Privacy Policy

1. Data controller

The controller of personal data, within the meaning of Article 4(7) of Regulation (EU) 2016/679 ("GDPR"), is TEBA TECH S.R.L., a company incorporated under Romanian law, with registered office at Strada Țepeș Vodă, No. 73BIS, Room 1, Sector 2, Bucharest, Romania, Tax ID (CUI) 54671323, Trade Registry no. J2026031135007, reachable at contact@tebatech.co or by phone at 0786 494 642. Given the scale and nature of the processing carried out, the Controller is not required to appoint a data protection officer (DPO) under Article 37 GDPR; data protection requests can be addressed directly to the contact details above.

2. What data we collect

We collect personal data exclusively through the means described below — we do not purchase or obtain data from other sources.

  • Data you provide directly, through the contact form: first name, last name, email address, phone number (optional), company name (optional) and the content of your message (optional).
  • Technical data collected automatically: IP address, browser type and version, operating system, pages visited and visit duration — collected through cookies and similar technologies, described in detail in the Cookie Policy, only to the extent permitted by your consent preferences.
  • Data collected via the Google reCAPTCHA service, used to prevent automated (spam) messages submitted through the contact form. This service may collect technical data about your device and browsing behavior, in accordance with Google's privacy policy.

We do not collect special categories of data (Article 9 GDPR — health data, political opinions, religion, etc.) and we do not request such information through the contact form.

3. Purposes of processing

  • Receiving and managing requests submitted through the contact form and providing a response / a quote;
  • Preventing abusive or automated use of the contact form (anti-spam protection, via Google reCAPTCHA);
  • Ensuring the technical operation, security and improvement of the Website;
  • Carrying out statistical analyses of traffic (Google Analytics), only where you have given consent for the "Analytics" category in the cookie banner;
  • Personalizing marketing communications, only where you have given consent for the "Marketing" category in the cookie banner;
  • Fulfilling legal obligations (for example, accounting obligations, if a service agreement is concluded).

4. Legal basis for processing

  • Taking steps at your request prior to entering into a contract (Article 6(1)(b) GDPR) — for processing requests submitted through the contact form;
  • Your consent (Article 6(1)(a) GDPR) — for analytics, marketing and preference cookies, which can be withdrawn at any time from the cookie preferences;
  • The Controller's legitimate interest (Article 6(1)(f) GDPR) — for ensuring the Website's security and preventing abuse (including via reCAPTCHA), without disproportionately affecting your rights;
  • Legal obligation (Article 6(1)(c) GDPR) — where processing is necessary to comply with legal obligations (for example, accounting or tax obligations).

5. Who we share data with (recipients)

Your data may be shared, only to the extent necessary for the purposes described above, with:

  • hosting and technical infrastructure providers for the Website;
  • Web3Forms — the third-party service used to process the contact form and deliver it as an email to contact@tebatech.co; the data submitted through the form (name, surname, email, phone, message) transits through this provider's infrastructure, in accordance with Web3Forms' privacy policy;
  • Google Workspace — messages submitted through the contact form, delivered to contact@tebatech.co, are stored in the mailbox hosted on Google Workspace infrastructure, in accordance with Google's privacy policy;
  • Google LLC — for the operation of the reCAPTCHA service and, only with your consent for the "Analytics" category, for the Google Analytics 4 service, used for statistical traffic analysis;
  • public authorities, where required by law.

We do not sell or rent your personal data to third parties for their own marketing purposes.

6. International data transfers

Some of the providers mentioned in Article 5 (in particular Google LLC) may process data outside the European Economic Area (EEA), including in the United States. Such transfers are carried out under adequate safeguards recognized by the GDPR — standard contractual clauses approved by the European Commission or other equivalent mechanisms — in accordance with the policies published by the respective providers.

7. Retention period

  • Data submitted through the contact form is kept for as long as necessary to handle your request and, if a contractual collaboration results, for the duration of that collaboration and afterwards, in accordance with the archiving periods set out in accounting and tax legislation (typically up to 10 years for financial documents);
  • if the request does not result in a collaboration, the data is kept for a maximum of 24 months from the last contact, after which it is deleted or anonymized;
  • cookie preferences are stored locally, in your browser, until you change or delete them;
  • data generated by third-party cookies (e.g. Google reCAPTCHA, Google Analytics) is kept for the periods indicated in the Cookie Policy.

8. Data security

We apply reasonable technical and organizational measures to protect personal data against unauthorized access, loss, destruction or accidental disclosure, including: transmitting data over secure connections (HTTPS), limiting access to data to staff and providers who need it to perform their tasks, and validating/sanitizing data submitted through forms.

9. Your rights as a data subject

Under Articles 15–22 GDPR, you have the following rights regarding your personal data:

  • Right of access — to find out whether we process your data and to obtain a copy of it;
  • Right to rectification — to correct inaccurate or incomplete data;
  • Right to erasure ("right to be forgotten") — to request deletion of your data, under the conditions set out by law;
  • Right to restriction of processing — in certain situations set out by the GDPR;
  • Right to data portability — to receive your data in a structured, commonly used format, or to have it transferred to another controller;
  • Right to object — to processing based on legitimate interest or for direct marketing purposes;
  • Right to withdraw your consent — at any time, without affecting the lawfulness of processing carried out before withdrawal;
  • Right to lodge a complaint with the supervisory authority.

To exercise any of these rights, you can contact us at contact@tebatech.co. We will respond to your request within one month at the latest, in accordance with Article 12(3) GDPR.

10. Supervisory authority

If you believe that the processing of your data breaches applicable law, you have the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP): B-dul G-ral. Gheorghe Magheru nr. 28-30, Sector 1, Bucharest, Romania, website www.dataprotection.ro, email anspdcp@dataprotection.ro. As TEBA TECH S.R.L. is established in Romania, ANSPDCP is the competent lead supervisory authority; if you reside in another EU/EEA member state, you also retain the right to lodge a complaint with your own national data protection authority.

11. Children

The Website and the services presented are addressed to persons with full legal capacity (over 18 years of age) or to representatives of legal entities. We do not knowingly collect data from minors. If you become aware of such a situation, please contact us so that we can take the necessary measures.

12. Updates to this policy

This policy may be updated periodically, to reflect legislative changes or changes in how data is processed. We recommend checking this page periodically; the date of the last update is shown at the end of the document.

Last updated: .