Last updated: September 29th, 2026
This website, mariaz.design (the “Site”), is operated by “Maria Zaman” (as an individual), with registered address at Șos. București-Ploiești, Nr. 14-22, Sector 1, Bucharest 013693, Romania (the “Operator”, “we”, “us”). We take your privacy seriously. This policy explains what personal data we collect when you visit the Site, why we collect it, and what rights you have under the EU General Data Protection Regulation (GDPR) and Romanian data protection law.
1. Who is responsible for your data
The data controller for the Site is “Maria Zaman” (as an individual). You can reach us at maria@mariaz.design for any question about this policy or your personal data.
2. What data we collect and why
2.1 Contact form
If you use the contact form, we collect your name, email address and the content of your message. This data is sent to us by email and used only to respond to your enquiry and, where relevant, to discuss a potential project. We do not store form submissions in a database on the Site; the message is kept in our email account for as long as necessary to handle your request and any follow-up, after which it is deleted unless we have a business relationship that requires keeping it.
Legal basis: our legitimate interest in responding to enquiries (Art. 6(1)(f) GDPR) and, where you ask for a quote or services, steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR).
2.2 Technical data and server logs
When you visit the Site, our hosting provider automatically records technical information such as your IP address, browser type, operating system, referring page, pages visited and the date and time of the visit. This information is needed to deliver the Site securely and to diagnose technical problems.
Legal basis: our legitimate interest in operating a secure, functioning website (Art. 6(1)(f) GDPR).
2.3 Site statistics
We use Jetpack Stats, a service provided by Automattic Inc., to understand how many people visit the Site and which pages are popular. Jetpack Stats collects anonymised, aggregated visit data (such as pages viewed, referrers, country and browser type). Your IP address is processed by Automattic to derive location at country level. Automattic is certified under the EU-U.S. Data Privacy Framework. More information: Automattic Privacy Policy.
Legal basis: our legitimate interest in understanding how the Site is used (Art. 6(1)(f) GDPR).
2.4 Fonts and images served by third parties
To display the Site correctly, some resources are loaded from third-party servers:
- Google Fonts (Google Ireland Ltd.): the typefaces used on the Site are loaded from Google’s servers. When your browser requests them, your IP address is transmitted to Google. Google Privacy Policy.
- Jetpack Image CDN (Automattic Inc.): project images are delivered through Automattic’s content delivery network, which receives your IP address in order to serve the image.
Legal basis: our legitimate interest in presenting the Site quickly and consistently (Art. 6(1)(f) GDPR).
3. Cookies
The Site does not set advertising or tracking cookies. Only technically necessary cookies may be set, for example if you log in to the administration area. We do not currently use Google Analytics or similar tools that require cookie consent. If this changes, we will update this policy and ask for your consent before setting any non-essential cookies.
4. Who we share data with
We do not sell or rent your personal data. We share data only with service providers who process it on our behalf and under our instructions:
- Bluehost / Newfold Digital (USA): web hosting and server infrastructure;
- Automattic Inc. (USA): Jetpack Stats and image delivery;
- Google Ireland Ltd.: font delivery;
- Google Workspace and/or Bluehost Mail: receiving and storing contact form emails.
Some of these providers are located in the United States. Transfers to them are based on the EU-U.S. Data Privacy Framework and/or the European Commission’s Standard Contractual Clauses.
We may also disclose personal data where required by law or to protect our legal rights.
5. How long we keep your data
- Contact form messages: for as long as needed to handle your enquiry, and no longer than 12 months afterwards, unless a project or legal obligation requires longer retention;
- Server logs: kept by our hosting provider for a limited period, typically up to 30 days, for security purposes;
- Site statistics: stored in aggregated form and not linked to you personally.
6. Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you;
- ask us to correct inaccurate data;
- ask us to delete your data (“right to be forgotten”);
- restrict or object to our processing of your data;
- receive your data in a portable format;
- withdraw consent at any time, where processing is based on consent.
To exercise any of these rights, email us at maria@mariaz.design. We will respond within one month.
If you believe we have handled your data unlawfully, you have the right to lodge a complaint with the Romanian supervisory authority: Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP), B-dul G-ral. Gheorghe Magheru 28-30, Bucharest, www.dataprotection.ro.
7. Security
The Site is served over HTTPS and we take reasonable technical and organisational measures to protect your data against unauthorised access, loss or misuse. No transmission over the internet is completely secure, however, and we cannot guarantee absolute security.
8. Children
The Site is not directed at children under 16 and we do not knowingly collect personal data from them.
9. Changes to this policy
We may update this policy from time to time. The date at the top shows when it was last revised. Material changes will be highlighted on this page.
10. Contact
Maria Zaman
Șos. București-Ploiești, Nr. 14-22, Sector 1, Bucharest 013693, Romania
Email: maria@mariaz.design
Phone: +40 724 343 097