Privacy Policy

1. Data Controller

• BORMOS TECHNOLOGY S.R.L.
• CUI: 46695135
• Str. Prof. Dr. Ioan Cantacuzino, Nr. 32, Oradea, jud. Bihor, Romania
• Email: bormos.tech@protonmail.com
• Phone: +40 758 982 927

2. Data We Collect

This is a presentation website. We collect minimal personal data:

• Contact data: when you contact us via email, we receive your email address, name, and the content of your message.
• Technical data: our hosting provider may collect IP addresses, browser type, operating system, and access timestamps through server logs for security and operational purposes.
• Cookies: see our Cookie Policy for details.

3. Legal Basis for Processing

We process personal data under the following legal bases (GDPR Art. 6):

• Consent (Art. 6(1)(a)): for cookies and optional communications.
• Legitimate interest (Art. 6(1)(f)): for server security logs and website operation.
• Pre-contractual measures (Art. 6(1)(b)): when you contact us regarding potential services.

4. Purpose of Processing

• Responding to your inquiries
• Ensuring the security and proper functioning of the website
• Compliance with legal obligations

5. Data Retention

Contact correspondence is retained for up to 3 years from the last communication. Server logs are retained for a maximum of 12 months. Data is deleted or anonymized after the retention period unless a legal obligation requires longer storage.

6. Data Sharing and Transfers

We do not sell personal data. Data may be shared with:

• Hosting provider (Netlify, Inc.): for website delivery and server infrastructure, which may involve transfers to the United States under EU Standard Contractual Clauses.
• Legal authorities: when required by Romanian or EU law.

7. Your Rights

Under the GDPR, you have the following rights:

• Right of access (Art. 15): obtain confirmation of whether your data is processed and receive a copy.
• Right to rectification (Art. 16): correct inaccurate or incomplete data.
• Right to erasure (Art. 17): request deletion of your personal data.
• Right to restriction (Art. 18): restrict processing in certain circumstances.
• Right to data portability (Art. 20): receive your data in a structured, commonly used format.
• Right to object (Art. 21): object to processing based on legitimate interests.
• Right to withdraw consent (Art. 7(3)): withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at bormos.tech@protonmail.com. We will respond within 30 days as required by GDPR Art. 12(3).

8. Data Security

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction, in accordance with GDPR Art. 32. The website is served over HTTPS (TLS encryption).

9. Supervisory Authority

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Romanian supervisory authority:

• ANSPDCP (Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal)
• B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, 010336, București, Romania
• Website: dataprotection.ro
• Email: anspdcp@dataprotection.ro

10. Changes to This Policy

We may update this Privacy Policy periodically. Changes will be posted on this page with an updated revision date. We encourage you to review this page regularly.