Privacy policy

For any question regarding the processing of your data, or to exercise the rights described below, you may contact us:

• by email, at office@webaz.ro;
• by telephone, on +40 736 469 828;
• by post or courier, at the registered office: LIDER COLECT SRL, Str. Calea Dobrogei nr. 238 DN, Murfatlar 905100, Constanța County, Romania;
• via the contact form available at https://webaz.ro/en/contact.

a) Data submitted through the contact form: name, email address, company name (optional), address of your existing website (optional), project type, a description of the problem you wish to solve, additional details (optional), indicative budget (optional) and desired timeframe (optional), as well as your confirmation that you have read this policy.

b) Data submitted together with the result of the AI assessment: name, email address, company name (optional) and the answers given in the assessment, together with the result generated from them. The assessment runs entirely in your browser; your answers reach us only if you choose to send them.

c) Technical data: IP address, browser type and version, operating system, the page accessed, the date and time of access and the server response code, recorded automatically in the hosting provider's logs, as well as temporary information used to protect the forms against abuse.

d) Data from subsequent correspondence: the information you share with us in the discussions held in connection with your request.

e) Data entered in the free tools (Tools → “Check your website”, “Check a company”): the website address or the company tax ID (CUI) you choose to check. This information is sent to the public services that produce the result and kept temporarily (at most 24 hours) in the server's memory, only to avoid repeating the same check; we do not link it to your identity.

Please do not send us special categories of data (for example, health data) through the form, or data of other persons unless you are entitled to do so. If you send us the data of a colleague or another contact person, please inform them of this policy.

We process your data only for specified purposes, on the following legal bases:

• reviewing your request, communicating with you and preparing a quote — taking steps at your request prior to entering into a contract (Article 6(1)(b) GDPR);
• follow-up messages strictly related to the request submitted and keeping a record of correspondence — our legitimate interest in responding to the requests we receive and in being able to evidence the communications exchanged (Article 6(1)(f) GDPR);
• website security and protection of the forms against automated messages and abuse (verification token, limiting the number of submissions, technical logs) — our legitimate interest in ensuring the safe operation of the website (Article 6(1)(f) GDPR);
• compliance with legal obligations, including accounting and tax obligations, where the request results in a contract — legal obligation (Article 6(1)(c) GDPR);
• the establishment, exercise or defence of legal claims — our legitimate interest (Article 6(1)(f) GDPR).

Providing the data is voluntary. The fields marked as mandatory in the form (name, email address, project type, description of the problem) are necessary for us to be able to reply to you; without them, we cannot act on your request. The optional fields help us better understand your needs, but leaving them blank does not prevent you from contacting us.

We do not use the data submitted through the forms for marketing purposes, we do not subscribe you to newsletters and we do not sell or rent out personal data.

We do not take decisions based solely on automated processing, including profiling, which produce legal effects concerning you or similarly affect you. The result of the AI assessment is indicative only and is reviewed by our team before any proposal is made.

Your data may be disclosed, to the extent necessary for the purposes above, to the following categories of recipients:

• service providers acting as processors on behalf of the controller, under contracts that require them to keep the data confidential and secure: the website hosting provider, the provider of the delivery service for messages submitted through the form (transactional email) and the providers of the email and storage services used internally;
• professional advisers (for example, accountants or lawyers), who are bound by a duty of confidentiality;
• public authorities and institutions, where we are under a legal obligation to disclose data to them or for the defence of our rights;
• for the free tools, the public services that produce the displayed result: Google PageSpeed Insights (Google Ireland Ltd.), Mozilla Observatory (Mozilla Corporation), W3C Nu Html Checker (W3C), Internet Archive and ANAF (the Romanian tax authority). They receive only the website address or the CUI entered, not data about you.

Some of our technical service providers may process data outside the European Economic Area (EEA). In such cases, the transfer takes place only in compliance with Chapter V of the GDPR: on the basis of an adequacy decision of the European Commission (including the EU–US Data Privacy Framework, for certified providers) or, in the absence thereof, on the basis of the standard contractual clauses adopted by the European Commission, supplemented, where appropriate, by additional safeguards. On request, we can provide you with information about the applicable safeguards.

We keep the data only for as long as is necessary for the purposes for which they were collected or as required by law:

• data from requests that do not result in a contract: no more than 12 months from the last communication, after which they are deleted;
• data from requests that result in a contract: for the duration of the contractual relationship and thereafter for the general limitation period of 3 years, for the defence of the parties' rights;
• accounting documents: for the period laid down by Accounting Law no. 82/1991 and by tax legislation;
• the server's technical logs: as a rule, no more than 30 days, except where they are needed to investigate a security incident;
• information used to limit the number of form submissions: no more than one hour, only in the server's temporary memory, without being archived.

Under the conditions laid down by the GDPR, you have the following rights:

• the right of access — you may obtain confirmation that we process your data and a copy of them (Article 15 GDPR);
• the right to rectification — you may ask for inaccurate data to be corrected or incomplete data to be completed (Article 16 GDPR);
• the right to erasure — you may ask for your data to be erased, in the cases provided for in Article 17 GDPR;
• the right to restriction of processing, in the cases provided for in Article 18 GDPR;
• the right to data portability in respect of the data you have provided to us, processed on the basis of a contract or pre-contractual steps, by automated means (Article 20 GDPR);
• the right to object — you may object at any time, on grounds relating to your particular situation, to processing based on our legitimate interest (Article 21 GDPR);
• the right not to be subject to a decision based solely on automated processing (Article 22 GDPR);
• the right to lodge a complaint with the supervisory authority.

You may send us your request through any of the contact methods set out in section 2. We will reply without undue delay and in any event within one month of receipt of the request; this period may be extended by a further two months, taking into account the complexity and number of requests, in which case we will inform you. Exercising your rights is free of charge; for manifestly unfounded or excessive requests we may charge a reasonable fee or refuse to act on the request, under the conditions of Article 12 GDPR.

To protect your data, we may ask you for additional information that allows us to confirm your identity.

If you consider that the processing of your data infringes the law, you may contact the National Supervisory Authority for Personal Data Processing (ANSPDCP, the Romanian data protection authority), B-dul G-ral. Gheorghe Magheru nr. 28-30, sector 1, Bucharest, www.dataprotection.ro, or the competent courts. We encourage you to contact us first, so that we can resolve the matter together.

We apply appropriate technical and organisational measures to protect data against unauthorised access, loss or alteration: transmission of data over encrypted connections (HTTPS), validation and filtering of the data received, protection of the forms against automated submissions, browser-level security policies and restriction of access to the data to the people who need it in order to reply to you. However, no method of electronic transmission or storage is completely secure; in the event of a personal data breach, we will act in accordance with the obligations laid down in Articles 33 and 34 GDPR.

The website and our services are aimed at companies and professionals and are not intended for persons under the age of 16. We do not knowingly collect data from minors; if you become aware that a minor has sent us data, please contact us so that we can delete it.

The website does not use analytics or advertising cookies. The information stored in your browser that is strictly necessary for the website to function is described in the Cookie policy.

The website contains links to third-party websites (for example, portfolio projects or public authorities). This policy does not apply to those websites; please consult the privacy policies of their respective operators.

We may update this policy to reflect changes to the website, to our services or to the law. The version in force is always the one published on this page, and the date of the last update is shown at the top of the document. In the event of significant changes, we will make this known on the website.