Privacy Policy

Last update on Jan 2026

This privacy policy ("Policy") describes what types of personal data are processed, how they are used, what your options are in relation to such processing, and how we will respect your rights in this process. as a data subject under the legislation on the protection of personal data, including Regulation (EU) 2016/679 ("GDPR").

Before using the site or any of our services, we recommend you to read this policy carefully to understand how your personal data is processed.

1) WHO IS RESPONSIBLE FOR THE PROCESSING OF YOUR DATA?

S.C. WebSoftix S.R.L. a limited liability company, based in Romania, is the operator of personal data, according to the legislation on personal data protection including GDPR, regarding the personal data of Users collected and processed through the Site- and / or in the context of the Services offered through or in connection with the Site.

For the activity of personal data processing, the Company can be contacted using the following contact details:

2) WHAT DATA DO WE PROCESS?

The company processes the personal data you provide us when you contact us by any means of communication, when you send us messages via email addresses or by contact forms or by phones numbers (Call or SMS) published on our website available at https://www.websoftix.com or when you contact us on chats through social networks like "WhatsApp", "LinkedIn", "Facebook", "UpWork", "YouTube", "X" or "Skype".

Typical categories of data we process include: identification and contact details (name, email, phone), communication content (messages and attachments), business details you share (company, role, project needs), technical data (IP address, device/browser data, and log data), and cookie identifiers.

We also use cookies and similar technologies to recognize you and your devices. We also allow third-parties services to use cookies. How we use these technologies are described on the Cookies Policy page.

In certain situations, we may use the information collected from you in combination with the data we obtain from our sales and / or marketing teams regarding your interaction with the Company, which we may use in the context of our communications and marketing campaigns. We want to streamline our marketing by offering our customers relevant and personalized products / services. Also, if you agree, we may perform advanced analysis of your interests and preferences based on the information we hold about you from interaction with us, as well as by combining data obtained from third parties (e.g. through Google Analytics or Google Ads web browsing analysis technologies) to send you commercial communications tailored to your needs and preferences.

Sources of data include: (i) data you provide directly; (ii) data observed when you use the Site (e.g., logs, cookies); and (iii) data from third-party analytics and advertising providers, as described in the Cookies Policy.

2.1) PURPOSES AND LEGAL BASES
  • Contact and customer support (name, email, phone, message content). Legal basis: Art. 6(1)(f) GDPR - legitimate interest in responding to inquiries and managing relationships; or Art. 6(1)(b) when processing is necessary to take steps prior to a contract.
  • Service delivery and project discussions (contact details, project requirements). Legal basis: Art. 6(1)(b) GDPR - steps to enter into or perform a contract.
  • Marketing communications (contact details, preferences). We do not currently send marketing emails. If we do, legal basis: Art. 6(1)(a) GDPR - consent, where required by law.
  • Analytics and improvement (usage data, cookies). Legal basis: Art. 6(1)(a) GDPR - consent for non-essential cookies (e.g., Google Analytics/Ads).
  • Legal obligations (billing, accounting, compliance). Legal basis: Art. 6(1)(c) GDPR.
  • Security and defense of rights (logs, communications). Legal basis: Art. 6(1)(f) GDPR - legitimate interest to protect the Site and our rights.

User relationship management and support

We have the interest to offer adequate services through the Site to all people who access it. Therefore, we process a series of personal data for the purpose of managing relations with Site Users, for example when they contact us with various questions or requests regarding the functionalities of the Site, questions regarding the Company's services offered through the Site, etc. Legal basis: art. 6 (1) (f) GDPR - legitimate interest consisting in our interest to provide adequate services.

Analyzes and statistics regarding the functioning of the Site, cookies and similar technologies

We may use the personal data provided by Users or which we collect in the context of using the Services for the purpose of performing analyzes and statistics on our Services, including how the Site operates or the Services are provided. The analyzes and statistics we perform help us better understand how we may improve our Services or the functionality of the Site. In performing analyzes and statistics we also use cookies and other similar technologies in accordance with the Cookies Policy.

Fulfillment of legal obligations

Sometimes data processing is necessary to fulfill our legal obligations, such as:

  • payment of relevant taxes and contributions, reporting to the relevant tax authorities and keeping accounting records;
  • data archiving according to the applicable legislation;

Defending rights and interests in justice

For the establishment, exercise or defense of a right in court in a proceeding before a court, an administrative proceeding or other official proceedings in which the Company is involved.

3) TO WHOM DO WE DISCLOSE THE DATA?

We may disclose your personal data to (i) entities and / or persons authorized by us (in the EEA or in third countries) involved in the provision of the Services, including the provision of commercial communications (such as data center providers, service providers), payment for various payment facilities, e-mailing platform providers such as Google Mail or hosting service provider, organizing and conducting our contests / promotions (including when organized in partnership with other entities); (ii) if we have an obligation to disclose personal data for the purpose of complying with any legal obligation or decision of a judicial authority, public authority or governmental body; or (iii) if we are required or otherwise permitted to do so in accordance with applicable law.

Also, your personal data may be disclosed to third party providers of cookies and similar technologies as described on the Cookies Policy page.

Where we use processors, they act on our instructions and are bound by data processing agreements.

3.1) INTERNATIONAL TRANSFERS

We host our email server and Odoo (CRM/Sales/Projects) on our own infrastructure in the EEA. However, Google Analytics and Google Ads may process data outside the European Economic Area. In such cases, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses and assess the level of protection in the destination country.

4) HOW LONG DO WE KEEP THE DATA?

We keep your personal data only as long as necessary for the purposes for which it was collected, in compliance with internal procedures for data retention and applicable archiving rules. Typical retention periods are:

  • Contact inquiries and communications: up to 5 years from last interaction.
  • Prospect and customer records: for the duration of the relationship and up to 5 years after it ends.
  • Billing and accounting records: as required by applicable law (typically 10 years in Romania).
  • Analytics and cookie data: according to the retention periods stated in the Cookies Policy.
  • Security and access logs: up to 12 months, unless needed for incident investigation.
5) WHAT ARE YOUR RIGHTS?

As a data subject, you have the following rights:

  1. The right of access
    You can obtain confirmation from us that we process your personal data, as well as information on the specifics of the processing.
  2. The right to correct the data
    You can ask us to modify your incorrect personal data or, as the case may be, to fill in the data that are incomplete.
  3. The right to deletion
    You may request the deletion of personal data when: (i) they are no longer necessary for the purposes for which we collected and process them; (ii) you have withdrawn your consent for the processing of data and we can no longer process them on other legal grounds; (iii) the data are processed illegally; respectively (iv) the data must be deleted according to the relevant legislation.
  4. Withdrawal of consent
    You may at any time withdraw your consent to the processing of data on the basis of your consent. You may also object at any time to processing for marketing purposes, including profiling performed for this purpose, as well as processing based on the legitimate interest of the Company, for reasons related to your specific situation.
  5. The right to object to direct marketing
    You can object at any time to processing of your personal data for direct marketing purposes, including profiling to the extent it relates to such direct marketing.
  6. Restriction
    Under certain conditions you can request the restriction of the processing of your personal data.
  7. The right to data portability
    Insofar as we process the data by automatic means, you may request us, in accordance with the law, to provide your data in a structured form, frequently used and which can be read automatically. If you request this from us, we may pass on your data to another entity, if technically possible.
  8. The right to lodge a complaint with the supervisory authority

    You have the right to submit a complaint to the data processing supervisory authority if you consider that your rights have been violated:

    National Authority for the Supervision of Personal Data in Romania

    Address: B-dul G-ral. Gheorghe Magheru 28-30 Sector 1, postal code 010336 Bucharest, Romania
    Email: anspdcp@dataprotection.ro

FOR THE EXERCISE OF THE RIGHTS MENTIONED ABOVE, YOU CAN CONTACT US USING THE CONTACT DATA MENTIONED IN SECTION 1 (CONTACT DETAILS).

6) AUTOMATED DECISION-MAKING AND PROFILING

We may use limited profiling for marketing personalization as described above. This does not produce legal effects or similarly significant effects for you. You can object to this processing at any time.

7) IS PROVIDING DATA MANDATORY?

Providing your data is voluntary, but certain data is necessary to respond to your request or to take steps toward a contract. If you do not provide the required data, we may be unable to provide the requested services.