Privacy policy

1. Who we are

The controller is GLOBAL DATA PROTECTION SRL, trading as dataconsulting.ro, registration number (CUI) 39146037, entered in the Trade Register under no. J23/1513/2018, Romania.

For any question about your data, write to us at office@dataconsulting.ro.

2. What we process, why, and on what basis

Contact and audit forms. We process your name, email address, phone number, company name and message, and in the audit form also your answers about the use of AI tools in your company. We use them to reply to you, to schedule the free audit and, at your request, to send you a quote. The lawful basis is taking steps, at your request, prior to entering into a possible contract (Article 6(1)(b) of Regulation (EU) 2016/679).

Visit statistics. Only if you accept them in the cookie banner, we use Google Analytics to learn which pages are read, for how long, where visitors come from, on what type of device and from which country or approximate city. To do this, Google places a unique identifier in your browser that allows the same browser to be recognised on later visits; that identifier is personal data. The lawful basis is your consent (Article 6(1)(a) of the Regulation and Article 4(5) of Romanian Law no. 506/2004). If you refuse, Google Analytics does not load at all.

Hosting logs. On every visit, the hosting provider automatically records technical data such as the IP address, date and time, the page requested and the type of browser. They are needed for the site to work and to protect it against attacks. The lawful basis is our legitimate interest in keeping the site working and secure (Article 6(1)(f) of the Regulation).

WhatsApp messages. The WhatsApp button on the site opens the WhatsApp application. If you choose to write to us there, the data is also processed by WhatsApp (Meta) as a separate controller, under its own privacy policy.

3. How long we keep data

• Form data: as long as needed to reply to your enquiry and, if we work together, to run the relationship, but no longer than 3 years after the last interaction, or earlier if you ask us to delete it. If we enter into a contract, accounting records are kept for as long as the law requires.
• Visit statistics: the identifier in your browser expires after at most 2 years, and the statistical data is kept in the Google Analytics account for at most 14 months.
• Hosting logs: a limited period set by the hosting provider.

4. Who receives the data

We do not sell or rent your data. We pass it only to the recipients below, to the extent needed for the purposes described:

• Vercel Inc. (United States), which hosts the site and also handles form submissions, acting as a processor.
• The provider of the company email service, with servers in Romania, acting as a processor.
• Google (Google Ireland Limited and Google LLC, United States), for visit statistics, only if you have accepted them.
• Public authorities, only where the law requires it.

5. Transfers outside the European Economic Area

Vercel and Google also process data in the United States. These transfers take place on the basis of the adequacy decision adopted by the European Commission on 10 July 2023 for the EU-U.S. Data Privacy Framework, for providers certified under it, and on the basis of the standard contractual clauses adopted by the European Commission.

If you write to us on WhatsApp, the transfer is made by Meta under its own policy.

6. Your rights

• Right of access — you can ask for a copy of the data we hold about you.
• Right to rectification — you can ask for incorrect data to be corrected.
• Right to erasure — you can ask for your data to be deleted.
• Right to restriction of processing.
• Right to data portability.
• Right to object, for processing based on our legitimate interest.
• Right to withdraw your consent at any time, without affecting the lawfulness of processing carried out before the withdrawal.

To exercise these rights, write to us at office@dataconsulting.ro.

7. Cookies

The site uses one strictly necessary entry in local browser storage, which remembers your cookie choice, and Google Analytics cookies, only with your consent. We do not use marketing or advertising cookies.

You can change or withdraw your choice at any time from the “Cookie preferences” link in the footer of every page. The details are in the cookie policy.

8. Providing data and automated decisions

Filling in the forms is voluntary. Without the data requested we cannot reply to you or schedule the audit.

We do not take decisions based solely on automated processing and we do not build a profile of you that produces legal effects concerning you.

9. Contact and complaints

To exercise your rights or for any question: office@dataconsulting.ro.

You have the right to lodge a complaint with the Romanian supervisory authority, ANSPDCP (National Supervisory Authority for Personal Data Processing) — www.dataprotection.ro.