Privacy Policy
Last updated: 7 October 2026
This policy explains what personal data we process when you visit responsabilnis.ro or contact us, in accordance with Regulation (EU) 2016/679 (GDPR).
1. Who we are
The data controller is Responsabil NIS. For any data protection matter, contact us at office@responsabilnis.ro.
2. What data we collect
- Contact form: full name, organisation, email address, phone (optional), service of interest and your message.
- Email: any data you choose to send us.
- Technical data: our hosting provider may process your IP address and browser information, strictly to deliver the site and protect it against attacks.
We do not use marketing or tracking cookies and do not profile visitors.
3. Purposes and legal basis
- Replying to your request and sending a quote — pre-contractual steps taken at your request (Art. 6(1)(b) GDPR).
- Follow-up correspondence and keeping a record of communication — our legitimate interest (Art. 6(1)(f) GDPR).
- Website security and operation — legitimate interest (Art. 6(1)(f) GDPR).
4. Who we share data with
We do not sell or rent your data. We use the following processors:
- Cloudflare, Inc. — website hosting, DNS, security and email forwarding;
- Web3Forms — delivering contact form messages to our mailbox;
- Google LLC (Gmail) — receiving and managing correspondence;
- Brevo SAS — sending emails on our behalf.
Some providers may process data outside the European Economic Area. Such transfers rely on appropriate safeguards, such as the EU-US Data Privacy Framework or the European Commission’s standard contractual clauses.
Data may be disclosed to public authorities only where required by law.
5. How long we keep data
We keep enquiry data for up to 2 years after the last communication if no engagement follows. If you become a client, data is kept for the duration of the contract and afterwards for the periods required by law (e.g. tax and accounting obligations).
6. Your rights
You have the right of access, rectification, erasure, restriction of processing, data portability and objection. To exercise them, email office@responsabilnis.ro; we reply within one month.
You may also lodge a complaint with the Romanian supervisory authority (ANSPDCP), www.dataprotection.ro.
7. Cookies
This site does not use analytics, marketing or tracking cookies. Our hosting provider may set strictly necessary security cookies (e.g. protection against automated traffic), which do not require consent. Traffic statistics, if enabled, are aggregated and cookie-free.
8. Security
The site is served over HTTPS only. We apply appropriate technical and organisational measures to protect data, as befits our field of work.
9. Changes
We may update this policy. The current version is always published on this page with its last-updated date.