Privacy policy
Last updated: 9 August 2026
This notice explains what personal data we collect, why we collect it, how long we keep it, and what you can ask us to do about it. It is written to be read, not to be skimmed past.
1Who we are
Fines Software Consulting SRL is the controller of the personal data described in this notice. That means we decide why and how it is used.
- Company: Fines Software Consulting SRL
- Registration (CUI): RO45479400
- Trade Register: J2022000605405
- Registered address: Spl. Independenței 313B, Sector 6, București, Romania
- Email: contact@fines-software-consulting.ro
We are not required to appoint a Data Protection Officer, so privacy questions go to the address above and are handled by us directly.
2What we collect
When you browse this site
Our hosting provider records standard technical information for every request — IP address, approximate location derived from it, browser and device type, the page requested, and the time. We do not use advertising or tracking software, and we do not build profiles of visitors. If you accept in the consent banner, we use Google Analytics 4 (Google Ireland Ltd.) to see which pages are read; the legal basis is your consent (Art. 6(1)(a)), nothing loads before you give it, and you can withdraw it at any time as described in the cookie policy.
When you email us
Your name, email address, and whatever you choose to write. Mail is stored on our mail provider's servers.
When you complete the website builder form
The form is how we gather what we need to design a website for your business. Depending on what you fill in, it may include: your business name and description, services and prices, opening hours, address and service area, contact details for the business, your own name, email address, and phone number, and any files you upload — logos, photographs of your premises, products, team, and price lists.
Photographs of identifiable people are personal data about those people. Only upload images you have the right to use and, where a person is recognisable, that they are happy to see published on a website.
We also record technical signals used purely to stop automated abuse: a one-time anonymous identifier that scopes your uploads, a reCAPTCHA assessment, your IP address, and how long the form took to complete.
When we contact you first
We approach businesses that appear to have no website, using contact details they have published themselves — on public business listings, directories, or their own social media. For each business we may hold its name, address, phone number, published email address, and a note of what we sent and when.
3Why we use it, and our legal basis
| What we do | Legal basis (GDPR Art. 6) |
|---|---|
| Reply to your enquiry and discuss a possible project | Steps taken at your request before entering a contract — Art. 6(1)(b) |
| Design, build, and deliver a website you have commissioned | Performance of our contract with you — Art. 6(1)(b) |
| Send a first message (email or WhatsApp) offering our services to a business | Our legitimate interest in finding customers for a business-to-business service — Art. 6(1)(f). You can object at any time and we will stop. |
| Keep the site and the form secure, and block spam and abuse | Our legitimate interest in protecting our systems — Art. 6(1)(f) |
| Keep invoices and accounting records | A legal obligation under Romanian tax law — Art. 6(1)(c) |
6Where your data is stored
Form submissions and uploaded files are stored in Google Cloud data centres in Belgium, inside the European Union. Some providers may access data from outside the EU for support purposes; where that happens it is covered by the European Commission's Standard Contractual Clauses.
7How long we keep it
- Form submissions and uploaded files — while we are discussing or delivering your project, and for 24 months after our last contact. If you become a client, we keep them for the duration of the contract and the hosting — they are the materials your updates are made from — plus the statutory limitation period after it ends. If you tell us you are not going ahead, we delete them within 30 days.
- Outreach records — up to 12 months from the last message, or immediately if you ask us to stop contacting you (we keep only the minimum needed to honour that request).
- Email correspondence — up to 24 months, unless it forms part of a contract.
- Signed contracts — for the duration of the contract plus the statutory limitation period.
- Invoices and accounting records — for as long as Romanian tax law requires.
- Server logs — short-term, as retained by our hosting provider.
8Your rights
Under the GDPR you can ask us to:
- give you a copy of the personal data we hold about you (access);
- correct anything that is wrong or incomplete (rectification);
- delete it (erasure), where we have no overriding reason to keep it;
- restrict how we use it while a question about it is resolved;
- send it to you or another provider in a portable format;
- stop using it where we rely on legitimate interest — including all marketing contact, which we will always stop on request (objection).
Email contact@fines-software-consulting.ro and we will respond within one month. There is no charge. If you are not satisfied, you can complain to the Autoritatea Naţională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP), https://www.dataprotection.ro.
9Security
The site is served over HTTPS. Form submissions and uploaded files are held in access-controlled Google Cloud storage that only we can read, protected by server-side security rules and by Firebase App Check. Access is limited to the people who need it to do the work. No system is perfectly secure, but we take these measures seriously and will tell you and the supervisory authority if a breach is likely to put you at risk.
10Children
This is a service for businesses. It is not directed at children, and we do not knowingly collect data about anyone under 16. If you believe we have, contact us and we will delete it.
11Changes to this notice
If we change how we handle personal data, we will update this page and the date at the top. If a change materially affects you, we will tell you directly where we have a way to reach you.