Dragoș Tuță Mihaylov
ROEN

Privacy

How I use your data

Last updated: 31 October 2026.

In short: this site uses no cookies and no forms. I measure traffic anonymously, without cookies. The only personal data I receive is what you send me by e-mail.

Who is responsible

The data controller is Dragoș Tuță Mihaylov, as a private individual. You can reach me at the e-mail address in the Contact section.

What data I receive and why

  • E-mails you send me (your name, e-mail address and what you write, such as your company’s goals or an event invitation). I use them to reply and, where relevant, to prepare a conversation or a collaboration. The legal basis is your request and my legitimate interest in replying (Art. 6(1)(b) and (f) GDPR).
  • Anonymous traffic statistics, via GoatCounter: the page visited, the referring page, browser, device type, country and clicks on the main buttons (such as “Subscribe” or “Request a conversation”). No cookies are used and IP addresses are not stored, so I cannot identify you. The legal basis is my legitimate interest in knowing which content is useful (Art. 6(1)(f) GDPR).
  • Server logs (IP address, browser, page visited, time). They are kept automatically by the hosting company, for security and to keep the site running.

How long I keep it

I keep correspondence for as long as the conversation or collaboration requires, and at most 3 years after the last message, unless the law requires longer (for example, accounting records for a contract). Server logs are kept for the period set by the hosting company.

Who else has access

  • My mailbox is hosted by Google Workspace and the site by a hosting provider in Romania. They process data only to provide these services.
  • Traffic statistics are processed by GoatCounter, on servers in Finland and Germany.
  • Daily Briefing images on this site load from Substack’s servers, which therefore receive your IP address.
  • The Daily Briefing subscription (on Substack), the maturity test (on Tally) and LinkedIn are external services with their own privacy policies. Data you enter there does not reach this site.

I do not sell or rent data to anyone.

Your rights

You can ask at any time for access to your data, its correction or deletion, restriction of processing and data portability, and you can object to processing. Write to me at the address in the Contact section. You can also lodge a complaint with the Romanian data protection authority, ANSPDCP (dataprotection.ro), or with the authority in your own EU country.

Consulting services

Consulting services are provided through Responsabilitate Sociala SRL (The CSR Agency), VAT RO25004202, Reg. no. J2009000926406. For data processed under a consulting contract, the company is the controller and the details are set out in the contract.