Your privacy is important to us. This policy explains what personal data we collect through this site, for what purposes we use it, on what legal basis, with whom we share it and what your rights are, in accordance with Regulation (EU) 2016/679 (GDPR) and Romanian Law no. 190/2018.
1. Data controller
The controller that determines the purposes and means of processing your data is:
- Name: Marael Technology SRL
- Registered office: [Street, number, city, county, postal code, Romania]
- CUI: [RO00000000] · Reg. Com.: [J00/0000/0000]
- Email: contact@marael.ro
2. What data we collect
This site does not contain an online form and does not require you to create an account. The data we process is limited to:
- Contact details provided voluntarily: when you email or call us, we may process your name, email address, phone number and the content of your message (including the project details you share with us).
- Technical and log data: the hosting server may automatically record the IP address, browser type, operating system, date and time of access and pages visited — data necessary for the operation and security of the site.
- Cookies and similar technologies: according to your consent choices — see Cookie Policy.
We do not intentionally collect special categories of data (sensitive data) through this site. Please do not send us such data in your messages.
3. Purposes and legal basis of processing
- To respond to your enquiries — and to take steps prior to entering into a possible contract (Art. 6(1)(b) GDPR).
- For the security and proper functioning of the site — based on our legitimate interest in preventing abuse and attacks (Art. 6(1)(f) GDPR).
- For cookies and non-essential external content — solely on the basis of your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.
- To comply with legal obligations — for example, accounting and tax obligations, if you become a client (Art. 6(1)(c) GDPR).
4. Who has access to the data (recipients and processors)
We do not sell or rent your data. We may disclose it only to service providers acting as processors, under GDPR-compliant contracts, including:
- The web hosting provider — on whose servers the site and its logs are stored.
- The email service provider — through which we receive and manage correspondence with you.
- External content providers — such as Google (Google Fonts) and image providers, which may receive your IP address when the resources load in your browser.
We may also disclose data to public authorities where required by law.
5. Transfers outside the European Economic Area
Some providers (for example, Google) may process data on servers located outside the EEA, including in the United States. In these cases, the transfer is protected by appropriate safeguards, such as the European Commission’s Standard Contractual Clauses and/or the EU–U.S. Data Privacy Framework.
6. How long we keep the data
- Correspondence and enquiries: for as long as needed to handle the request and, thereafter, for as long as a legitimate interest (for example, a potential collaboration) justifies it, generally no more than 2 years from the last contact.
- Server technical logs: for a short period, generally up to a few months.
- Contractual and tax documents (for clients): for the period required by tax and accounting law.
7. Data security
We apply appropriate technical and organisational measures to protect data against unauthorised access, loss or destruction — including HTTPS traffic encryption, access control and the data minimisation principle.
8. Your rights
You have all the rights provided by the GDPR: access, rectification, erasure, restriction, portability, objection and withdrawal of consent. The detailed way in which you can exercise them is described on the dedicated Data Protection (GDPR) page.
9. Protection of minors
Our site and services are aimed at professionals and businesses, not children. We do not knowingly collect data from persons under 16.
10. Changes to this policy
We may update this policy periodically to reflect legislative or operational changes. The updated version is published on this page, with the date of the last update shown above.
11. Contact and supervisory authority
For any question regarding the processing of your data, you can contact us at contact@marael.ro.
You also have the right to lodge a complaint with the supervisory authority:
- National Supervisory Authority for Personal Data Processing (ANSPDCP)
- 28-30 Gheorghe Magheru Blvd., District 1, postal code 010336, Bucharest, Romania
- anspdcp@dataprotection.ro · https://www.dataprotection.ro