1. Data controller
The data controller is SAM CONSULTING SRL, CUI 47669177, registered at Sat Șag, Str. XI no. 115, room 2, Timiș County, 307395, Romania. Contact: mirela@sam-consulting.ro or +40 737 243 660.
2. Data we may process
- contact and identification data you provide, such as name, company, role, telephone number and email address;
- the content of messages and information you choose to provide by email, telephone or WhatsApp;
- technical data necessary for website operation and security, such as IP address, device/browser information and access logs generated by hosting/CDN infrastructure;
- your cookie/analytics preference stored locally in the browser;
- after Google Analytics is enabled and only with your consent, statistical data about website use.
3. Purposes and lawful bases
- responding to enquiries and preparing a possible engagement: pre-contractual steps or contract performance, Article 6(1)(b) GDPR;
- professional communication and business relationship management: legitimate interests, Article 6(1)(f) GDPR;
- website security, operation and abuse prevention: legitimate interests, Article 6(1)(f) GDPR;
- compliance with legal, tax or record-keeping obligations: Article 6(1)(c) GDPR;
- statistical measurement through Google Analytics: consent, Article 6(1)(a) GDPR.
4. Recipients
Data may be accessed by providers supporting website operation and communications where necessary for their services. The website is delivered using Cloudflare infrastructure. If you choose to contact us via WhatsApp, your data is also processed by that service provider under its own policies. Once enabled, Google Analytics will process statistical data only after Analytics consent.
Data may also be disclosed to professional advisers or public authorities where legally required or necessary to establish, exercise or defend legal rights.
5. International transfers
Some technology providers may process data outside the European Economic Area. Where this occurs, transfers must rely on mechanisms recognised by the GDPR, such as an adequacy decision or standard contractual clauses, as applicable. Relevant providers describe the mechanisms used for their services in their own policies.
6. Retention
We retain data only for as long as necessary for the purpose for which it was collected. Business enquiries and correspondence are retained as needed to manage the relationship and, where relevant, for periods required to protect legal rights or comply with legal obligations. Technical logs are retained according to the operational periods of infrastructure providers. Consent preferences remain in the browser until changed, deleted or the consent mechanism version changes.
7. Your rights
- access to your personal data;
- rectification of inaccurate data;
- erasure where the GDPR conditions are met;
- restriction of processing;
- data portability where applicable;
- objection to processing based on legitimate interests;
- withdrawal of consent at any time for consent-based processing, without affecting prior lawful processing;
- the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP).
8. Automated decisions
We do not use data collected through this website for solely automated decision-making that produces legal or similarly significant effects concerning you.
9. Security
We use reasonable technical and organisational measures to protect data and the website, including HTTPS transport, browser security policies and hosting/CDN security services. No technical method can guarantee the absolute elimination of all risks.
10. Requests and complaints
For privacy questions or to exercise your rights, contact mirela@sam-consulting.ro. You may also lodge a complaint with ANSPDCP, B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, Bucharest, Romania, www.dataprotection.ro.