Privacy Policy

WOLF CYPHER CONSULTING SRL, CUI 48067234, registered with the Trade Register under no. J2023007981400 (EUID ROONRC.J2023007981400), with its registered office at [REGISTERED OFFICE ADDRESS]. We are the data controller for the personal data described in this policy.

For anything related to your data, write to [email protected]. We are a small company and are not required to appoint a Data Protection Officer, so your message reaches the people responsible directly.

We process personal data in line with Regulation (EU) 2016/679 (the General Data Protection Regulation, GDPR), Romanian Law no. 190/2018 implementing it, and Law no. 506/2004 on privacy in electronic communications.

• Contact form: your name, email address, company (optional), the topic and engagement model you select, your message, and a record of your consent.
• Newsletter: your email address, your language, and the dates you signed up and confirmed, if you subscribe to our new articles and product news.
• Direct email: whatever you include when you write to us.
• Technical data: IP address, browser and device type, pages requested and the time of the request, recorded in server logs by our hosting provider so the site can run securely.
• Language preference: saved in your own browser only. It is not sent to us.

We do not ask for special categories of data (for example health, religion or political views). Please do not include them in your messages.

• To reply to your enquiry and, if you wish, prepare a proposal: steps taken at your request before a contract (GDPR Art. 6(1)(b)) and your consent (Art. 6(1)(a)).
• To send you the newsletter (new articles and product news): your consent (Art. 6(1)(a)), given by confirming your subscription in the email we send you, which you can withdraw at any time by unsubscribing.
• To keep the website secure and working, including preventing spam and abuse: our legitimate interest (Art. 6(1)(f)).
• To meet legal duties, such as accounting and tax records if you become a client: legal obligation (Art. 6(1)(c)).

We do not sell personal data, do not use it to build advertising profiles, and do not make automated decisions that have legal or similarly significant effects on you.

• Enquiries that do not lead to a contract: up to [24 months] after our last exchange, then deleted.
• Newsletter list: until you unsubscribe, when we delete your address. Sign-ups that are never confirmed are deleted after 7 days.
• Server logs: up to [30 days], unless needed longer to investigate a security incident.
• Contract, billing and accounting records: for the periods required by Romanian accounting and tax law.

When a period ends, we delete the data or anonymise it so it can no longer identify you.

We share data only with providers that help us run the website and our email, and only as far as they need it. Each is bound by a contract that requires them to protect it:

• Website hosting: [HOSTING PROVIDER], Romania.
• Email: [EMAIL PROVIDER].
• Analytics: [NONE / NAME OF COOKIE-FREE ANALYTICS TOOL].

We may also disclose data to public authorities when the law requires it. We aim to keep all data within the European Economic Area. If a provider ever processes it elsewhere, we rely on an adequacy decision or the European Commission Standard Contractual Clauses.

The site is served over HTTPS. Form submissions are sent straight to our mailbox and are not stored in a public database. The newsletter list is kept on our own server, not with a third-party mailing service, and every newsletter email contains an unsubscribe link. Access to messages is limited to the people who need it, and the contact form is protected against automated spam.

Under the GDPR you have the right to:

• access the data we hold about you;
• have inaccurate data corrected;
• have your data deleted;
• restrict how we use it;
• receive it in a portable format;
• object to processing based on our legitimate interest;
• withdraw your consent at any time, without affecting what we did before.

To use any of these rights, email [email protected]. It is free. We reply within one month, which the GDPR allows us to extend by two further months for complex requests; we will tell you if that happens.

If you think we have not handled your data properly, please tell us first so we can fix it. You also have the right to complain to the Romanian data protection authority, ANSPDCP (Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal), B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, Bucharest, www.dataprotection.ro.

If we change how we handle personal data, we will update this page and the date at the top. Significant changes will be highlighted on the website.