Privacy policy

The data controller is cTudis, based in Alba Iulia, Alba county, Romania.

For any question about your personal data, write to contact@ctudis.com or call +40 748 597 779.

Data you give us directly: your name, email address, company name, project type, estimated budget and the content of your message, when you fill in the contact form.

Technical data collected automatically: anonymised IP address, browser and device type, pages visited and traffic source — only if you accepted analytics cookies.

We do not collect special categories of data (health, political or religious beliefs, biometric data) and we never ask for card details or passwords through this website.

To answer your request and prepare a quote — the basis is performance of a contract or pre-contractual steps at your request (Art. 6(1)(b) GDPR).

To understand how the site is used and improve it — the basis is your consent, given by accepting analytics cookies (Art. 6(1)(a) GDPR).

To defend our rights in a dispute and comply with legal retention obligations — the basis is legitimate interest and legal obligation respectively (Art. 6(1)(f) and (c) GDPR).

Messages received through the contact form are kept for a maximum of 24 months from the last interaction, if no contract follows.

If you become a client, contract-related data is kept for the duration of the collaboration and afterwards according to legal retention periods (generally 10 years for accounting documents).

Aggregated statistical data that cannot identify you may be kept indefinitely.

We do not sell or rent personal data to anyone.

We use providers that process data on our behalf under contract: website hosting, the service that delivers emails generated by the form and, if you accepted, the traffic analytics tool.

We may disclose data to public authorities only where the law requires it.

Some of our providers may process data outside the European Economic Area. In those cases the transfer relies on Standard Contractual Clauses approved by the European Commission or on an adequacy decision.

You have the right of access, rectification, erasure (“right to be forgotten”), restriction of processing, objection and data portability.

Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing before withdrawal.

You can exercise any right by writing to contact@ctudis.com. We reply within 30 days at the latest.

If you are not satisfied with our answer, you may contact the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP), 28-30 G-ral. Gheorghe Magheru Blvd., Bucharest, www.dataprotection.ro.

Strictly necessary cookies make the site work and cannot be disabled. They do not identify you personally.

Analytics cookies show us, in aggregate form, which pages are useful and where visitors drop off. They are only activated if you accept them in the banner shown on your first visit.

You can change your choice at any time by clearing site data in your browser or by contacting us directly.

The site is served exclusively over HTTPS. Access to received messages is limited to the people who need them to answer your request.

No system is perfectly secure, but we apply technical and organisational measures proportionate to the risk.

If we change this policy, we update the date at the top of the page. We encourage you to re-read it periodically.