Privacy Policy
1. Introduction
SC MINDSOFT IT SOLUTIONS SRL respects your privacy and is committed to protecting the personal data of users of www.mindsoft.ro (the “website”).
This Privacy Policy describes how we collect, use, store, share and protect your personal data, in accordance with Regulation (EU) 2016/679 (GDPR) and applicable national data protection law.
www.mindsoft.ro is a company presentation website and does not sell products online.
2. Data controller
Company name: SC MINDSOFT IT SOLUTIONS SRL
Registered office: Piața Unirii Nr. 4, Sibiu 550173, Romania
VAT ID: RO43164376 · Trade Register No.: J2020001342323
Email: contact@mindsoft.ro · Phone: +40 269 220 426
For any request concerning personal data, please contact us using the details above.
3. What data we collect
We may collect the following categories of personal data, in particular when you fill in a form on the website or contact us directly:
first and last name
email address
phone number
the institution or company you represent
data collected automatically through cookies and similar technologies (see the Cookie Policy), e.g. IP address, browser type, pages visited
other information you provide voluntarily in forms (e.g. your contact form message, or a CV submitted for a job application)
We do not collect special categories of data (Art. 9 GDPR, e.g. health data, ethnic origin, political opinions) and we do not request such information through the website’s forms.
4. Source of data
Personal data is collected directly from you when you contact us through the website’s forms, by email or by phone, or when you browse the website (data collected automatically through cookies).
5. Purposes and legal basis for processing
Personal data is collected and used for the purposes and on the legal bases set out below:
Responding to requests submitted through contact forms
Legitimate interest / steps prior to entering into a contract (Art. 6(1)(b) and (f) GDPR)
Communicating information about products and services (marketing)
Consent (Art. 6(1)(a) GDPR)
Traffic analysis and user experience improvement (statistics/marketing cookies)
Consent, in accordance with the Cookie Policy (Art. 6(1)(a) GDPR)
Compliance with legal obligations (e.g. accounting, tax, archiving)
Legal obligation (Art. 6(1)(c) GDPR)
Website security and prevention of misuse
Legitimate interest (Art. 6(1)(f) GDPR)
Where processing is based on consent, you have the right to withdraw your consent at any time, without affecting the lawfulness of processing carried out before withdrawal.
6. Recipients of data
Your data is not sold to third parties. We may share it only with:
traffic analysis and marketing service providers (e.g. Google Analytics, Meta/Facebook Pixel), in accordance with the Cookie Policy
public authorities, where required by law (e.g. tax authorities, judicial bodies)
Data may be used internally for marketing, website security, administrative management and recording consents given (Terms and Conditions, Cookie Policy).
All third-party providers that process data on our behalf are contractually bound to maintain data confidentiality and security, as required by GDPR.
7. Transfers outside the EU/EEA
Where some of the providers listed in section 6 (e.g. Google, Meta) transfer data to servers outside the European Economic Area, including the United States, these transfers are based on the legal mechanisms provided by GDPR, such as Standard Contractual Clauses approved by the European Commission or applicable adequacy decisions. [to be completed – specific details about the providers carrying out such transfers, if applicable]
8. Retention period
Data is kept only for as long as necessary for the purposes for which it was collected, or as required by law, as shown below:
Data collected through the contact form
[to be completed, e.g. 2 years after the last interaction, if no contract results]
Data collected for marketing (newsletter)
Until consent is withdrawn / you unsubscribe
Data collected through cookies
As stated in the Cookie Policy
Supporting documents subject to legal obligations (invoicing, accounting)
As required by applicable law (usually 5–10 years)
9. Automated decision-making and profiling
We do not use automated decision-making or profiling that produces legal effects concerning you or similarly significantly affects you.
10. Your rights
Under GDPR, you have the following rights regarding your personal data:
the right of access;
the right to rectification of inaccurate data;
the right to erasure (“right to be forgotten”), as provided by law;
the right to restriction of processing;
the right to data portability;
the right to object to processing, in particular for direct marketing;
the right to withdraw consent at any time, where processing is based on consent;
the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP), B-dul G-ral. Gheorghe Magheru nr. 28-30, Sector 1, Bucharest, or by email at anspdcp@dataprotection.ro.
You can refuse processing for marketing communications or for analysis aimed at personalised advertising by changing your cookie settings or by emailing contact@mindsoft.ro.
We will respond to requests to exercise these rights within the period set by applicable law (usually within one month of receipt, which may be extended by two further months where necessary, taking into account the complexity and number of requests).
11. Data security
We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss, destruction or accidental disclosure, in proportion to the risks of processing.
12. Cookies
The website uses cookies and similar technologies. Full details of the types of cookies used, their purpose and how to manage your preferences are available in the Cookie Policy, accessible from the website footer.
13. Protection of minors
The website is not intended for minors and does not knowingly collect personal data from persons under 16. If you believe a minor has provided us with personal data, please contact us so that we can take appropriate action.
14. Changes to this policy
This policy may be updated periodically to reflect changes in legislation or in our data processing practices. The current version is always available on the website, with the date of the last update shown at the top of the document.
15. Contact
For questions about this Privacy Policy or to exercise your rights, please contact us at contact@mindsoft.ro or by phone at +40 269 220 426.
