Privacy policy
The short version.
- This site has no accounts and no tracking by default.
- The demo form doesn't send anything to our servers. It opens your own email app with a message to us, and you decide whether to send it.
- Google Analytics runs only if you click Accept. You can change your mind at any time with Cookie settings at the bottom of every page.
- We don't sell personal data, and we don't use it for advertising.
- Who we are
- What we process
- Cookies and storage
- Who receives data
- Transfers outside the EU
- How long
- Your rights
- Changes
1. Who we are
The controller of the personal data described here is SUN BLOOM TECH S.R.L. (“Sunbloom Tech”, “we”), a Romanian company with tax identification number (CUI) 50956743 and its registered office at Călărașilor street No. 6-8, Târgu Mureș 540044, Mureș county, Romania.
For anything related to your data, write to office [at] sunbloomtech.com (replace “[at]” with “@”). We have not appointed a Data Protection Officer, because the law does not require one for our activity. Your message reaches the people who run the company.
This policy covers the website sunbloomtech.com. Our products (AcademicScriptor, StockScriptor and Trellis) process data for our clients under separate contracts and data processing agreements. StockScriptor’s own website, stockscriptor.com, has its own policy.
2. What we process, why, and on what legal basis
| Situation | Data | Purpose | Legal basis (GDPR) |
|---|---|---|---|
| You visit any page | IP address, browser and device type, page requested, date and time | Delivering the site, protecting it against abuse and attacks, fixing errors | Our legitimate interest in running a secure website (Art. 6(1)(f)) |
| Cloudflare Web Analytics | Page views, referring site, country, browser type. No cookies and no identifiers that follow you across sites | Counting visits and seeing which pages are useful | Our legitimate interest in understanding how the site is used, in aggregate (Art. 6(1)(f)) |
| You accept Google Analytics | Cookie identifiers, pages visited, approximate location, device and browser data, how you interact with the pages | More detailed usage statistics to improve the site | Your consent (Art. 6(1)(a), and Art. 4(5) of Romanian Law 506/2004). Without consent, Google Analytics does not load |
| You email us, including through the demo form | Name, work email, organization, the product you are interested in, the content of your message and our correspondence | Answering you, arranging and running a demo, preparing an offer you asked for | Steps you asked for before a possible contract (Art. 6(1)(b)), and our legitimate interest in replying to business enquiries (Art. 6(1)(f)) |
About the demo form. When you press Send request, the form builds an email in your own email app, addressed to us. Nothing is sent or saved by this website. We receive the message only if you send it from your email app.
You don’t have to give us any personal data to browse the site. If you want a reply, we need at least a way to contact you.
We don’t make decisions about you by purely automated means, and we don’t build profiles of visitors.
3. Cookies and browser storage
| Name | Type | What it does | How long |
|---|---|---|---|
sbt-consent | Browser storage (not a cookie), strictly necessary | Remembers whether you accepted or declined Google Analytics | Until you clear it or use Cookie settings |
theme | Browser storage (not a cookie), preference | Remembers whether you chose the light or dark theme | Until you clear your browser data |
_ga, _ga_<ID> | Cookies, analytics. Only after you accept | Set by Google Analytics to tell visits apart | Up to 2 years, unless you delete them |
Cloudflare may set short-lived security cookies when it needs to check for automated traffic. These are needed to protect the site.
Changing your choice. Use . It deletes the Google Analytics cookies on this site and asks you again. You can also block or delete cookies in your browser settings.
The site’s fonts are hosted on our own domain. Loading a page does not contact Google Fonts or any other font service.
4. Who receives data
We share personal data only with the service providers we need to run the site and answer you. Each one acts on our instructions under a data processing agreement:
- Cloudflare, Inc. hosts the site and provides the content delivery network, security and Web Analytics.
- Google Ireland Limited / Google LLC provides Google Analytics, and only if you accept it.
- Our email provider stores the messages you send us.
We may also disclose data when the law requires it, for example to a court or a public authority, or to defend our legal rights.
5. Transfers outside the European Economic Area
Cloudflare and Google are based in the United States and may process data there. Both are certified under the EU-U.S. Data Privacy Framework, which the European Commission has recognised as providing adequate protection. Where that certification doesn’t apply, transfers rely on the European Commission’s Standard Contractual Clauses.
6. How long we keep data
- Emails and demo requests: up to 2 years after our last exchange. If the conversation becomes a contract, we keep what the contract and Romanian accounting and tax law require.
- Google Analytics data: at most 14 months, then Google deletes it automatically.
- Cloudflare security and delivery logs: kept by Cloudflare for a short period under its own retention rules, then deleted.
- Browser storage (
sbt-consent,theme): stays in your browser, and you can remove it at any time.
7. Your rights
Under the GDPR you can ask us to:
- tell you whether we process data about you, and give you a copy (access);
- correct inaccurate data (rectification);
- delete data (erasure);
- limit how we use it (restriction);
- give you the data you provided in a portable format (portability);
- stop processing based on our legitimate interest (objection);
- withdraw your consent at any time. Withdrawing doesn’t affect processing that already happened.
Write to office [at] sunbloomtech.com. We answer within one month, and we may ask you to confirm your identity first. Exercising your rights is free.
You also have the right to complain to the Romanian data protection authority: Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP), 28-30 G-ral Gheorghe Magheru Blvd., District 1, 010336 Bucharest, www.dataprotection.ro. You can also complain to the authority in the EU country where you live or work.
8. Changes to this policy
If we change how we handle data, we will update this page and the date at the top. If a change needs your consent, we will ask for it.