Data protection
Privacy policy
We respect your privacy and process personal data transparently, limiting it to what is necessary to provide our services and operate the website securely.
Data we process
We may process your name, email address, optional telephone number, subject and content of messages submitted through the contact form. For user accounts, we process identification, authentication and profile data. The website and infrastructure may generate technical data such as IP address, timestamps, session identifiers, browser information, security logs and audit records. The reCAPTCHA token is used to verify requests and prevent abuse. If you allow analytics cookies, Google Analytics 4 also processes website usage and device data.
Purposes of processing
We use data to respond to enquiries, prepare and provide services, administer accounts and authenticated sessions, send necessary communications, secure the application, prevent fraud and automated messages, diagnose errors and comply with legal obligations. With your consent, analytics data is used to understand and improve website usage.
Legal bases
Depending on the context, processing is based on steps taken at your request before entering into a contract, performance of a contract, the controller's legal obligations and the legitimate interest in communicating, securing and improving services. Where processing requires consent, it will be requested separately and may be withdrawn at any time.
Recipients and providers
Data may be accessed only by authorised persons and, where necessary, by providers supporting hosting, technical infrastructure, email delivery, security, analytics and application maintenance, including Google where its services are enabled. Data may be disclosed to public authorities where legally required. We do not sell personal data.
International transfers
Certain third-party services, including Google reCAPTCHA and Google Analytics 4 where consented to, may involve processing outside the European Economic Area. In such cases, mechanisms and safeguards required by applicable law are used, such as adequacy decisions or standard contractual clauses.
Data retention
We retain data only for as long as necessary for the purposes for which it was collected. The period is determined by the duration of the relationship and request, legal obligations, limitation periods, dispute resolution needs and security requirements. Once the applicable period expires, data is deleted or anonymised.
Data security
We apply technical and organisational measures proportionate to the risks, including encrypted connections, access controls, protected authentication cookies, technical monitoring, audit and backups. No internet-connected system can, however, guarantee absolute security.
Your rights
Subject to the GDPR, you may request access, rectification, erasure, restriction of processing and data portability and may object to certain processing. Where processing is based on consent, you may withdraw it without affecting the lawfulness of earlier processing. To exercise your rights, contact us using the address shown on this page.
Complaints
If you believe your data is not being processed lawfully, please contact us first so we can investigate. You also have the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing.
www.dataprotection.roAutomated decisions
We do not use data collected through this website for decisions based solely on automated processing that produce legal or similarly significant effects on you, and we do not conduct profiling for this purpose.
Policy updates
We may update this policy when the website, services, providers or legal requirements change. The version in force is the version published on this page.