Privacy policy

1. Who we are

This policy explains how PETRI DATA CONSULT SRL ("Data Consult", "we") collects and processes the personal data of people who visit the website dataconsult.ro or get in touch with us. We are the data controller within the meaning of Regulation (EU) 2016/679 (GDPR).

• Company name: PETRI DATA CONSULT SRL
• CUI: 34151270 · Trade Register no.: J6/110/2015
• Registered office: Bistrița, str. Mărăști nr. 12, Bistrița-Năsăud county
• E-mail: [email protected] · Telephone: +40 743 982 420

For any question about your data, you can write to us at [email protected].

2. What data we process, for what purpose and on what legal basis

We process only the data necessary for the purposes below:

a) Contact form

When you write to us through the form, we process your name, e-mail address, telephone number (if you provide it), estimated budget and your message. This data is sent to us by e-mail to [email protected] and is not stored in a database of the website. Purpose: to reply to you and discuss a potential collaboration. Legal basis: pre-contractual steps taken at your request and our legitimate interest in responding to enquiries (art. 6(1)(b) and (f) GDPR).

b) Newsletter subscription

If you subscribe, we process your e-mail address, which we store in order to send you news. You can unsubscribe at any time. Legal basis: your consent (art. 6(1)(a) GDPR), which you may withdraw at any time, without affecting the lawfulness of processing carried out beforehand.

c) Server logs and security

When you access the website, the server may automatically record your IP address, browser type, pages visited and time of access. Purpose: operation, security and abuse prevention. Legal basis: our legitimate interest (art. 6(1)(f) GDPR).

d) Cookies and similar technologies

See the Cookie policy. Non-essential cookies (analytics, marketing) are used only with your consent.

We do not ask for and do not intentionally process special categories of data (health, beliefs, etc.), we do not make automated decisions with legal effect on you, and we do not carry out profiling.

3. How long we keep the data

• Messages received through the contact form: generally no longer than 24 months, after which they are deleted.
• The newsletter e-mail address: until you unsubscribe or ask us to delete it.
• Server logs: generally up to 12 months.
• The dc_consent preference cookie: 6 months; the PHPSESSID session cookie: until you close your browser.

We may keep certain data for longer where required by law or for the establishment, exercise or defence of legal claims.

4. Who we disclose the data to

We do not sell your data. We may disclose it only to: the web hosting provider (which hosts the website and e-mail), the e-mail service provider and public authorities, only where the law requires us to. These providers act as processors and process the data only in accordance with our instructions. If you accept analytics cookies, Google (Google Analytics) processes usage data under its own policies. Independently of consent, we also use cookieless traffic measurement (Cloudflare), which stores nothing in your browser and does not allow you to be identified.

5. International transfers

The data is hosted on servers in Romania / the European Union. We do not transfer data outside the European Economic Area. If this changes, we will do so only with the safeguards required by the GDPR (standard contractual clauses or an adequacy decision) and we will update this policy.

6. How we protect the data

We use reasonable technical and organisational measures: a secure connection (HTTPS), monitored hosting, restricted access to the administration area, backups and data minimisation. No system is 100% secure, but we take security seriously.

7. Your rights (GDPR)

You have the right of: access; rectification; erasure ("the right to be forgotten"); restriction of processing; objection; data portability; withdrawal of consent at any time. You can exercise your rights by sending a request to [email protected]; we will reply within one month at the latest.

8. Complaints

You may contact ANSPDCP (the Romanian National Supervisory Authority for Personal Data Processing): B-dul General Gheorghe Magheru nr. 28-30, Sector 1, Bucharest · www.dataprotection.ro · [email protected]. We would, however, appreciate it if you contacted us first.

9. Children's data

The website is not aimed at children under 16 and we do not knowingly collect their data. If you become aware that a child has provided us with data, write to us and we will delete it.

10. Changes to this policy

We may update this policy. The version in force is the one published here, with the date shown above. Significant changes will be signalled visibly on the website.

11. Contact

PETRI DATA CONSULT SRL · [email protected] · +40 743 982 420.