Privacy policy

1. Who we are

The controller of your personal data is CLOVERHEAP SOLUTIONS STACK S.R.L. (tax identification number RO 41827723), with its registered office at Str. Lucian Blaga nr. 34, construcția 1, sat Matca, com. Matca, jud. Galați, Romania ("CloverHeap", "we"). For any question about your data, write to us at [email protected].

2. What data we process and why

When you send the contact form. We receive the data you enter: your name, email address and message, and, if you choose to fill them in, your company, phone number and the service you are interested in. We also record the language of the page from which you wrote and the date of the message. We use this data to answer your message and, if you ask for it, to discuss your project and prepare an offer.

• Legal basis: your consent, given by ticking the box in the form (Article 6(1)(a) GDPR), and, where your message concerns a possible contract, the steps you ask us to take before entering into a contract (Article 6(1)(b) GDPR).
• Your name, email address and message are needed to answer you. The other fields are optional.

When you write to us by email. We process your email address, the content of your message and any data you choose to include, in order to answer you (Article 6(1)(b) or (f) GDPR, our legitimate interest in answering the people who contact us).

To protect the website. To prevent abuse of the contact form, our server uses your IP address to limit how many messages can be sent from the same address in a short time. The IP address is kept only in the server's memory, for up to 10 minutes, and is not written to the messages we receive. Like most websites, the infrastructure that hosts the website may also record technical data such as your IP address, the date and time and the requested page, for security and troubleshooting (Article 6(1)(f) GDPR, our legitimate interest in keeping the website secure).

Statistics, only with your consent. If you accept analytics cookies, we use Google Analytics to understand how the website is used (Article 6(1)(a) GDPR). The details are in our Cookie policy.

Preferences stored on your device. Your choice of theme and your cookie choice are saved only in your browser and are not sent to us.

We do not use your data for automated decision-making or profiling, and we do not sell it.

3. Who receives your data

We share data only with providers that help us run the website and our communications, and only as far as they need it:

• the provider that hosts the website;
• the email service provider through which messages from the contact form reach us;
• Google Ireland Limited, for Google Analytics, only if you accept analytics cookies.

These providers process data on our behalf and under our instructions. We may also disclose data to public authorities when the law requires it, or to our professional advisers (for example, lawyers or accountants) under a duty of confidentiality.

4. Transfers outside the European Economic Area

Some providers, including Google, may process data outside the European Economic Area, for example in the United States. In that case, the transfer takes place under a European Commission adequacy decision, such as the EU–US Data Privacy Framework, or under the standard contractual clauses adopted by the European Commission.

5. How long we keep your data

• Contact form messages and email correspondence: for as long as we need to handle your request and follow up, and at most 2 years after our last exchange. If we enter into a contract, we keep the related correspondence for as long as the law requires for contractual and accounting records.
• IP addresses used to limit form submissions: up to 10 minutes, in the server's memory only.
• Google Analytics data: no longer than 14 months.

6. Your rights

Under the General Data Protection Regulation (EU) 2016/679 (GDPR), you have the right to:

• access your data and receive a copy of it;
• have inaccurate data corrected;
• have your data deleted;
• restrict the processing of your data;
• receive your data in a structured, commonly used format and have it transmitted to another controller;
• object to processing based on our legitimate interest;
• withdraw your consent at any time, without affecting processing that took place before. For analytics cookies, use the "Cookie settings" button at the bottom of every page.

To exercise these rights, write to us at [email protected]. We will answer within one month, which can be extended by two months for complex requests, in which case we will tell you why.

You also have the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP), www.dataprotection.ro.

7. Security

We protect your data with appropriate technical and organisational measures: the website is served over an encrypted connection (HTTPS), the data sent through the form is checked and limited on the server, and access to the messages we receive is restricted to the people who need it.

8. Children

The website is intended for businesses and is not directed at children. We do not knowingly collect data from people under 16.

9. Changes to this policy

We may update this policy when the website, our services or the law change. We will publish the new version on this page with a new "Last updated" date.

10. Contact

For any question about this policy or about your data, write to us at [email protected].