you by email (and, where relevant, via the public phone number on the site if you include a number in your message);
  • send a short acknowledgment that we received your inquiry (transactional, not marketing);
  • protect the form against abuse (validation, rate limiting, honeypot).

The typical legal basis is our legitimate interest in responding to inquiries received through the website and, where your message concerns a possible contractual relationship (rental, quotation, project), steps at your request prior to entering a contract (GDPR Art. 6). If a different basis applies in your case, we will tell you.

We do not use contact-form data for newsletters, profiling advertising, or sale to third parties.

5. Email delivery and storage

After validation, the server attempts to send: (1) an internal notification to the operator-configured inbox and (2) a short confirmation email to the address you provided. Delivery uses SMTP with credentials stored only on the server (environment variables), never in the browser.

Production email / SMTP provider: e-tiger.net (Viacom Informatikai Kft., Hungary) — SMTP over TLS. Contact-form messages are email-only — the web application does not store them in a database or write them to the server disk.

Messages arrive in the operator’s email systems (and in your inbox, for the confirmation). The website does not maintain a separate marketing database for these messages. We keep mailbox correspondence only as long as needed to handle the inquiry, follow related communication and meet applicable legal duties; the concrete duration follows the operator’s internal procedures (it is not hard-coded in the site).

6. Security, anti-spam, logs and hosting

On the server, the application applies field validation, a request body size limit, a honeypot, and a limit on the number of submissions in a time window based on the request IP address (including trusted proxy headers when present). The rate-limit counter is kept in the Node process memory and does not set a session cookie in the browser.

Hosting: Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany (server: Nuremberg / nbg1, EU). nginx access logs may include IP, requested URL, time and browser string; they are kept for 30 days, then deleted. Purpose: security (abuse protection) and diagnosis. Application logs may include request IDs, not form contents.

7. Fonts, external links and video

The website loads web fonts from Google Fonts (fonts.googleapis.com / fonts.gstatic.com). This involves a network request to Google’s servers when you load the page. We do not use Google Fonts as an analytics or advertising tool. More detail: Cookie Policy.

Some Journal articles may include links that you deliberately follow to YouTube or other sites. We do not load YouTube players, scripts or video iframes when the page opens; YouTube content loads only if you choose to open the link. Likewise, links to partner stores or social networks open third-party sites that may set their own cookies.

8. Cookies and similar technologies

The 11sound.ro application does not currently set first-party cookies and does not use localStorage / sessionStorage in site scripts. We do not integrate Google Analytics, Meta Pixel or other marketing trackers. Details are in the Cookie Policy.

9. Recipients and transfers

Recipients may include:

  • hosting: Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany (server: Nuremberg / nbg1, EU);
  • email / SMTP: e-tiger.net (Viacom Informatikai Kft., Hungary) — SMTP over TLS;
  • server logs: nginx access, 30 days;
  • Google (Fonts) — while fonts are not self-hosted;
  • djflightcase.ro — for the shop promotional feed (product data, not contact-form data);
  • other tools (analytics, tracking) — not integrated at present.

Google Fonts may involve transfers outside the EEA. SMTP to e-tiger.net may involve processing in Hungary (EEA).

10. Your rights

Under the GDPR and applicable Romanian law, you may request access, rectification, erasure, restriction of processing, objection (where the basis is legitimate interest), and data portability where applicable.

To exercise your rights, contact us at hello@11sound.ro. You also have the right to lodge a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP) — https://www.dataprotection.ro.

11. Children

The website is not specifically intended to collect data from children. If we learn that we received data from a child without an appropriate legal basis, we will take reasonable steps to delete it.

12. Changes

We may update this policy when the website, infrastructure or legal requirements change. The date of the last update is shown above.

13. Contact

For questions about this policy:

  • SEO EXPERTS SRL
  • Email: hello@11sound.ro
  • Phone: +40 745 474 358
  • Registered office: Uileacu de Munte, comuna Paleu, județul Bihor, Romania
  • Website: https://11sound.ro

Back to homepage