Home / Privacy policy

Privacy policy

Last updated: October 19, 2026

1. Controller

The data controller is [Denumire firmă] S.R.L., registered office: [Sediu social conform ONRC], VAT/tax ID [CUI], Trade Register no. [J03/…/…], email contact@cstdevs.com, phone +40 758 80 20 20.

2. Data we process

• Data sent through the contact or audit form: name, company, email, phone, website address, message.
• Data sent by phone, email or WhatsApp.
• Technical browsing data (only with your consent for analytics cookies).
• Your chosen language, stored in your browser (not on our servers).

3. Purpose and legal basis

• Answering your request and preparing quotes — Art. 6(1)(b) GDPR.
• Performing the contract and invoicing — Art. 6(1)(b) and (c).
• Traffic statistics — Art. 6(1)(a) (consent).

4. Retention

Requests without a contract: up to 2 years. Accounting records: as required by law (10 years).

5. Recipients

Providers that help us operate: hosting (Vercel), email (Spacemail, Resend), analytics (Google, only with consent). Some providers may process data outside the EEA under Standard Contractual Clauses. We never sell data.

6. Your rights

Access, rectification, erasure, restriction, portability, objection and withdrawal of consent. Write to contact@cstdevs.com. You can complain to the Romanian authority ANSPDCP or to the supervisory authority in your country. California residents: we do not sell or share personal information.