PRIVACY POLICY AND PROCESSING OF PERSONAL DATA

1. Data Controller Identity

The controller of personal data (the entity that decides the purposes and means of processing) is:

• Company name: Marchidan RO S.R.L.
• Trade Register number: J2024023169003
• Tax ID (CIF): 50560152
• VAT ID: RO52895014
• Registered office: Str. Crisului 35, Bacau
• Data protection contact email: contact@marchidan.ro
• Phone: 076600100

2. General Principles and Nature of the Website

We want to clarify the nature of our online interaction to avoid any confusion:

1. Presentation website: this website functions exclusively as a digital portfolio.
2. No online payments: we do not collect banking data (card numbers, CVV) through the website. Any financial transactions take place later, via direct bank invoicing, following private discussions.
3. Data minimization: we collect only what is strictly necessary to communicate with you.

3. What Categories of Data Do We Collect?

We process two categories of information:

A. Data you provide directly and voluntarily

This is the data you provide when you start a conversation with us about an order or collaboration:

• Identity information: first and last name.
• Contact information: phone number, email address, WhatsApp user ID.
• Billing details (customers only): home/registered address, company details (if applicable), bank account (IBAN) for processing payments by bank transfer.

B. Data collected automatically (technical information)

When you browse the website, our servers may automatically log certain standard data for security and statistics:

• IP address (Internet Protocol).
• Browser type and version.
• Device type (Desktop, Mobile, Tablet).
• Operating system.
• Date and time of access.

4. Purposes and Legal Bases of Processing

Your data is processed only for the following purposes:

1. Communication and quotations (Art. 6(1)(b) GDPR)
   • Purpose: handling requests received by phone, email, or WhatsApp, defining project details, and sending price quotations.
   • Legal basis: taking steps at the data subject’s request prior to entering into a contract.
2. Invoicing and tax compliance (Art. 6(1)(c) GDPR)
   • Purpose: issuing tax invoices for services provided, in accordance with the Fiscal Code.
   • Legal basis: compliance with a legal obligation.
3. Marketing and future updates (Art. 6(1)(a) GDPR)
   • Purpose: to keep you informed about portfolio updates, seasonal promotions, or new services.
   • Legal basis: your explicit consent.
   • Note: you can withdraw your consent at any time by sending a simple message with the text “DEZABONARE”.
4. Website security and defence of rights (Art. 6(1)(f) GDPR)
   • Purpose: protecting the website against cyberattacks and defending our rights in court, if necessary.
   • Legal basis: the controller’s legitimate interest.

5. Links to Third-Party Websites and Social Platforms

This website contains links or buttons to external platforms not owned by Marchidan RO S.R.L., including but not limited to: WhatsApp, Facebook, Instagram, LinkedIn.

Important: when you click these links and leave our website, this Privacy Policy no longer applies. We have no control over and assume no responsibility for the privacy practices of these third parties.

• For example, interaction on WhatsApp is governed by the privacy policy of WhatsApp Ireland Limited / Meta Platforms.
• We recommend reading the privacy policies of each external website you visit.

6. Data Retention

We keep your data only as long as necessary for the stated purposes:

1. Financial and accounting documents (invoices, contracts): kept for 10 years, according to Romanian tax law.
2. Marketing data: kept until you withdraw consent or request deletion.
3. General correspondence (Email/WhatsApp): if it does not result in a contract, data is deleted or anonymized within a reasonable time (usually 3 years from the last interaction), to maintain a discussion history in case you return.

7. Data Recipients

We do not sell, rent, or exchange personal data with third parties for commercial purposes. Data may be disclosed only to:

• Service providers (processors): accounting firm, hosting provider (web hosting), courier services. They are bound by strict contractual confidentiality obligations.
• Public authorities: (tax authority, police, courts) only if there is a legal obligation or an official mandate.

8. Data Security

Data security is a priority. We implemented appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including:

• SSL/TLS encryption: our website uses HTTPS to encrypt the connection between your device and our server.
• Restricted access: access to personal data is allowed only to authorised staff who need it to perform their duties (e.g., invoicing).
• Updated systems: we use up-to-date IT systems and security solutions.

However, transmission of information over the Internet is never 100% secure. While we strive to protect data, we cannot guarantee absolute security of information transmitted to our website; any transmission is at the user’s own risk.

9. Your Rights (GDPR)

As a data subject, you benefit from the following rights:

1. Access: you can request a copy of the data we hold about you.
2. Rectification: you can correct inaccurate or incomplete data.
3. Erasure: you can request deletion (“right to be forgotten”), except where the law requires us to keep it (e.g., invoices).
4. Restriction: you can request limiting processing in certain cases.
5. Portability: you have the right to receive data in a structured format.
6. Objection: you can object to processing for marketing purposes.

To exercise your rights, please contact us at: contact@marchidan.ro. We will respond within a maximum of 30 days.

10. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect legislative changes or changes in how we operate. Any changes will be displayed on this page, and the “Last updated” date at the top of the document will be revised. We encourage you to check this page periodically. Continued use of our services after changes are made constitutes acceptance of those changes.

Marchidan RO S.R.L. All rights reserved © 2026 Reg. Com. J2024023169003 | CIF: 50560152 | VAT IN: RO52895014