Privacy Policy

1. Data controller

Controller: AVI KAIROS S.R.L., registered office at Strada Lungă 188, Corp C2, Etaj Parter, Ap. 2, Brașov 500051, România, VAT/CUI 52477194, J2025068492002, EUID ROONRC.J2025068492002. Contact email: [email protected].

2. What data we collect

Data provided through the contact form: first name, last name, email address, phone (optional), service of interest and the message content.

Strictly necessary technical data for the operation and security of the site (e.g. IP address, server logs, anti-abuse measures provided by Cloudflare).

3. Purposes and legal basis

Responding to enquiries and communicating with you — basis: pre-contractual steps and/or your consent (Art. 6(1)(a)/(b) GDPR).

Security and proper functioning of the site — basis: legitimate interest (Art. 6(1)(f) GDPR).

4. Cookies and analytics

This site does NOT use marketing or tracking cookies and does NOT build profiles. Only strictly necessary cookies may exist (e.g. Cloudflare security), which are exempt from consent.

Traffic statistics are collected via Cloudflare Web Analytics, a cookieless, aggregated and anonymous solution. For this reason no cookie banner is required.

5. Data sharing

We do not sell your data. We may share it only with providers acting as processors: the email/SMTP provider (to deliver messages), the hosting provider and Cloudflare (CDN/security).

Where a provider processes data outside the EEA, we ensure appropriate safeguards are in place (e.g. Standard Contractual Clauses).

6. Data retention

Messages received via the form are kept for as long as needed to reply and manage the relationship, generally up to 24 months, after which they are deleted, unless the law requires otherwise.

7. Your rights (GDPR)

You have the right to access, rectification, erasure, restriction, portability, objection, and to withdraw consent at any time. To exercise your rights, write to [email protected].

8. Security

We apply appropriate technical and organisational measures (HTTPS, restricted access, secure hosting) to protect data against unauthorised access, loss or disclosure.

9. Minors

The site is not directed at children under 16 and we do not knowingly collect their data.

10. Changes

We may update this policy. The version in force is the one published on this page, with the last-updated date.

11. Complaints

You have the right to lodge a complaint with a supervisory authority — in Romania, ANSPDCP (www.dataprotection.ro).