Legal
Privacy policy
How WEB CODEFIX SRL handles personal data collected through codefix.ro.
1. Data controller
The controller of the personal data collected through this site is WEB CODEFIX SRL, with its registered office at Str. Amilcar C. Săndulescu 6-10, 060859 Bucharest, Romania, registered with the Trade Register under no. J2026049703007, CUI 55422568 (hereinafter "Codefix", "we"). For any question about your personal data, write to david@codefix.ro.
2. What data we collect
This page covers contact forms and free audit requests on the website. For CODEFIX service introduction emails and opting out, see the CODEFIX email privacy notice (Romanian).
We collect only the data you send us voluntarily through the contact form or by email:
- name;
- email address;
- phone number (required for the free audit request, for questions about that request; optional for general contact);
- your website address (required in audit request forms) and the services you are interested in;
- the content of the message and the information you choose to include in it (for example, the e-commerce platform you use).
- for audit requests: acceptance of the terms, its date, the terms version, the form used and its language.
To protect the form against abuse, we use a technical identifier derived from the IP address to limit automated requests. Requests are sent to david@codefix.ro through the hosting email service; a technical receipt is stored separately, outside the public website directory.
We do not ask for, and we ask you not to send us, special categories of data (medical data, data on religious or political beliefs, and so on).
3. Purpose of processing
We use the data you send us exclusively to:
- answer your request and prepare and send the requested PDF audit; the phone number may be used for questions about that same request;
- carry on the correspondence related to that request (clarifications, a quote, discussions about the project).
We do not use the data to send you unsolicited commercial communications and we do not sell it to third parties.
4. Legal basis
Processing rests on:
- art. 6(1)(b) GDPR: steps taken at your request before entering into a contract (the answer to a request for a quote or a collaboration);
- art. 6(1)(f) GDPR: our legitimate interest in answering the messages we receive and keeping a record of the correspondence.
5. Retention
We keep the messages received and the related correspondence for as long as needed to handle the request and any resulting collaboration. Correspondence that does not lead to a collaboration is kept for at most 12 months, after which the data is deleted.
Technical form records older than 90 days are removed when requests are processed. Accepting the audit terms does not opt you into a newsletter or other marketing campaigns.
6. Your rights
As a data subject you have the following rights:
- the right of access: to learn what data we process about you;
- the right to rectification: to ask for inaccurate data to be corrected;
- the right to erasure: to ask for the data to be deleted, under the conditions of the law;
- the right to restriction of processing;
- the right to data portability;
- the right to object: to object to processing based on legitimate interest.
To exercise any of these rights, write to david@codefix.ro. If you consider that your rights have been infringed, you can lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP), www.dataprotection.ro.
7. Who the data may be transferred to
Your data may be accessed, strictly to the extent needed for the site and the correspondence to work, by:
- our hosting provider;
- the email service provider through which we receive and send messages.
These providers process the data on our behalf under contractual confidentiality and security obligations. We do not transfer your data to third parties for marketing purposes.
8. Contact for personal data
For any question, request or complaint about the processing of your personal data, write to david@codefix.ro. We will review and answer your request within the deadlines set by the GDPR.
